$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa File: cde84229-d45a-3a8d-bf35-ae39d34e0423.roa (raw, json) Hash identifier: DxZd7wxtf0uuzkBt6CztGz0nRNDnVtILi/hc+IuOui4= Subject key identifier: 2D:95:94:58:69:14:E7:C1:E7:FF:D3:0D:66:10:22:58:11:7C:0F:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202370E28741D534B881E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396602 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:37:0e:28:74:1d:53:4b:88:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=907e5c5e-3eaf-4844-936d-f647720e09a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b3:23:86:c8:f0:59:0e:16:3f:ed:1e:e4:9f: 56:b0:1d:12:09:0d:7c:96:80:6f:89:37:92:f4:97: 20:46:fc:6c:47:a8:85:28:1a:7c:0a:1d:77:43:b4: 8f:fb:11:20:67:93:67:c4:83:e7:b0:c7:d0:c3:b0: 71:80:db:90:1a:9f:0c:a6:09:d8:16:2c:93:74:d1: c1:bc:b4:1b:d8:c7:e2:18:ad:7f:ec:3d:90:c1:9b: 2e:7e:0e:8a:53:2a:42:15:a6:a1:fb:4c:45:39:5b: 62:fc:45:e0:8e:0a:ee:b4:19:d7:45:d7:83:ff:ff: a0:09:65:d4:07:d9:a5:9d:ad:5f:0e:ff:51:7a:5a: 10:b9:e8:73:89:26:a0:12:5c:11:f5:55:72:ee:33: 06:eb:9a:ee:0c:0a:ec:ac:93:16:8e:7f:b1:6a:ce: 33:66:bd:eb:20:67:9f:c1:fe:2c:c9:99:08:de:f2: 27:c8:15:b4:ab:80:38:84:55:37:71:47:80:5c:ce: 54:b7:a7:cb:c4:ae:69:4a:ac:0b:de:60:e8:59:37: 8f:1a:47:29:48:57:59:50:90:5b:02:73:b8:7b:01: ac:f3:84:0d:93:38:07:94:53:20:d2:9f:3c:a2:54: 8c:84:22:a8:85:e0:64:1b:d2:f3:6d:4b:22:c2:d9: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:95:94:58:69:14:E7:C1:E7:FF:D3:0D:66:10:22:58:11:7C:0F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:38:f7:53:0f:61:9a:c7:6f:61:e5:90:4a:73:ee:0e:9f:7a: d3:f1:73:c6:fb:ee:a4:4a:d9:98:a8:6f:83:49:3a:1d:94:e9: cd:d1:5c:52:cd:33:28:20:43:e7:a2:4b:a2:ca:fc:5f:04:5e: 1f:99:02:f7:9a:4b:0b:0c:be:f7:9d:12:f9:46:3a:a5:ee:9d: 5b:30:a3:fd:19:85:ce:fd:46:3c:85:d8:8f:14:9f:eb:8f:0b: b2:69:f3:31:4a:ea:f9:65:f5:3c:5c:af:af:b9:c6:82:61:a6: dc:aa:79:43:9d:bf:f2:51:86:cb:b5:32:00:12:1b:51:d0:e7: 65:d4:04:b7:93:0c:7f:43:ce:0c:98:cd:6c:76:1b:77:1d:89: 28:02:10:f4:8b:c6:a1:82:a7:de:c3:f4:60:7f:63:ff:f0:04: 2c:f8:07:99:3a:ab:5c:72:6b:5b:b8:64:5a:53:08:ce:f9:e8: cb:95:b9:c7:c0:c1:4b:82:51:73:dd:a6:91:79:63:9b:73:c7: d1:f6:2b:c0:f7:40:ae:8a:53:3d:af:ce:79:d4:c2:b0:31:4c: c1:ab:44:20:5c:36:c1:8f:5c:37:99:8f:8d:c2:f8:7a:4c:37: b1:9e:8c:52:3b:a5:3c:94:d9:41:d6:69:4a:81:6d:33:2c:6d: 1b:8c:cb:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjcOKHQdU0uIHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTA3ZTVjNWUtM2VhZi00ODQ0LTkzNmQtZjY0NzcyMGUwOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77MjhsjwWQ4WP+0e5J9WsB0SCQ18loBviTeS 9JcgRvxsR6iFKBp8Ch13Q7SP+xEgZ5NnxIPnsMfQw7BxgNuQGp8MpgnYFiyTdNHB vLQb2MfiGK1/7D2QwZsufg6KUypCFaah+0xFOVti/EXgjgrutBnXRdeD//+gCWXU B9mlna1fDv9ReloQuehziSagElwR9VVy7jMG65ruDArsrJMWjn+xas4zZr3rIGef wf4syZkI3vInyBW0q4A4hFU3cUeAXM5Ut6fLxK5pSqwL3mDoWTePGkcpSFdZUJBb AnO4ewGs84QNkzgHlFMg0p88olSMhCKoheBkG9LzbUsiwtkSuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC2VlFhpFOfB5//TDWYQIlgRfA+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlODQyMjktZDQ1YS0z YThkLWJmMzUtYWUzOWQzNGUwNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA4491MPYZrHb2HlkEpz7g6fetPxc8b77qRK2Ziob4NJOh2U6c3R XFLNMyggQ+eiS6LK/F8EXh+ZAveaSwsMvvedEvlGOqXunVswo/0Zhc79RjyF2I8U n+uPC7Jp8zFK6vll9Txcr6+5xoJhptyqeUOdv/JRhsu1MgASG1HQ52XUBLeTDH9D zgyYzWx2G3cdiSgCEPSLxqGCp97D9GB/Y//wBCz4B5k6q1xya1u4ZFpTCM756MuV ucfAwUuCUXPdppF5Y5tzx9H2K8D3QK6KUz2vznnUwrAxTMGrRCBcNsGPXDeZj43C +HpMN7GejFI7pTyU2UHWaUqBbTMsbRuMyy8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:46 2025 by rpki-client