$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6b96fd9-424c-31b2-ad87-3b3ad78c998a.roa File: c6b96fd9-424c-31b2-ad87-3b3ad78c998a.roa (raw, json) Hash identifier: /B5dOEW3owNi11wUcVQV1R+EgL0dgFFehwVl6uJTONU= Subject key identifier: C5:C3:1A:FC:FC:CE:59:E5:C7:88:F6:B9:9E:66:99:D1:E1:9C:D7:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E792D0A7329F2B071F5D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6b96fd9-424c-31b2-ad87-3b3ad78c998a.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396589 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:92:d0:a7:32:9f:2b:07:1f:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=f878a75d-f973-4faf-b04f-6302275a72f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:10:d0:07:a0:05:67:4d:82:c7:ba:61:1f: dd:d7:1e:79:69:2a:3d:89:17:ff:d0:1e:3d:10:3a: 7f:1e:f4:6c:b9:8e:ed:d0:c6:59:3e:b1:10:55:bd: ea:e5:d8:28:39:a7:a2:df:71:3e:76:0c:4f:08:6e: 50:54:bf:03:03:9d:a1:57:ba:85:31:24:63:36:98: 7b:ba:16:bd:d7:ca:57:4b:15:69:d9:c2:93:b6:34: c6:ae:29:cc:6d:d7:0b:ec:b7:4c:42:d2:ea:a6:e5: 42:27:31:aa:76:2b:e0:e4:83:f5:46:76:9a:9e:64: bc:72:cf:ec:8d:f9:1e:1a:a1:c7:9f:dc:26:9c:d5: 4d:01:74:90:7b:2f:16:e4:e4:75:81:13:41:2c:49: a5:5e:3a:fc:a6:a0:84:30:03:b7:b4:56:a2:19:f3: f0:cb:e7:f7:c9:bb:8c:d1:ce:0c:e8:83:f0:33:17: 68:74:88:4d:1e:c7:f9:ca:67:4b:0b:d4:af:95:cd: 57:bf:3b:f3:1e:7b:5a:68:86:a6:21:de:05:f3:79: 3f:49:36:5f:41:73:65:73:ac:7b:a6:6a:10:7d:36: 9f:5c:36:e2:cb:a0:25:ec:f4:e1:fa:f2:cc:c2:09: 82:4c:c3:1e:39:95:12:0c:20:79:d2:6d:5c:c0:04: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:1A:FC:FC:CE:59:E5:C7:88:F6:B9:9E:66:99:D1:E1:9C:D7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6b96fd9-424c-31b2-ad87-3b3ad78c998a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:66:1a:2f:89:63:9b:fc:50:93:e2:c7:11:36:40:c5:ee:e6: 67:23:25:1f:29:d7:95:a2:f3:9d:48:c6:73:77:4c:7f:5c:97: 9b:04:1b:06:c5:b3:cc:eb:c6:74:9b:c8:97:38:09:95:b5:81: 8f:41:f2:bf:36:01:d5:3d:0e:4d:68:3f:e7:31:79:fa:cb:d3: b5:e2:a6:10:fa:0c:c3:b0:c9:43:69:30:a8:15:70:9c:42:c1: bc:4d:3c:81:a1:fc:d9:ec:77:21:51:5b:d4:8f:77:bf:a2:d3: 0f:fc:cd:7c:74:a2:8a:78:3a:e0:75:a1:63:46:d9:ad:50:df: 64:bc:8f:d6:7c:ae:5f:b8:8d:6f:d3:77:77:71:17:d8:d7:f5: bb:f2:40:b9:e9:3a:5f:43:81:92:ff:e0:75:20:bf:60:92:8c: 8c:69:f9:90:85:e9:72:9a:e5:2d:5c:a8:96:db:b7:ac:5a:95: a8:02:48:98:8a:29:68:68:aa:41:c8:dc:14:43:f6:27:ef:90: 41:45:1e:f4:26:bd:4c:83:99:ce:86:fa:40:eb:82:4c:37:0d: 07:6a:cf:40:cc:0f:86:b5:b7:b7:f7:77:92:ad:c4:23:47:d9: 2e:cd:39:c4:e3:a6:7f:16:50:96:c5:12:b0:32:72:af:15:ad: c6:96:99:89 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55LQpzKfKwcfXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Zjg3OGE3NWQtZjk3My00ZmFmLWIwNGYtNjMwMjI3NWE3MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY8Q0AegBWdNgse6YR/d1x55aSo9iRf/0B49 EDp/HvRsuY7t0MZZPrEQVb3q5dgoOaei33E+dgxPCG5QVL8DA52hV7qFMSRjNph7 uha918pXSxVp2cKTtjTGrinMbdcL7LdMQtLqpuVCJzGqdivg5IP1RnaanmS8cs/s jfkeGqHHn9wmnNVNAXSQey8W5OR1gRNBLEmlXjr8pqCEMAO3tFaiGfPwy+f3ybuM 0c4M6IPwMxdodIhNHsf5ymdLC9Svlc1XvzvzHntaaIamId4F83k/STZfQXNlc6x7 pmoQfTafXDbiy6Al7PTh+vLMwgmCTMMeOZUSDCB50m1cwAQSNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMXDGvz8zlnlx4j2uZ5mmdHhnNeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzZiOTZmZDktNDI0Yy0z MWIyLWFkODctM2IzYWQ3OGM5OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7ZhoviWOb/FCT4scRNkDF7uZnIyUfKdeVovOd SMZzd0x/XJebBBsGxbPM68Z0m8iXOAmVtYGPQfK/NgHVPQ5NaD/nMXn6y9O14qYQ +gzDsMlDaTCoFXCcQsG8TTyBofzZ7HchUVvUj3e/otMP/M18dKKKeDrgdaFjRtmt UN9kvI/WfK5fuI1v03d3cRfY1/W78kC56TpfQ4GS/+B1IL9gkoyMafmQhelymuUt XKiW27esWpWoAkiYiiloaKpByNwUQ/Yn75BBRR70Jr1Mg5nOhvpA64JMNw0Has9A zA+Gtbe393eSrcQjR9kuzTnE46Z/FlCWxRKwMnKvFa3GlpmJ -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:38 2025 by rpki-client