$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa File: def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa (raw, json) Hash identifier: 5P8waRHD7ONJdFSmZJBA62tzG6VqV43qM5raZOm1ZDA= Subject key identifier: DB:0E:FE:82:3A:25:D4:E2:14:6E:7F:8A:44:F0:2C:44:F5:B6:D9:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E212D36E844B1CBB545FC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396616 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:12:d3:6e:84:4b:1c:bb:54:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=226fad76-da61-4b41-b845-2ea9acf44f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:5a:67:59:bd:d0:66:fc:8e:a8:2a:cb:15: 5f:4c:09:8c:7a:c1:9e:38:c2:c5:d4:59:c2:11:fd: f3:64:bf:80:f5:26:91:63:5f:eb:28:d7:a3:13:35: c8:7c:7f:26:68:81:c1:a5:af:9f:53:a9:51:fb:e6: b9:ab:17:b2:97:0a:ce:71:7d:7d:ca:a9:96:9e:65: e6:e6:51:58:16:c7:d9:9c:c0:9c:1e:14:d9:df:98: 3f:c7:d7:4d:91:85:4b:56:23:4a:26:15:b9:54:e3: bd:fb:98:bc:6e:f6:7b:f5:69:8b:22:29:3e:27:76: cd:61:11:8a:8e:59:d3:7c:76:f5:a8:ab:0d:f5:b9: c1:16:03:9c:55:ad:46:92:6b:ec:7a:3c:05:f7:32: 78:c9:35:ef:45:1b:bb:f8:01:99:75:15:32:ad:bd: bd:46:10:04:6a:10:8b:be:af:b8:7e:e8:17:e9:8e: 95:d3:b8:5f:8f:77:28:c2:30:6f:12:b6:6a:cf:00: 42:db:4c:dc:f9:b0:21:b2:f8:f5:3d:8c:13:9b:62: 9d:99:c2:11:b3:57:e2:50:b7:4a:f4:e0:3a:7d:71: 79:63:5b:95:45:60:b0:fb:6b:17:53:57:da:ee:34: c1:ba:dc:13:f5:47:06:ac:8d:2c:44:00:1c:58:ea: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0E:FE:82:3A:25:D4:E2:14:6E:7F:8A:44:F0:2C:44:F5:B6:D9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a8:95:0c:5e:64:85:a4:c9:ba:51:ed:63:6e:83:a9:51:69: 7f:77:83:97:42:49:e3:7a:5f:16:4f:69:f2:40:23:68:3b:94: 5f:e8:96:e0:94:27:40:58:c0:1b:89:09:1b:94:f6:a2:ef:45: 43:d8:bf:8d:5c:d3:0f:78:3a:4a:c7:28:7d:c7:31:45:94:1b: a7:4c:cb:f8:32:ab:04:ba:84:40:d4:6a:f8:59:af:35:56:db: 69:76:0a:58:c4:56:d3:6f:38:1f:c9:92:59:da:59:64:70:34: 6f:0f:97:bf:73:f4:f4:f1:85:97:07:40:a8:7d:4e:e0:01:ee: 00:ab:c5:15:f3:3e:62:e6:4e:f1:84:82:2f:31:28:39:38:1c: 97:30:2c:df:27:dd:7c:40:f2:ae:a6:ca:2d:cd:b1:3b:a9:e4: dc:d1:03:1c:5d:ed:cc:f6:6b:b3:1e:a2:23:16:c8:6f:12:93: 5b:eb:79:85:ab:a5:d5:13:81:0d:a2:c4:3f:e6:c4:e0:19:9a: d4:e2:ff:a6:5e:a6:01:b8:e0:f6:8a:3e:be:f7:4f:0a:fe:17: b2:ea:83:5e:61:7e:0a:24:6c:28:b3:70:33:c9:06:18:01:9e: 19:60:86:a4:0d:b8:ca:b1:26:8b:3b:57:28:47:f2:9e:77:4f: 96:de:79:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hLTboRLHLtUX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjI2ZmFkNzYtZGE2MS00YjQxLWI4NDUtMmVhOWFjZjQ0ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFFaZ1m90Gb8jqgqyxVfTAmMesGeOMLF1FnC Ef3zZL+A9SaRY1/rKNejEzXIfH8maIHBpa+fU6lR++a5qxeylwrOcX19yqmWnmXm 5lFYFsfZnMCcHhTZ35g/x9dNkYVLViNKJhW5VOO9+5i8bvZ79WmLIik+J3bNYRGK jlnTfHb1qKsN9bnBFgOcVa1GkmvsejwF9zJ4yTXvRRu7+AGZdRUyrb29RhAEahCL vq+4fugX6Y6V07hfj3cowjBvErZqzwBC20zc+bAhsvj1PYwTm2KdmcIRs1fiULdK 9OA6fXF5Y1uVRWCw+2sXU1fa7jTButwT9UcGrI0sRAAcWOqAwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNsO/oI6JdTiFG5/ikTwLET1ttk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVmMmU5NmYtNTU4OC0z NGViLWJiN2QtYjRhMGZkY2VlNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGyolQxeZIWkybpR7WNug6lRaX93g5dCSeN6XxZPafJAI2g7lF/o luCUJ0BYwBuJCRuU9qLvRUPYv41c0w94OkrHKH3HMUWUG6dMy/gyqwS6hEDUavhZ rzVW22l2CljEVtNvOB/JklnaWWRwNG8Pl79z9PTxhZcHQKh9TuAB7gCrxRXzPmLm TvGEgi8xKDk4HJcwLN8n3XxA8q6myi3NsTup5NzRAxxd7cz2a7MeoiMWyG8Sk1vr eYWrpdUTgQ2ixD/mxOAZmtTi/6ZepgG44PaKPr73Twr+F7Lqg15hfgokbCizcDPJ BhgBnhlghqQNuMqxJos7VyhH8p53T5beeaI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:53 2025 by rpki-client