$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa File: c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa (raw, json) Hash identifier: MT99fefrGNATE2dho6ArAIojIJLAydXCTmP/AEiAavs= Subject key identifier: E1:36:34:D6:F4:0D:F5:42:0D:E2:9E:AE:F6:76:A7:50:5C:22:1C:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201FC9EDDD0AA56DE6EE680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 40717 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fc:9e:dd:d0:aa:56:de:6e:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=cbc7be16-b5ba-482e-bb3b-614aa8c26141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ac:86:92:40:e9:18:dc:25:dd:f4:50:c5:af: 9c:71:59:64:0d:d9:aa:b7:81:d8:e4:b3:7e:ec:98: 0c:c0:27:c3:9d:e8:c3:fa:25:a0:97:a9:50:3a:b5: 90:e8:e0:1c:9c:97:32:ef:85:d4:78:cf:f4:d8:88: bb:11:28:20:05:2f:cd:e9:62:ed:d3:0f:f6:2d:55: 4c:c6:8f:d4:8e:39:21:b8:c4:1f:6e:86:24:9a:b1: af:c7:88:03:53:ab:e4:12:43:1b:d0:1d:3c:76:f2: e5:fd:e6:28:c7:3f:eb:e7:af:27:d9:17:66:9c:58: c9:14:2d:02:96:a2:85:50:1b:96:f2:f5:b3:e5:88: a7:05:74:62:56:c3:56:ea:ea:20:ac:24:9e:3f:10: a3:15:6c:cc:41:5f:74:4a:68:2b:7b:fc:af:bb:d6: ec:3d:a7:13:ff:c6:7d:15:64:83:08:88:e1:02:01: f7:00:e7:a2:aa:54:57:55:3e:d9:fc:d6:2e:bd:be: 40:f5:a3:c4:3f:83:90:85:33:88:cf:dd:17:04:2b: 34:8b:4b:56:24:e4:47:b7:ec:eb:bc:c5:93:32:92: aa:5d:d1:27:32:d1:4c:4b:01:2c:b4:91:3a:83:36: 5f:56:36:fe:99:e0:dc:89:35:78:f4:00:fc:b6:34: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:36:34:D6:F4:0D:F5:42:0D:E2:9E:AE:F6:76:A7:50:5C:22:1C:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:45:88:36:fd:ab:08:50:6c:6f:f1:ec:c0:28:df:d7:3e:40: 09:c1:4c:31:97:b1:68:b2:8e:e6:1b:c8:d4:dc:46:55:e2:ba: 9b:f8:65:ad:2e:47:f5:e1:e0:c4:10:cb:ec:86:55:93:9d:9c: bd:75:d8:5a:ac:a3:e8:fc:e3:0c:9a:4d:0b:4c:41:c5:c8:2e: 54:13:b2:cf:49:54:5a:9d:f8:9a:eb:a6:48:ac:69:71:07:9a: ca:f3:f8:c8:0a:bd:89:1f:b3:96:c0:7a:c2:6f:fc:00:a0:ad: 3b:e0:8c:3c:1d:51:34:1d:fa:54:68:d4:b9:00:6c:25:b8:99: 58:fa:6d:b5:06:fe:3f:0d:be:c9:2a:73:1a:12:ab:53:f9:4d: df:e1:83:d7:ae:1f:c6:cd:0a:ef:fe:41:49:bc:c5:41:c0:9d: aa:1f:e3:b8:4c:0f:8b:0b:5b:e9:42:79:1d:1b:ff:7f:d0:28: a7:5e:44:34:a3:1b:67:bf:af:0b:61:fb:bd:b2:ab:ba:51:f3: 8b:47:47:59:63:ce:e0:16:ed:b5:10:f4:a2:9d:c5:9d:8a:67: 7e:80:a2:ad:65:09:6d:aa:02:dc:04:4b:13:42:e0:00:a1:79: 67:fc:e9:2d:4d:a2:ca:9d:bd:f3:b6:0f:51:11:89:77:23:d3: 32:08:66:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfye3dCqVt5u5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2JjN2JlMTYtYjViYS00ODJlLWJiM2ItNjE0YWE4YzI2MTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ayGkkDpGNwl3fRQxa+ccVlkDdmqt4HY5LN+ 7JgMwCfDnejD+iWgl6lQOrWQ6OAcnJcy74XUeM/02Ii7ESggBS/N6WLt0w/2LVVM xo/UjjkhuMQfboYkmrGvx4gDU6vkEkMb0B08dvLl/eYoxz/r568n2RdmnFjJFC0C lqKFUBuW8vWz5YinBXRiVsNW6uogrCSePxCjFWzMQV90Smgre/yvu9bsPacT/8Z9 FWSDCIjhAgH3AOeiqlRXVT7Z/NYuvb5A9aPEP4OQhTOIz90XBCs0i0tWJORHt+zr vMWTMpKqXdEnMtFMSwEstJE6gzZfVjb+meDciTV49AD8tjTSUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOE2NNb0DfVCDeKervZ2p1BcIhy+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdjOTViY2QtOTc5YS0z YzA5LWIxNmUtNjFjNGY5MWE0Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5FiDb9qwhQbG/x7MAo39c+QAnBTDGXsWiyjuYbyNTcRlXiupv4 Za0uR/Xh4MQQy+yGVZOdnL112Fqso+j84wyaTQtMQcXILlQTss9JVFqd+Jrrpkis aXEHmsrz+MgKvYkfs5bAesJv/ACgrTvgjDwdUTQd+lRo1LkAbCW4mVj6bbUG/j8N vskqcxoSq1P5Td/hg9euH8bNCu/+QUm8xUHAnaof47hMD4sLW+lCeR0b/3/QKKde RDSjG2e/rwth+72yq7pR84tHR1ljzuAW7bUQ9KKdxZ2KZ36Aoq1lCW2qAtwESxNC 4ACheWf86S1NosqdvfO2D1ERiXcj0zIIZmc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:16 2025 by rpki-client