$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae4869b2-cc0e-3f1f-8c46-d5464c223f6e.roa File: ae4869b2-cc0e-3f1f-8c46-d5464c223f6e.roa (raw, json) Hash identifier: 3TOa0vaZvCFRnKeLx03yNH1GBi9+KSo9VON9h9hlP/g= Subject key identifier: 13:A9:15:A0:88:42:FB:4E:56:66:46:D4:46:81:33:CD:0E:E5:2B:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2115CD677776CDCCE51C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae4869b2-cc0e-3f1f-8c46-d5464c223f6e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397210 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:11:5c:d6:77:77:6c:dc:ce:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a09b1e0f-a8aa-4cf8-8894-2dbd8e2be7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:1e:a2:a3:dc:fe:07:21:cc:cf:c1:6c:28: 02:0b:45:5d:04:cb:45:9a:bd:a0:cb:e9:eb:3a:f9: c4:5e:d5:e3:1a:c9:2a:5f:19:2b:58:52:ef:0b:27: c0:05:ce:d7:19:fc:ba:e7:9a:23:13:07:0f:30:9f: 16:41:90:e9:06:4a:a6:7d:d5:e0:43:12:d7:b2:32: b0:b0:bb:61:05:34:c3:ed:4b:54:15:21:d0:a0:ef: 8e:c8:d8:e7:51:7f:4d:cd:70:38:51:91:73:70:39: a3:d0:74:cd:42:44:bb:5a:f5:d3:7e:7f:6b:64:82: ef:35:c6:3a:16:44:0b:8e:74:31:1d:24:57:3f:98: 40:2d:5c:dc:fd:55:25:79:9a:c8:42:9f:f2:a9:81: 65:2c:ff:d3:03:e9:6f:48:dc:2b:14:14:01:1c:13: 13:0e:1c:50:d3:91:8c:f9:68:72:63:38:bf:3e:66: 8d:7f:5e:ce:88:26:31:18:54:cc:61:59:55:72:92: ab:3d:b8:94:23:ad:aa:94:ea:93:61:10:7d:4f:9e: d6:1c:e6:9c:ec:56:30:19:93:b9:33:d8:86:ad:41: a1:08:34:59:4b:47:c5:94:bc:2c:25:36:7a:02:42: b7:6a:9c:95:6c:5f:55:b9:c1:d1:7a:05:9e:3d:27: c3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:15:A0:88:42:FB:4E:56:66:46:D4:46:81:33:CD:0E:E5:2B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae4869b2-cc0e-3f1f-8c46-d5464c223f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:83:40:1d:40:60:4a:cd:36:62:2a:13:be:cd:17:cf:c9:e6: 4c:e0:5b:70:92:76:b4:de:29:ac:cb:33:9d:af:46:c4:fc:44: 1f:76:80:aa:bf:40:a6:f7:dd:35:d8:3f:69:10:35:1a:47:6a: 87:7b:57:d0:69:00:f7:8f:da:7f:1c:5b:c3:0e:56:e7:06:51: 90:6e:11:e6:d3:1f:6c:a5:97:8c:f9:f1:3c:06:4c:61:5f:40: 19:fc:7a:0e:1a:1c:2c:76:ca:e3:78:0f:38:97:02:1a:d2:dd: 3b:e8:45:c3:b4:3c:e4:a9:80:4a:6b:fc:15:6a:53:ac:36:cf: 55:e8:ae:dd:d8:ee:ca:6d:14:93:36:9a:cd:12:77:0b:c0:fb: 81:16:35:2e:72:3c:4d:89:72:a4:bb:e2:db:66:18:4c:93:b1: 04:33:79:49:37:1e:b1:a7:64:77:f0:50:a4:be:5e:41:9c:af: 29:1a:db:ec:a5:95:34:32:80:0d:59:3d:15:b4:3f:3b:3f:3f: 3a:4c:d7:5b:35:1e:e1:18:10:a6:d0:2e:c8:13:7e:05:e7:bd: 57:28:8d:d8:43:d5:b1:c4:c3:45:ae:f1:72:ee:52:17:70:7f: 68:50:99:7d:1e:ad:cf:8c:b9:a7:77:72:fd:65:d8:08:dd:25: 66:39:91:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hFc1nd3bNzOUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTA5YjFlMGYtYThhYS00Y2Y4LTg4OTQtMmRiZDhlMmJlN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIeoqPc/gchzM/BbCgCC0VdBMtFmr2gy+nr OvnEXtXjGskqXxkrWFLvCyfABc7XGfy655ojEwcPMJ8WQZDpBkqmfdXgQxLXsjKw sLthBTTD7UtUFSHQoO+OyNjnUX9NzXA4UZFzcDmj0HTNQkS7WvXTfn9rZILvNcY6 FkQLjnQxHSRXP5hALVzc/VUleZrIQp/yqYFlLP/TA+lvSNwrFBQBHBMTDhxQ05GM +WhyYzi/PmaNf17OiCYxGFTMYVlVcpKrPbiUI62qlOqTYRB9T57WHOac7FYwGZO5 M9iGrUGhCDRZS0fFlLwsJTZ6AkK3apyVbF9VucHRegWePSfDgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBOpFaCIQvtOVmZG1EaBM80O5SsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU0ODY5YjItY2MwZS0z ZjFmLThjNDYtZDU0NjRjMjIzZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6DQB1AYErNNmIqE77NF8/J5kzgW3CSdrTeKazLM52vRsT8RB92 gKq/QKb33TXYP2kQNRpHaod7V9BpAPeP2n8cW8MOVucGUZBuEebTH2yll4z58TwG TGFfQBn8eg4aHCx2yuN4DziXAhrS3TvoRcO0POSpgEpr/BVqU6w2z1Xort3Y7spt FJM2ms0SdwvA+4EWNS5yPE2JcqS74ttmGEyTsQQzeUk3HrGnZHfwUKS+XkGcryka 2+yllTQygA1ZPRW0Pzs/PzpM11s1HuEYEKbQLsgTfgXnvVcojdhD1bHEw0Wu8XLu Uhdwf2hQmX0erc+Muad3cv1l2AjdJWY5kW0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:12 2025 by rpki-client