$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea79e484-65e6-3c36-9da5-e46065d56f13.roa File: ea79e484-65e6-3c36-9da5-e46065d56f13.roa (raw, json) Hash identifier: H1XCBIySk4r+4oRsvD3/MDiL3mGd4DdOSKVW2KAznBs= Subject key identifier: C4:E8:CC:4F:29:9D:FA:F4:CD:2C:AF:26:65:6E:93:84:A7:34:04:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BBFA4402B41924BBA480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea79e484-65e6-3c36-9da5-e46065d56f13.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396572 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bb:fa:44:02:b4:19:24:bb:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=9e50d0c3-b3f9-4832-9870-a8e613d05bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:a3:28:cb:f0:32:a4:6f:bc:53:af:69:38: 3b:42:da:28:30:d6:a6:ff:ba:36:a1:0b:52:c5:84: 6a:ff:0b:ad:ab:a4:b0:0f:4d:f8:f6:75:c0:7b:d5: be:92:3e:57:9f:eb:c6:8e:0e:f7:35:b9:40:e8:ca: e1:24:f6:a2:b4:85:95:8e:3d:76:73:94:07:4e:61: 9e:aa:be:05:cf:2b:c3:30:ed:f9:ea:09:ce:20:b4: 57:25:3a:4d:9c:99:82:b9:40:fb:4e:b4:c0:b7:55: 0d:7c:81:f0:73:3b:75:11:49:cd:11:29:5f:a0:98: ae:a5:1a:e2:fd:bb:eb:f5:a5:a6:f1:e9:57:84:99: c9:2d:c0:89:51:2d:5a:33:62:ec:81:34:6b:ee:a2: e4:2d:52:5c:9a:92:6f:81:64:e7:d2:59:be:15:fb: 42:e5:f0:29:84:b9:4e:60:dc:02:ed:40:72:50:bd: 6a:4f:9c:f2:6d:17:cc:4e:06:0d:22:ab:c8:3c:14: d6:95:2d:b8:39:12:63:28:64:bc:6d:49:27:cf:9d: c5:9d:3c:68:f6:f1:a2:d9:90:e1:7d:94:eb:15:74: e6:bb:ea:4f:d7:89:cf:55:94:1c:2f:06:a6:fb:c1: c9:63:2a:57:29:d1:37:ae:35:cd:fb:e2:09:3c:46: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E8:CC:4F:29:9D:FA:F4:CD:2C:AF:26:65:6E:93:84:A7:34:04:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea79e484-65e6-3c36-9da5-e46065d56f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:46:cb:86:1f:00:83:29:85:e6:8a:75:57:86:3a:d8:4b:7e: 2c:90:af:13:94:1d:5e:28:27:bf:4a:eb:56:be:1b:9c:e2:21: b7:db:d9:51:b5:4f:b2:3b:7e:7d:6f:19:1e:9c:12:22:c5:87: 18:e4:c8:31:8a:b8:0e:6d:fe:f8:31:78:d6:75:f3:75:51:e8: 28:56:5c:16:77:52:3e:26:84:29:e1:1c:3a:98:69:97:f2:ee: 42:b5:fc:14:1a:fc:53:14:50:a6:b6:89:a5:e7:46:7c:9d:00: d0:c3:3e:48:3f:4f:1f:18:2f:97:a0:63:7b:32:f6:d0:ab:b6: 55:15:1d:a8:3c:ba:66:7c:f6:72:15:e8:9e:02:cc:0b:bb:2d: 40:d1:62:8e:e0:6d:c5:04:2b:c4:94:56:1d:6f:bc:eb:46:5c: e9:f5:51:0d:96:04:96:4b:1f:c1:ac:d0:eb:46:49:94:dc:4d: e8:57:15:43:bf:99:49:64:c0:47:e8:6a:54:98:1a:fd:f0:df: 4f:df:c8:76:e4:15:c5:8c:9b:4b:f0:aa:de:c3:74:ed:4d:ca: 9f:fd:a5:86:f0:b1:ad:91:5c:7a:44:03:78:aa:f6:30:04:2a: 7a:42:f5:f4:7a:cc:76:e6:bc:43:9f:f5:6d:d9:5d:b7:0b:5d: 9b:d5:60:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bv6RAK0GSS7pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWU1MGQwYzMtYjNmOS00ODMyLTk4NzAtYThlNjEzZDA1YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOSjKMvwMqRvvFOvaTg7QtooMNam/7o2oQtS xYRq/wutq6SwD0349nXAe9W+kj5Xn+vGjg73NblA6MrhJPaitIWVjj12c5QHTmGe qr4FzyvDMO356gnOILRXJTpNnJmCuUD7TrTAt1UNfIHwczt1EUnNESlfoJiupRri /bvr9aWm8elXhJnJLcCJUS1aM2LsgTRr7qLkLVJcmpJvgWTn0lm+FftC5fAphLlO YNwC7UByUL1qT5zybRfMTgYNIqvIPBTWlS24ORJjKGS8bUknz53FnTxo9vGi2ZDh fZTrFXTmu+pP14nPVZQcLwam+8HJYypXKdE3rjXN++IJPEbPVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTozE8pnfr0zSyvJmVuk4SnNARsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE3OWU0ODQtNjVlNi0z YzM2LTlkYTUtZTQ2MDY1ZDU2ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIpGy4YfAIMpheaKdVeGOthLfiyQrxOUHV4oJ79K61a+G5ziIbfb 2VG1T7I7fn1vGR6cEiLFhxjkyDGKuA5t/vgxeNZ183VR6ChWXBZ3Uj4mhCnhHDqY aZfy7kK1/BQa/FMUUKa2iaXnRnydANDDPkg/Tx8YL5egY3sy9tCrtlUVHag8umZ8 9nIV6J4CzAu7LUDRYo7gbcUEK8SUVh1vvOtGXOn1UQ2WBJZLH8Gs0OtGSZTcTehX FUO/mUlkwEfoalSYGv3w30/fyHbkFcWMm0vwqt7DdO1Nyp/9pYbwsa2RXHpEA3iq 9jAEKnpC9fR6zHbmvEOf9W3ZXbcLXZvVYNU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:58 2025 by rpki-client