$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba00a434-0885-35ed-adaa-90bf3aff979d.roa File: ba00a434-0885-35ed-adaa-90bf3aff979d.roa (raw, json) Hash identifier: mzYrXIkwCYjioPRCweZCrj+EJMv/G4QQiGYh9NTnkpI= Subject key identifier: 14:87:B6:AD:BE:CE:CF:02:42:46:B1:A6:93:E1:14:B2:2A:B4:12:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FAC1259EA48F4A0F9D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba00a434-0885-35ed-adaa-90bf3aff979d.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396579 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fa:c1:25:9e:a4:8f:4a:0f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=13af5dd3-913d-401c-b043-457a5c1fcd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:bf:4b:80:de:c7:43:ea:7f:58:24:1a:93: 30:8f:24:79:23:d2:da:1e:99:69:a2:5a:42:16:e4: 97:31:06:69:07:e2:d2:5f:4d:d4:f1:3a:cd:57:5e: 60:4b:8a:d2:7f:56:8d:ce:db:bd:26:d9:0f:f1:2c: 3c:9b:45:93:71:9c:91:61:6f:12:ba:fa:bc:c3:6f: ab:f6:f4:37:86:83:fc:ad:08:96:1d:63:a4:45:b6: c3:17:f8:b8:ab:bb:9f:7a:83:e0:d2:40:1f:c4:0e: 98:39:43:3e:c7:03:5f:13:48:d3:ee:2f:41:09:3e: d0:6c:5d:c0:b9:39:71:56:dd:8e:04:d7:49:f9:a5: ee:23:8a:87:59:39:ba:40:10:e4:f3:b4:ba:58:3b: 15:d6:cf:aa:cd:55:50:06:19:f0:ec:67:a0:98:c3: 19:7f:0f:29:3e:ad:41:f0:54:e8:67:f3:9d:69:f6: 44:2e:3f:b4:de:01:b5:2d:a2:03:c0:41:6f:9c:d0: 6b:9a:a9:d4:ad:86:52:d9:c9:79:d9:8d:d1:77:cf: e0:2b:36:4d:d9:dc:0e:bb:64:59:c3:58:93:2a:04: 87:97:3a:0d:70:a8:18:e4:33:74:7c:69:23:9f:e5: f6:42:bb:2a:91:84:64:32:3b:e2:2e:61:37:9f:d1: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:87:B6:AD:BE:CE:CF:02:42:46:B1:A6:93:E1:14:B2:2A:B4:12:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba00a434-0885-35ed-adaa-90bf3aff979d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8e:6e:7d:73:ce:7a:be:ca:69:5f:9d:f2:07:a9:82:86:f5: d4:a9:e8:87:6b:7e:a7:fc:58:e6:29:c1:e1:74:a1:d3:e6:19: 6d:12:af:8c:c8:f6:7a:60:b6:76:09:15:27:d2:a7:24:4e:2e: fb:61:60:64:6c:4a:f1:35:e5:7f:ae:4a:ce:c4:5f:87:e6:30: 4a:37:4a:6b:ff:3e:72:58:dd:6f:8b:ab:3d:b1:80:f4:36:4a: d4:5e:ab:cc:41:91:d8:b1:46:4d:e0:38:3e:0d:af:cd:c5:ff: 06:8d:66:5f:8d:7a:51:12:a5:58:ef:d3:b2:59:91:95:5d:04: 05:d1:91:87:8f:40:e9:2f:aa:54:00:51:ab:03:90:b7:17:7d: 14:d8:6a:a9:0e:c0:46:e1:61:ea:0f:a5:5d:ef:3f:b9:67:39: b4:27:cf:b0:96:3a:d8:34:8a:22:a7:27:82:09:37:ec:1a:e9: e4:87:e2:72:c3:57:5b:d6:db:5a:3f:01:ac:63:be:7e:31:60: 36:f5:74:9b:87:b2:58:ee:6b:4f:df:ef:0d:f4:0b:a2:ca:3b: d0:0e:92:0a:eb:09:cc:c0:2b:e6:00:8c:f8:e4:52:c7:1a:71: 3f:f3:be:6c:c6:2d:a4:25:76:ad:69:45:cf:f7:6c:d6:38:eb: 50:bc:cd:ef -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VvrBJZ6kj0oPnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MTNhZjVkZDMtOTEzZC00MDFjLWIwNDMtNDU3YTVjMWZjZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ee/S4Dex0Pqf1gkGpMwjyR5I9LaHplpolpC FuSXMQZpB+LSX03U8TrNV15gS4rSf1aNztu9JtkP8Sw8m0WTcZyRYW8Suvq8w2+r 9vQ3hoP8rQiWHWOkRbbDF/i4q7ufeoPg0kAfxA6YOUM+xwNfE0jT7i9BCT7QbF3A uTlxVt2OBNdJ+aXuI4qHWTm6QBDk87S6WDsV1s+qzVVQBhnw7GegmMMZfw8pPq1B 8FToZ/OdafZELj+03gG1LaIDwEFvnNBrmqnUrYZS2cl52Y3Rd8/gKzZN2dwOu2RZ w1iTKgSHlzoNcKgY5DN0fGkjn+X2QrsqkYRkMjviLmE3n9H+/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBSHtq2+zs8CQkaxppPhFLIqtBJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEwMGE0MzQtMDg4NS0z NWVkLWFkYWEtOTBiZjNhZmY5NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3jm59c856vsppX53yB6mChvXUqeiHa36n/Fjm KcHhdKHT5hltEq+MyPZ6YLZ2CRUn0qckTi77YWBkbErxNeV/rkrOxF+H5jBKN0pr /z5yWN1vi6s9sYD0NkrUXqvMQZHYsUZN4Dg+Da/Nxf8GjWZfjXpREqVY79OyWZGV XQQF0ZGHj0DpL6pUAFGrA5C3F30U2GqpDsBG4WHqD6Vd7z+5Zzm0J8+wljrYNIoi pyeCCTfsGunkh+Jyw1db1ttaPwGsY75+MWA29XSbh7JY7mtP3+8N9AuiyjvQDpIK 6wnMwCvmAIz45FLHGnE/875sxi2kJXataUXP92zWOOtQvM3v -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:37 2025 by rpki-client