$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c49f0e-fb28-3a4e-bcaf-40049841e4ac.roa File: c2c49f0e-fb28-3a4e-bcaf-40049841e4ac.roa (raw, json) Hash identifier: Kbsy7BTHOTdmcq3TXmrX4Qkysxh/TKsLTdvEf9c0vIc= Subject key identifier: 3F:17:04:7B:FD:F7:ED:41:FF:01:80:AC:2D:AD:07:15:39:E4:CD:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FAD4A4D609FECCD197C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c49f0e-fb28-3a4e-bcaf-40049841e4ac.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396577 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fa:d4:a4:d6:09:fe:cc:d1:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=5bde5e7b-fc0e-4869-9bee-b22141518257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:df:d2:4e:42:69:52:44:69:19:b7:56:54: a3:79:86:d3:27:60:2f:cf:ca:65:18:cc:a9:a4:a1: 97:0d:f8:10:70:cb:00:f4:ca:48:d1:bb:c8:2c:83: af:9b:f4:0d:da:fd:86:0e:ed:aa:92:e1:27:4a:0e: 1d:8a:63:fe:5e:08:26:de:6a:af:d9:32:e3:46:c5: bd:f9:af:1a:03:1e:42:87:e7:a8:1f:38:a7:3e:8d: 08:2a:5d:7f:44:16:9b:e3:4d:7c:c8:6b:82:3f:ba: fb:ba:28:c8:13:a2:b6:77:84:17:08:fb:b9:bb:cc: 02:2e:4f:9e:07:10:0a:e3:62:5b:6f:03:50:63:d9: e1:0e:00:be:25:ef:35:12:a7:30:fe:af:2c:03:8a: 66:8c:66:6e:13:61:87:17:27:79:b2:31:59:98:e7: aa:c2:0b:3b:c5:2c:18:a2:bf:f7:1e:bf:dc:df:dc: 9d:2b:1e:ad:dd:ed:43:4c:a7:61:4d:54:89:88:2a: e2:f0:93:57:fb:10:6f:47:1e:48:84:62:7e:75:72: 44:25:e5:99:04:5d:c2:26:5c:22:b8:3b:38:aa:51: 35:ab:90:57:ff:60:42:4f:57:69:0e:f2:c4:01:9d: 9d:4d:59:c1:aa:b2:f9:c1:eb:c8:9e:c1:24:56:1f: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:17:04:7B:FD:F7:ED:41:FF:01:80:AC:2D:AD:07:15:39:E4:CD:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c49f0e-fb28-3a4e-bcaf-40049841e4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:76:0c:4e:7f:bd:41:f1:aa:10:87:b4:d8:0b:c5:0f:22:42: c0:c1:01:d0:d4:39:c4:8f:d0:2f:5c:d7:4c:70:d0:47:ed:45: 0c:f3:3d:53:dc:db:c1:c1:33:9d:9b:73:c8:70:be:39:b8:96: 8a:71:67:a7:6e:3e:ac:db:17:7e:16:92:ac:1c:8a:7a:5a:b6: d7:4e:48:ec:7f:03:39:cd:1b:e6:71:c4:e1:30:71:32:b6:9b: 65:61:65:07:cd:18:57:b5:89:32:0d:f9:ac:fe:9e:ad:8e:2a: 3f:aa:89:d6:db:5d:a5:60:89:a7:cf:81:da:19:42:ac:83:3e: 7b:9b:f8:de:1b:56:bb:e9:b9:73:d7:48:e4:89:73:dd:bc:09: 5b:fb:0a:0f:13:f8:1e:34:59:91:c6:8d:f8:ba:74:0b:d2:37: 03:f0:6c:6e:3d:75:db:03:1a:4d:6a:6b:c2:c3:06:cc:09:84: 47:83:86:68:f8:60:ac:61:9c:85:fa:88:29:de:48:96:4e:e0: 35:0e:bb:5a:c3:25:18:68:bb:12:4a:5e:72:6b:c8:75:f0:74: 01:01:34:a0:fb:e4:0f:d6:a7:c8:33:d6:f9:10:9a:4f:44:bc: 4c:ec:e3:89:73:f7:71:e4:24:2d:74:17:8b:62:aa:0c:59:c0: e8:98:91:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VvrUpNYJ/szRl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NWJkZTVlN2ItZmMwZS00ODY5LTliZWUtYjIyMTQxNTE4MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKXf0k5CaVJEaRm3VlSjeYbTJ2Avz8plGMyp pKGXDfgQcMsA9MpI0bvILIOvm/QN2v2GDu2qkuEnSg4dimP+Xggm3mqv2TLjRsW9 +a8aAx5Ch+eoHzinPo0IKl1/RBab4018yGuCP7r7uijIE6K2d4QXCPu5u8wCLk+e BxAK42JbbwNQY9nhDgC+Je81Eqcw/q8sA4pmjGZuE2GHFyd5sjFZmOeqwgs7xSwY or/3Hr/c39ydKx6t3e1DTKdhTVSJiCri8JNX+xBvRx5IhGJ+dXJEJeWZBF3CJlwi uDs4qlE1q5BX/2BCT1dpDvLEAZ2dTVnBqrL5wevInsEkVh8ZywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD8XBHv99+1B/wGArC2tBxU55M1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJjNDlmMGUtZmIyOC0z YTRlLWJjYWYtNDAwNDk4NDFlNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBndgxOf71B8aoQh7TYC8UPIkLAwQHQ1DnEj9Av XNdMcNBH7UUM8z1T3NvBwTOdm3PIcL45uJaKcWenbj6s2xd+FpKsHIp6WrbXTkjs fwM5zRvmccThMHEytptlYWUHzRhXtYkyDfms/p6tjio/qonW212lYImnz4HaGUKs gz57m/jeG1a76blz10jkiXPdvAlb+woPE/geNFmRxo34unQL0jcD8GxuPXXbAxpN amvCwwbMCYRHg4Zo+GCsYZyF+ogp3kiWTuA1DrtawyUYaLsSSl5ya8h18HQBATSg ++QP1qfIM9b5EJpPRLxM7OOJc/dx5CQtdBeLYqoMWcDomJGl -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:03 2025 by rpki-client