$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce494fd5-da79-3b1c-b913-052e0f56147c.roa File: ce494fd5-da79-3b1c-b913-052e0f56147c.roa (raw, json) Hash identifier: KyKqbdz6uhugiakjW17gJT6SITlGq1m7remWidF4vVM= Subject key identifier: 04:3E:17:7C:48:60:80:1F:24:DA:D2:B7:31:52:F3:7B:F4:EC:58:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E793FF27C4A3681DB73800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce494fd5-da79-3b1c-b913-052e0f56147c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396583 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:93:ff:27:c4:a3:68:1d:b7:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5587ecdb-510e-4d87-8642-1003079da3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:4b:cc:3f:9d:c5:ef:4d:b3:09:41:81:e3: 37:85:a9:49:55:04:e9:96:76:ff:25:de:8e:58:c2: f9:1d:2e:15:d0:66:4c:32:c6:a9:c1:dd:2f:cf:97: 4b:59:b0:f1:80:f2:1d:89:6b:fc:cd:11:6a:40:c1: 5d:88:fe:44:d4:f4:35:c1:62:9c:c7:ad:0d:89:7b: 12:6d:d0:60:aa:81:fb:0d:94:53:86:09:7e:78:96: 1e:0f:d8:1e:5a:97:b8:11:ac:86:35:e5:62:e7:b4: 08:89:5e:f5:67:54:24:6e:d8:10:8d:b8:fe:3c:5b: 8f:ec:53:26:d2:83:a5:28:64:fc:86:e8:b3:d0:2c: 90:51:6d:d6:da:c9:2e:df:57:f2:05:5e:0b:53:62: 01:93:a0:e2:1a:4b:6a:b8:0f:12:1e:25:8c:76:0b: 6e:c2:f7:eb:46:2c:1a:f8:4f:10:f6:bb:9a:ef:4a: 46:3e:86:54:3b:2c:ee:2a:09:7d:b2:8d:c6:85:79: d0:9b:a8:76:d7:a0:fb:f8:bc:20:8c:0a:52:7f:87: ab:4d:91:df:a9:5a:c1:b2:37:6f:84:0b:35:79:ac: 6f:56:c4:82:26:a2:de:e5:3e:83:ef:5b:f8:91:30: 1e:a9:15:a0:11:0a:7d:5f:07:3c:9f:15:d3:d7:81: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:17:7C:48:60:80:1F:24:DA:D2:B7:31:52:F3:7B:F4:EC:58:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce494fd5-da79-3b1c-b913-052e0f56147c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e2:2d:6c:73:87:b0:10:b2:79:fc:67:bb:da:40:c2:da:41: 45:d3:97:70:ae:e0:1b:80:05:ec:5c:d2:3f:7e:bc:cb:09:de: b3:ce:17:e9:b0:55:f5:93:60:28:08:b2:01:17:b6:df:3d:b7: 22:f5:ac:72:f3:8e:23:f0:aa:e3:45:98:af:a6:cd:63:13:5f: 12:c1:68:c3:44:e6:fa:2c:62:10:f9:3e:d8:5f:e5:06:f4:50: 3c:69:11:d9:a4:1e:5d:b4:a4:c7:1e:e5:db:ee:25:0b:45:75: 4d:33:b1:7e:de:bb:b8:4f:f3:24:54:28:11:7b:cb:91:37:55: e3:4f:3a:ef:5d:1f:cd:b2:1e:be:42:5d:68:6d:fa:3c:8e:74: e2:79:f3:e8:62:50:e7:d6:36:1e:b3:52:e9:2b:2c:05:e0:c8: d4:5c:9a:7a:43:80:ba:ba:af:7c:0e:d5:72:b3:88:50:47:c5: 9a:7b:ac:a8:47:a2:5d:3a:0d:c7:69:4e:ce:9e:dc:02:27:5f: d9:ac:4f:3d:dc:c8:28:52:7a:db:8e:d3:3a:79:ae:17:1c:a0: a6:52:e6:d8:4d:27:b8:57:f4:7d:90:be:f4:40:e8:de:6d:7d: 09:49:6f:da:2b:50:d8:16:a7:c4:cc:f0:e7:48:11:e8:38:da: 94:b2:2e:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55P/J8SjaB23OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTU4N2VjZGItNTEwZS00ZDg3LTg2NDItMTAwMzA3OWRhM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJpLzD+dxe9NswlBgeM3halJVQTplnb/Jd6O WML5HS4V0GZMMsapwd0vz5dLWbDxgPIdiWv8zRFqQMFdiP5E1PQ1wWKcx60NiXsS bdBgqoH7DZRThgl+eJYeD9geWpe4EayGNeVi57QIiV71Z1QkbtgQjbj+PFuP7FMm 0oOlKGT8huiz0CyQUW3W2sku31fyBV4LU2IBk6DiGktquA8SHiWMdgtuwvfrRiwa +E8Q9rua70pGPoZUOyzuKgl9so3GhXnQm6h216D7+LwgjApSf4erTZHfqVrBsjdv hAs1eaxvVsSCJqLe5T6D71v4kTAeqRWgEQp9Xwc8nxXT14F/owIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAQ+F3xIYIAfJNrStzFS83v07FjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2U0OTRmZDUtZGE3OS0z YjFjLWI5MTMtMDUyZTBmNTYxNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAq4i1sc4ewELJ5/Ge72kDC2kFF05dwruAbgAXs XNI/frzLCd6zzhfpsFX1k2AoCLIBF7bfPbci9axy844j8KrjRZivps1jE18SwWjD ROb6LGIQ+T7YX+UG9FA8aRHZpB5dtKTHHuXb7iULRXVNM7F+3ru4T/MkVCgRe8uR N1XjTzrvXR/Nsh6+Ql1obfo8jnTiefPoYlDn1jYes1LpKywF4MjUXJp6Q4C6uq98 DtVys4hQR8Wae6yoR6JdOg3HaU7OntwCJ1/ZrE893MgoUnrbjtM6ea4XHKCmUubY TSe4V/R9kL70QOjebX0JSW/aK1DYFqfEzPDnSBHoONqUsi6y -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:38 2025 by rpki-client