$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa File: df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa (raw, json) Hash identifier: 0nf6a4I+KZnXCZQOWfwcgy5QWAwQgcPn+7xKfgV3EEg= Subject key identifier: 6B:4A:25:95:5A:8B:D6:FD:EA:BC:35:92:41:88:A2:0F:C8:8D:CB:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E799B6D87B8DB0D5E43E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396606 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:99:b6:d8:7b:8d:b0:d5:e4:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=bafdfba2-96d3-4623-9d54-217dcb3ee7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:c3:85:77:c0:c8:71:6e:a2:f0:1b:5d:31: 19:f0:ab:e7:27:4e:e5:91:02:42:2b:15:5b:4f:3b: 19:14:7e:93:b0:ce:3c:58:93:fa:43:5a:df:10:06: 43:87:30:20:13:7e:fe:7c:7b:c8:f1:c4:e2:99:4a: c2:a5:51:55:fa:50:98:de:ca:4c:86:0f:bf:14:a6: d8:9d:b6:71:1e:f1:5d:7d:99:2b:7f:b5:4e:b4:7e: da:2e:1d:f3:51:8c:48:b0:cd:bd:2d:1d:51:63:a3: 07:31:e1:2d:de:12:a2:a5:ad:c0:6e:ae:cf:c0:49: 00:7b:bb:f2:c2:5f:fe:55:77:4f:d3:18:90:2a:ba: ef:03:42:06:e7:4f:0c:d1:55:24:61:70:52:56:1a: 7a:7c:db:1b:12:cb:d5:df:b2:95:bf:e8:72:df:95: 3c:36:38:ab:d7:31:84:55:13:27:c0:57:89:c3:62: f7:ca:b9:d5:dd:c9:5e:a1:b8:b6:10:99:69:ce:aa: 17:da:98:86:23:0f:48:f8:00:ba:71:d8:6c:c1:54: 1a:c0:66:86:15:8b:a7:f1:83:73:98:cd:60:a4:58: 8f:da:94:82:6b:34:f4:76:0f:e6:bb:db:5f:80:96: 6c:dc:9d:a8:73:ad:b7:96:31:7e:03:74:cb:f9:60: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:25:95:5A:8B:D6:FD:EA:BC:35:92:41:88:A2:0F:C8:8D:CB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c1:ce:43:35:d5:20:d5:46:0e:2c:08:e0:3e:b3:23:7e:9c: c6:9e:82:67:8f:63:3b:3b:76:ee:ce:b7:1f:f0:b0:86:62:f8: cf:37:f8:03:3a:08:a7:22:44:26:99:24:fa:54:44:71:2b:5d: cd:14:ff:2d:b7:ab:bb:6c:1c:c3:5e:a8:49:0a:ed:74:50:ad: 14:8a:6e:3c:6d:24:b0:45:72:9b:15:06:4c:1e:b0:31:49:e6: c1:cc:60:08:4e:c6:77:24:e4:18:b4:d2:e4:06:4a:56:7d:9c: a8:0c:a3:74:b1:cb:6e:94:a6:fc:43:40:7a:62:02:66:c3:3d: 57:8c:a8:5a:17:2d:79:a2:4d:dc:67:72:1c:28:b9:47:f2:59: 48:20:f0:26:06:92:5a:39:5e:c1:89:49:5f:9b:60:c0:1c:7b: 1e:f2:61:82:4c:3c:57:bb:4f:e0:ce:38:a5:fa:96:ed:fe:92: 92:e8:bb:35:b1:65:57:3c:88:ed:78:ff:ca:95:00:1b:fc:e4: 77:03:38:13:cf:cb:3a:f7:88:cb:84:1b:42:5b:2c:08:37:7e: de:21:c4:2a:15:f8:dd:3c:44:ae:f3:bc:d4:74:f5:b2:e5:61: 21:4a:59:9b:45:38:39:b8:79:0a:39:76:64:62:90:a0:ba:eb: db:01:57:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55m22HuNsNXkPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YmFmZGZiYTItOTZkMy00NjIzLTlkNTQtMjE3ZGNiM2VlN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGvDhXfAyHFuovAbXTEZ8KvnJ07lkQJCKxVb TzsZFH6TsM48WJP6Q1rfEAZDhzAgE37+fHvI8cTimUrCpVFV+lCY3spMhg+/FKbY nbZxHvFdfZkrf7VOtH7aLh3zUYxIsM29LR1RY6MHMeEt3hKipa3Abq7PwEkAe7vy wl/+VXdP0xiQKrrvA0IG508M0VUkYXBSVhp6fNsbEsvV37KVv+hy35U8Njir1zGE VRMnwFeJw2L3yrnV3cleobi2EJlpzqoX2piGIw9I+AC6cdhswVQawGaGFYun8YNz mM1gpFiP2pSCazT0dg/mu9tfgJZs3J2oc623ljF+A3TL+WBS5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGtKJZVai9b96rw1kkGIog/IjctZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY3NTI2YTQtM2M4Yy0z NjcxLWI2ZGQtMWI5MzcwMmE1YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAgwc5DNdUg1UYOLAjgPrMjfpzGnoJnj2M7O3bu zrcf8LCGYvjPN/gDOginIkQmmST6VERxK13NFP8tt6u7bBzDXqhJCu10UK0Uim48 bSSwRXKbFQZMHrAxSebBzGAITsZ3JOQYtNLkBkpWfZyoDKN0sctulKb8Q0B6YgJm wz1XjKhaFy15ok3cZ3IcKLlH8llIIPAmBpJaOV7BiUlfm2DAHHse8mGCTDxXu0/g zjil+pbt/pKS6Ls1sWVXPIjteP/KlQAb/OR3AzgTz8s694jLhBtCWywIN37eIcQq FfjdPESu87zUdPWy5WEhSlmbRTg5uHkKOXZkYpCguuvbAVdm -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:30 2025 by rpki-client