$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d655471-4904-3da8-afd8-b0d9e9a389ec.roa File: 8d655471-4904-3da8-afd8-b0d9e9a389ec.roa (raw, json) Hash identifier: qIvT6awqWf1mcZcBwh6drfh0lghDT8YkSUzAaBqmj/I= Subject key identifier: 25:43:C8:35:FA:A3:4D:C2:C4:C2:96:FC:F9:38:BB:51:F7:6D:4F:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7902514EE7BA598F1B400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d655471-4904-3da8-afd8-b0d9e9a389ec.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396554 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:90:25:14:ee:7b:a5:98:f1:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=04863e81-564d-475f-8bf9-339143ee510c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:50:7b:49:fe:d1:60:19:28:36:eb:05:e7: cb:8a:d4:3b:ff:dc:f8:2f:7f:63:44:db:79:10:bd: ae:dc:19:47:6a:eb:16:39:ea:b2:42:46:d9:d5:ae: 04:f4:eb:de:ec:8b:76:86:72:c8:bb:cb:a2:db:0c: c6:bf:f9:e3:6a:da:ae:05:78:b9:14:1f:2a:11:fc: 29:32:92:f8:40:db:b9:b3:02:dc:10:dc:6e:58:54: 17:44:c7:b4:c4:07:59:3f:a3:fc:ca:a0:2e:ef:13: 5d:e7:5f:32:f1:b5:6d:63:70:0b:f2:e0:5e:9b:9c: 19:f2:a5:2f:dc:77:1e:83:9c:d4:8d:ff:83:83:f2: ee:d9:75:a0:1e:11:bd:d4:4a:06:f0:57:f2:7f:98: 82:f8:22:4b:47:eb:79:ed:86:22:dc:27:70:24:3b: 76:80:03:37:44:08:fa:42:18:2c:23:02:ae:c4:b2: 70:8a:0f:07:a4:8b:4e:fe:ae:4a:56:1c:e7:dc:53: 77:41:42:8a:21:90:b5:e1:b4:02:14:a5:a8:1c:e4: 34:72:b0:79:30:ec:67:5a:da:15:43:5f:79:0c:af: ad:f6:7b:54:f5:48:6c:44:f2:52:24:d9:ae:93:94: 5f:a6:3f:14:85:38:6c:7d:47:6d:31:5f:c2:6c:79: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:43:C8:35:FA:A3:4D:C2:C4:C2:96:FC:F9:38:BB:51:F7:6D:4F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d655471-4904-3da8-afd8-b0d9e9a389ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:95:77:21:97:c0:75:23:b5:73:1e:09:0a:98:7f:5f:ac:cd: a9:b3:c8:93:81:a5:8a:aa:2e:c8:2a:79:84:5e:2d:85:4e:f9: 8b:79:8f:81:08:8d:77:1c:4d:ef:63:e2:e2:dc:51:4e:91:34: c7:39:bd:72:8c:71:62:2e:31:78:ee:c3:d3:7f:f0:87:ab:38: cf:6a:cc:56:77:d7:45:fb:af:27:4b:77:d0:98:f5:74:12:dd: de:e6:71:a6:1d:00:74:24:a1:76:ef:de:48:04:23:76:ca:97: e5:66:60:5e:68:25:be:fb:dd:7d:de:c9:48:2c:3d:be:1a:2b: e2:67:2a:44:eb:57:60:00:3d:cd:ed:31:39:95:1e:e1:06:bc: 51:c5:49:0b:f5:9b:56:f3:b3:d0:67:2e:9e:42:ec:41:85:6e: d5:5a:b7:ec:a6:a1:5e:02:60:f7:50:f6:a5:cc:f5:ed:9d:e4: fd:21:4f:3d:88:c9:a8:14:5c:20:b6:11:f6:62:e3:25:e0:f9: 43:c3:81:46:eb:95:81:79:94:e9:60:17:28:b5:ea:37:b1:9b: de:27:22:60:19:4d:66:38:b7:b5:51:30:de:83:0e:d5:7f:ba: c0:01:b4:a8:78:44:e2:68:24:6f:eb:0d:b2:64:24:e6:8c:ef: d3:5c:e5:3b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55AlFO57pZjxtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDQ4NjNlODEtNTY0ZC00NzVmLThiZjktMzM5MTQzZWU1MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBZQe0n+0WAZKDbrBefLitQ7/9z4L39jRNt5 EL2u3BlHausWOeqyQkbZ1a4E9Ove7It2hnLIu8ui2wzGv/njatquBXi5FB8qEfwp MpL4QNu5swLcENxuWFQXRMe0xAdZP6P8yqAu7xNd518y8bVtY3AL8uBem5wZ8qUv 3Hceg5zUjf+Dg/Lu2XWgHhG91EoG8Ffyf5iC+CJLR+t57YYi3CdwJDt2gAM3RAj6 QhgsIwKuxLJwig8HpItO/q5KVhzn3FN3QUKKIZC14bQCFKWoHOQ0crB5MOxnWtoV Q195DK+t9ntU9UhsRPJSJNmuk5Rfpj8UhThsfUdtMV/CbHnW5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCVDyDX6o03CxMKW/Pk4u1H3bU+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ2NTU0NzEtNDkwNC0z ZGE4LWFmZDgtYjBkOWU5YTM4OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAolXchl8B1I7VzHgkKmH9frM2ps8iTgaWKqi7I KnmEXi2FTvmLeY+BCI13HE3vY+Li3FFOkTTHOb1yjHFiLjF47sPTf/CHqzjPasxW d9dF+68nS3fQmPV0Et3e5nGmHQB0JKF2795IBCN2ypflZmBeaCW++9193slILD2+ GiviZypE61dgAD3N7TE5lR7hBrxRxUkL9ZtW87PQZy6eQuxBhW7VWrfspqFeAmD3 UPalzPXtneT9IU89iMmoFFwgthH2YuMl4PlDw4FG65WBeZTpYBcoteo3sZveJyJg GU1mOLe1UTDegw7Vf7rAAbSoeETiaCRv6w2yZCTmjO/TXOU7 -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:35 2025 by rpki-client