$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa File: ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa (raw, json) Hash identifier: ZAlcZogeLbkr5r4SQrh23ZRA3jZb7+qIwmZcIfuT+PA= Subject key identifier: A5:C2:F8:E8:68:09:21:92:DF:09:84:12:57:AF:D2:6B:C6:04:89:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201E9A1DA34E87A3BDEA940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396608 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e9:a1:da:34:e8:7a:3b:de:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=457f297d-bb23-41ff-9011-3a159caa81a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:f4:f8:bf:2a:4d:87:57:cd:2a:69:af:ac: b9:2b:19:b2:f8:d2:27:12:74:2d:8c:98:f3:c6:b1: 02:66:39:fa:96:7e:92:61:3d:43:07:c3:02:73:29: f3:5b:36:06:f7:ee:bd:8f:da:47:30:96:23:46:80: cb:ef:41:83:23:cb:0d:ac:5f:0c:e6:35:28:9d:76: 18:a6:b9:ed:e9:a2:7e:c9:f5:ca:9c:38:db:6b:51: 9e:e5:49:01:3f:d5:5e:e2:93:47:b1:80:07:4c:13: ea:9d:ff:72:1b:f7:bd:12:e6:f5:08:c0:1b:7c:b6: 48:71:a9:b1:7d:f0:51:eb:ee:61:9a:d5:7e:cd:97: 3d:2f:0e:20:59:ce:be:6b:1f:45:fb:bc:22:72:eb: 01:aa:78:27:22:e0:27:13:cb:42:75:be:43:d2:9d: e5:66:d0:78:a3:c7:f2:66:30:e8:e0:e5:e6:ab:0e: b2:f9:a7:9a:f3:20:fb:e3:b7:98:11:b2:ae:fb:bb: c9:5e:87:d4:3b:c4:ed:a7:c1:46:be:44:2d:28:87: a6:a3:4c:11:e2:b6:17:67:8d:57:66:49:04:68:d8: 50:d8:1b:4b:46:2d:f2:21:cf:e1:22:39:eb:98:87: 8b:d8:a4:d9:d7:93:a0:c1:70:41:12:a9:5d:c6:a3: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C2:F8:E8:68:09:21:92:DF:09:84:12:57:AF:D2:6B:C6:04:89:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:18:f4:09:99:a0:30:c6:fa:48:62:7e:2c:f4:f3:1a:9c:e0: a6:5d:70:62:af:fc:02:6d:b7:d4:fa:ae:fa:29:5f:a6:86:d5: 1e:24:44:ec:f2:24:ff:35:da:86:c8:b3:31:f6:c0:a2:a1:04: 91:6b:30:da:b9:52:f4:9b:73:02:b2:3a:9d:24:e7:e5:e4:cd: fb:32:8c:b4:7e:0b:db:62:a9:d5:fe:96:75:33:a8:89:74:30: bf:fb:65:e7:82:78:69:d4:4f:78:12:60:38:68:1d:62:9c:07: 8b:0f:2a:03:13:6f:c2:aa:ba:38:b3:9b:ca:41:5d:43:b7:06: 71:c5:5b:d2:fe:67:c3:6f:71:9a:97:42:ca:ad:5a:f4:28:03: a9:35:5f:96:66:db:96:5a:19:17:36:e3:03:ac:47:84:09:a1: 1e:02:50:f4:56:96:74:1d:84:88:e5:c2:41:65:57:7c:9f:4f: f4:1d:48:95:9c:d4:a7:94:f1:48:17:28:99:1a:45:e6:8e:a5: 73:ea:ef:da:f5:8e:fd:77:1e:17:2e:41:71:bd:33:a0:cf:af: 51:c6:8a:41:e4:30:94:0e:00:c8:a5:a1:c3:4a:a3:99:9a:5d: 4b:d8:49:78:0b:50:79:a5:6d:59:d5:d7:80:96:ce:c2:87:95: c6:1d:6c:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAemh2jToejveqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDU3ZjI5N2QtYmIyMy00MWZmLTkwMTEtM2ExNTljYWE4MWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV30+L8qTYdXzSppr6y5Kxmy+NInEnQtjJjz xrECZjn6ln6SYT1DB8MCcynzWzYG9+69j9pHMJYjRoDL70GDI8sNrF8M5jUonXYY prnt6aJ+yfXKnDjba1Ge5UkBP9Ve4pNHsYAHTBPqnf9yG/e9Eub1CMAbfLZIcamx ffBR6+5hmtV+zZc9Lw4gWc6+ax9F+7wicusBqngnIuAnE8tCdb5D0p3lZtB4o8fy ZjDo4OXmqw6y+aea8yD747eYEbKu+7vJXofUO8Ttp8FGvkQtKIemo0wR4rYXZ41X ZkkEaNhQ2BtLRi3yIc/hIjnrmIeL2KTZ15OgwXBBEqldxqO2NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKXC+OhoCSGS3wmEElev0mvGBInGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE0ZTcxYzAtOWRiYS0z ZDk3LTliMzgtNzRkNzFkZjZhMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJAY9AmZoDDG+khifiz08xqc4KZdcGKv/AJtt9T6rvopX6aG1R4k ROzyJP812obIszH2wKKhBJFrMNq5UvSbcwKyOp0k5+XkzfsyjLR+C9tiqdX+lnUz qIl0ML/7ZeeCeGnUT3gSYDhoHWKcB4sPKgMTb8Kqujizm8pBXUO3BnHFW9L+Z8Nv cZqXQsqtWvQoA6k1X5Zm25ZaGRc24wOsR4QJoR4CUPRWlnQdhIjlwkFlV3yfT/Qd SJWc1KeU8UgXKJkaReaOpXPq79r1jv13HhcuQXG9M6DPr1HGikHkMJQOAMilocNK o5maXUvYSXgLUHmlbVnV14CWzsKHlcYdbCk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:51 2025 by rpki-client