$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa File: de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa (raw, json) Hash identifier: AKgBCU4h3kmu+hIZkUFjWnUrvVZdd5Lix3V02Yy3CGo= Subject key identifier: 3F:4A:AA:D6:84:9C:9E:C2:2C:C0:80:2E:C6:02:CF:82:76:38:55:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79143517B2D57855C2D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 36619 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:91:43:51:7b:2d:57:85:5c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6263fc9d-d6ee-44a1-8984-4a83ad5a8afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:3f:61:ab:39:98:50:0e:9d:be:65:c9:a2: 60:a2:c2:91:9d:38:d4:39:8d:da:f5:08:d6:41:66: 4d:8b:c5:eb:f9:0d:ed:6a:cc:f5:81:32:37:68:cc: b7:54:90:58:8b:44:67:d4:ab:8c:bb:0a:ce:7b:e7: ca:ba:db:d6:51:08:0a:3f:9c:24:89:be:7e:8b:a1: af:f2:39:b0:76:63:1e:52:56:73:31:e2:eb:a4:06: cd:80:52:b3:52:52:b6:8d:5d:96:80:80:dd:5d:e2: ea:37:3c:ed:8f:7e:8c:36:df:59:95:4c:ef:2f:1a: 1e:01:d8:9a:04:1d:98:e2:f8:cb:23:33:9b:2e:87: 26:35:d2:36:1d:9b:27:93:db:df:f1:54:c1:d3:27: c0:fc:65:70:63:99:8f:e0:cb:fb:ab:57:15:e3:0b: b3:c4:b1:59:2c:d3:89:1c:9f:af:5f:88:b1:70:b9: b1:f2:60:ec:7b:a3:43:38:e1:21:c9:66:ab:96:7e: 4e:08:29:55:e8:dd:bd:53:b0:be:37:cd:6e:37:f8: c1:fa:77:9d:a1:5b:f5:0d:0b:6e:5c:57:69:86:d7: 41:2b:03:be:af:ff:ce:d2:ca:de:6b:59:0e:b0:ef: 9c:4f:fe:42:db:51:02:12:07:64:b0:72:23:0f:02: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4A:AA:D6:84:9C:9E:C2:2C:C0:80:2E:C6:02:CF:82:76:38:55:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ea:23:b2:dc:d1:8c:58:7c:48:3c:36:75:6a:e9:c9:e8:75: d1:52:db:f1:0d:6a:00:c0:6d:a9:a2:92:7c:c3:76:02:6c:0e: a2:e4:e0:58:77:6d:22:3e:6d:58:46:45:44:92:5d:75:2e:ba: db:77:f6:6f:0a:31:d9:be:c5:c0:5d:ed:aa:f2:c4:b8:e6:41: 34:4d:f2:9c:e3:ab:24:83:df:dd:bc:2e:f8:6c:18:d1:c0:f2: 31:41:e8:74:c2:0f:eb:5e:f7:e3:39:6f:ce:50:78:41:80:6d: dd:4a:14:20:51:0d:c8:73:35:a6:f7:c0:5d:bb:de:ff:9d:8e: 66:95:8f:8f:c2:22:d8:e9:fb:0f:80:a5:41:31:bc:15:cb:b4: 3d:ba:4b:20:60:13:6b:6a:63:b5:0f:ad:b1:f7:ad:db:62:f8: 47:6e:fa:aa:22:df:ea:82:f0:a8:cb:35:21:7b:09:07:90:53: f3:4e:30:57:7a:5d:0c:c2:b3:dc:2e:64:11:d4:df:49:75:ae: 8e:3e:a4:37:eb:ab:6a:c8:b8:80:e3:a7:29:a0:36:e9:a7:bf: 7a:fb:d3:cf:15:78:cb:0b:a0:95:58:2c:23:d7:70:ae:21:25: 31:6a:fc:2d:85:cf:91:a2:2e:85:e1:f0:d7:9d:44:83:49:71: 14:af:dd:0f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55FDUXstV4VcLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NjI2M2ZjOWQtZDZlZS00NGExLTg5ODQtNGE4M2FkNWE4YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIk/Yas5mFAOnb5lyaJgosKRnTjUOY3a9QjW QWZNi8Xr+Q3tasz1gTI3aMy3VJBYi0Rn1KuMuwrOe+fKutvWUQgKP5wkib5+i6Gv 8jmwdmMeUlZzMeLrpAbNgFKzUlK2jV2WgIDdXeLqNzztj36MNt9ZlUzvLxoeAdia BB2Y4vjLIzObLocmNdI2HZsnk9vf8VTB0yfA/GVwY5mP4Mv7q1cV4wuzxLFZLNOJ HJ+vX4ixcLmx8mDse6NDOOEhyWarln5OCClV6N29U7C+N81uN/jB+nedoVv1DQtu XFdphtdBKwO+r//O0srea1kOsO+cT/5C21ECEgdksHIjDwIzAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD9KqtaEnJ7CLMCALsYCz4J2OFU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUwMzJhMzAtNjBlOS0z MmY1LWE0N2YtZTkzZmUxZjNhZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+6iOy3NGMWHxIPDZ1aunJ6HXRUtvxDWoAwG2p opJ8w3YCbA6i5OBYd20iPm1YRkVEkl11Lrrbd/ZvCjHZvsXAXe2q8sS45kE0TfKc 46skg9/dvC74bBjRwPIxQeh0wg/rXvfjOW/OUHhBgG3dShQgUQ3IczWm98Bdu97/ nY5mlY+PwiLY6fsPgKVBMbwVy7Q9uksgYBNramO1D62x963bYvhHbvqqIt/qgvCo yzUhewkHkFPzTjBXel0MwrPcLmQR1N9Jda6OPqQ366tqyLiA46cpoDbpp796+9PP FXjLC6CVWCwj13CuISUxavwthc+Roi6F4fDXnUSDSXEUr90P -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:12 2025 by rpki-client