$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa File: a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa (raw, json) Hash identifier: pz/bgWqhfpfWuNpSpG/t7Zc5G+E/c6o9C4T08cHZo0M= Subject key identifier: AB:1B:FA:60:8F:71:C9:CD:16:D5:C7:32:2E:DC:08:F0:AF:B2:44:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E793DC7B1358BCDB7E8C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 36627 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:93:dc:7b:13:58:bc:db:7e:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d6782cbe-f2cf-45e6-897d-e1ec27e494ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:65:9e:1c:0f:ec:8f:7e:cc:69:ee:db:ce: 46:0c:01:d0:98:17:b8:b7:60:67:15:57:38:1d:7c: 15:2f:6b:d6:b2:d3:dc:34:2b:cd:a4:7d:6a:71:17: 1f:ba:e4:55:fa:ae:53:15:b1:ef:10:a4:1c:86:e2: 7e:8e:09:f0:e3:e6:6e:fb:e8:00:cc:1c:db:f7:09: 6c:76:c5:df:98:4f:51:5b:48:a8:e9:af:ee:47:15: 33:5d:8d:90:b4:a9:4b:b5:d6:6e:54:a3:d6:39:d6: 2a:b7:4e:7d:72:6a:46:7b:38:5b:86:51:8e:b6:2a: ba:56:3f:eb:73:1a:89:eb:8f:53:0c:b1:e7:98:3b: ff:d4:97:db:d5:81:59:7d:a6:c8:1f:b0:70:37:b1: 75:8e:8d:04:d5:23:f4:1c:40:14:8b:85:03:b8:3e: 61:f9:be:43:9c:7b:95:81:d4:ba:ed:f3:04:48:c2: 58:aa:b3:cc:74:f6:71:5c:0e:54:ea:7d:6f:b3:03: 43:bf:5d:79:6b:60:13:16:e4:23:4f:e8:4b:32:7d: 57:cc:2b:b4:e0:36:97:7c:b0:d8:17:d4:f5:66:05: e2:02:8d:3a:7c:65:0c:3e:46:c9:75:da:f9:13:0d: 72:33:93:54:03:a9:29:11:78:67:64:99:20:48:39: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1B:FA:60:8F:71:C9:CD:16:D5:C7:32:2E:DC:08:F0:AF:B2:44:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a3:58:45:d4:dc:15:8d:e4:38:14:cb:3b:b9:e2:67:cf:84: 08:6a:d2:31:3f:1c:d7:ff:de:b6:5d:17:36:84:29:ed:b1:75: 73:a6:c7:46:73:2f:b4:c6:58:bb:ff:db:4f:8c:5f:dd:cc:0b: c6:42:c0:4d:3c:00:89:b2:27:17:65:7f:39:0a:39:9d:51:d7: 87:85:3b:ac:3f:64:95:fe:6d:17:3a:57:c5:c7:bf:0a:24:12: 97:07:c2:de:10:2a:55:c4:e5:a5:93:4c:28:0f:3a:39:db:4c: bd:9e:4e:91:a9:a7:9b:ee:f2:e7:95:26:85:b6:42:73:23:60: 0d:30:e8:7c:5b:51:cf:f9:cf:ca:03:7e:13:d4:00:e8:34:ab: 47:18:bf:f4:43:b1:f3:b6:cb:07:8b:52:d0:a3:20:fb:04:7c: f1:f6:35:22:bf:61:bf:73:0f:6f:12:39:b6:57:20:bb:f7:2f: 29:44:12:81:e5:06:89:70:3d:13:0b:66:7d:0d:24:01:4e:aa: f7:9c:58:32:46:9e:f0:c2:c8:0e:37:87:87:e4:d6:c2:72:8d: 44:6a:97:57:66:a3:27:14:c7:f8:dd:fe:d8:90:a8:97:b3:50: a5:14:49:ed:a4:61:81:dc:ba:25:72:d7:5b:50:a9:5a:6f:de: 5b:c9:a9:77 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55PcexNYvNt+jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDY3ODJjYmUtZjJjZi00NWU2LTg5N2QtZTFlYzI3ZTQ5NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszFlnhwP7I9+zGnu285GDAHQmBe4t2BnFVc4 HXwVL2vWstPcNCvNpH1qcRcfuuRV+q5TFbHvEKQchuJ+jgnw4+Zu++gAzBzb9wls dsXfmE9RW0io6a/uRxUzXY2QtKlLtdZuVKPWOdYqt059cmpGezhbhlGOtiq6Vj/r cxqJ649TDLHnmDv/1Jfb1YFZfabIH7BwN7F1jo0E1SP0HEAUi4UDuD5h+b5DnHuV gdS67fMESMJYqrPMdPZxXA5U6n1vswNDv115a2ATFuQjT+hLMn1XzCu04DaXfLDY F9T1ZgXiAo06fGUMPkbJddr5Ew1yM5NUA6kpEXhnZJkgSDnU9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKsb+mCPccnNFtXHMi7cCPCvskSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTliNDJkNGYtN2Y4Yi0z YzE4LWE4YjEtZjM3ZTcyMjNkOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAEo1hF1NwVjeQ4FMs7ueJnz4QIatIxPxzX/962 XRc2hCntsXVzpsdGcy+0xli7/9tPjF/dzAvGQsBNPACJsicXZX85CjmdUdeHhTus P2SV/m0XOlfFx78KJBKXB8LeECpVxOWlk0woDzo520y9nk6Rqaeb7vLnlSaFtkJz I2ANMOh8W1HP+c/KA34T1ADoNKtHGL/0Q7HztssHi1LQoyD7BHzx9jUiv2G/cw9v Ejm2VyC79y8pRBKB5QaJcD0TC2Z9DSQBTqr3nFgyRp7wwsgON4eH5NbCco1EapdX ZqMnFMf43f7YkKiXs1ClFEntpGGB3LolctdbUKlab95byal3 -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:27 2025 by rpki-client