$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa File: 7fba7c1b-3af4-3956-9c22-38531dac1222.roa (raw, json) Hash identifier: VOp+hwz7y7L6gYc+RevD23Nw6DtFrBiDN67A2WI217Y= Subject key identifier: 46:8F:04:18:E7:34:52:18:01:57:90:1C:2E:90:97:29:88:76:CC:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201E776BACA8766ACA4F480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 40647 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e7:76:ba:ca:87:66:ac:a4:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=1bb5e0ab-9c05-4650-8131-eee9dc8ff4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:4d:a7:c5:35:5d:e7:a7:6c:b6:74:77:39: a1:29:b2:73:c1:0d:93:0d:7e:4b:03:68:76:f1:30: ce:7a:54:b4:40:88:ef:56:a6:f2:2c:58:38:a5:3b: 9a:67:86:06:03:10:64:97:3d:75:c1:f5:b7:39:74: 2f:60:bc:90:c0:af:7e:e4:ca:5c:fc:24:f0:f2:15: 18:9c:59:1f:8d:9f:f7:80:5c:95:a2:6f:a4:d9:ac: 57:8b:48:f8:f1:fd:3b:a9:b3:b6:b9:44:b4:64:c4: 5f:64:4e:c9:1d:17:75:36:12:e1:78:27:d0:49:04: d7:a2:7f:fa:56:1d:21:11:d2:8f:c4:01:1f:00:f5: 6b:47:06:ab:3c:2c:19:86:c4:af:bc:26:ce:da:1c: 67:c2:35:91:e2:6a:4b:f1:f1:71:85:c5:61:af:38: 56:4f:df:48:3e:a9:3c:6d:1c:3e:d1:2b:3b:ba:ca: de:13:68:79:47:43:c9:00:14:74:de:a4:08:2a:44: 59:dc:53:38:ba:ab:14:f7:6a:79:91:55:64:f4:87: f5:b0:1a:75:76:dd:a2:f8:b4:53:9b:d5:9c:db:17: d8:69:5c:1d:c8:7e:0c:4c:c7:c7:c4:bc:73:e9:42: 24:0a:be:16:da:6d:dc:81:b2:11:f8:6f:26:83:69: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8F:04:18:E7:34:52:18:01:57:90:1C:2E:90:97:29:88:76:CC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5d:e0:81:90:7f:2c:56:81:77:14:d7:2d:17:8c:27:89:ec: 9b:1f:91:48:57:49:1a:fb:10:11:55:4c:2d:1a:89:30:bb:72: 75:6a:6d:d1:64:8f:8c:0d:c3:9b:cd:7a:b7:f2:d3:cc:d6:78: 4f:66:0d:71:75:0c:8a:ac:6c:c0:0f:81:52:0f:e4:f4:73:88: 07:dc:fa:77:ec:4a:e4:c3:ed:78:d4:18:7a:eb:bd:90:44:28: 80:49:40:99:a3:3a:c8:d7:9b:34:ce:c7:70:18:91:a2:0d:c7: b6:db:63:33:75:81:f1:9b:d4:29:80:54:1c:3a:e1:f5:62:02: a0:54:58:5e:68:44:86:62:fa:23:06:b4:5e:85:43:c4:c6:5c: 96:c7:08:a5:02:02:3c:aa:88:db:24:b6:7d:f0:b0:c1:d7:f3: dd:9e:5c:78:cf:94:e4:20:cb:22:dc:84:bf:68:37:9c:cb:11: 36:19:5c:99:02:4d:8c:24:f4:45:46:16:fe:96:11:2a:5c:4b: 9a:f3:81:6f:19:db:1e:84:ad:1a:51:ef:e0:c5:57:06:3c:2d: b5:04:94:08:96:4e:d3:2d:9e:33:68:fe:f7:fa:28:f8:34:49: df:27:3c:53:c1:c0:7d:7a:0c:ba:b5:10:22:04:69:16:b6:55: 1d:53:91:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAed2usqHZqyk9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWJiNWUwYWItOWMwNS00NjUwLTgxMzEtZWVlOWRjOGZmNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHxNp8U1XeenbLZ0dzmhKbJzwQ2TDX5LA2h2 8TDOelS0QIjvVqbyLFg4pTuaZ4YGAxBklz11wfW3OXQvYLyQwK9+5Mpc/CTw8hUY nFkfjZ/3gFyVom+k2axXi0j48f07qbO2uUS0ZMRfZE7JHRd1NhLheCfQSQTXon/6 Vh0hEdKPxAEfAPVrRwarPCwZhsSvvCbO2hxnwjWR4mpL8fFxhcVhrzhWT99IPqk8 bRw+0Ss7usreE2h5R0PJABR03qQIKkRZ3FM4uqsU92p5kVVk9If1sBp1dt2i+LRT m9Wc2xfYaVwdyH4MTMfHxLxz6UIkCr4W2m3cgbIR+G8mg2lV5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaPBBjnNFIYAVeQHC6QlymIdswRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2ZiYTdjMWItM2FmNC0z OTU2LTljMjItMzg1MzFkYWMxMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGld4IGQfyxWgXcU1y0XjCeJ7JsfkUhXSRr7EBFVTC0aiTC7cnVq bdFkj4wNw5vNerfy08zWeE9mDXF1DIqsbMAPgVIP5PRziAfc+nfsSuTD7XjUGHrr vZBEKIBJQJmjOsjXmzTOx3AYkaINx7bbYzN1gfGb1CmAVBw64fViAqBUWF5oRIZi +iMGtF6FQ8TGXJbHCKUCAjyqiNsktn3wsMHX892eXHjPlOQgyyLchL9oN5zLETYZ XJkCTYwk9EVGFv6WESpcS5rzgW8Z2x6ErRpR7+DFVwY8LbUElAiWTtMtnjNo/vf6 KPg0Sd8nPFPBwH16DLq1ECIEaRa2VR1TkYY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:45 2025 by rpki-client