$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf76ac2-e697-3a4a-9e9c-818394565aae.roa File: faf76ac2-e697-3a4a-9e9c-818394565aae.roa (raw, json) Hash identifier: pGMwD5O1tO/TBb+mhtp56ywOZ23VJbZdDphTIF/1kcU= Subject key identifier: CC:DF:E3:8A:63:4D:25:3D:3A:5F:C3:40:3F:2F:E2:A4:66:5B:D1:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557020E4E8E178975FC5200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf76ac2-e697-3a4a-9e9c-818394565aae.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396603 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:02:0e:4e:8e:17:89:75:fc:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ce5e4e7b-4faf-4898-8e76-9656e1bb452c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:98:b6:dc:24:71:2c:d0:8e:50:5c:15:d0: 3e:1d:87:d4:d3:50:51:f0:da:ec:fa:a5:21:34:0c: c8:4d:e0:a8:e8:d7:e5:4a:7b:12:e5:7d:10:31:2b: c8:00:ab:a7:6c:21:f1:a3:f5:1e:e7:7a:91:64:5c: 02:72:6c:3e:97:71:91:c5:1b:8e:43:19:2d:62:1e: 5e:61:37:ba:46:e5:9b:45:1a:31:f4:d6:a3:99:99: 7e:7b:11:1e:4a:87:4e:d2:25:d1:58:e8:76:40:ed: db:e9:c9:34:79:23:d9:8c:eb:9b:3f:d9:36:05:d0: db:13:ee:cf:b1:e0:a5:cf:6a:fa:c7:17:84:a8:fc: ab:ec:50:5a:f2:df:64:72:81:2c:da:fd:69:d5:8e: 0b:c2:77:3d:8a:88:fd:f1:85:3a:ef:7e:68:8b:c2: 4b:8b:72:3c:e5:ac:5d:e5:b6:e3:65:d9:9e:d7:00: b3:1f:58:41:c1:90:c9:d1:55:8e:85:da:14:12:8c: 45:ce:9f:9e:2a:cc:bb:4c:96:d1:92:b6:f9:8f:b6: df:4d:bf:ba:bc:79:5b:6d:fc:9b:1d:90:3f:c4:f9: d2:2b:8f:d7:5e:95:0f:5c:e4:84:e0:a7:13:e3:43: f0:bd:98:2b:49:35:b0:94:32:98:fc:f2:19:c0:a3: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DF:E3:8A:63:4D:25:3D:3A:5F:C3:40:3F:2F:E2:A4:66:5B:D1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf76ac2-e697-3a4a-9e9c-818394565aae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:16:fb:78:fe:29:15:59:e4:da:7a:52:20:2d:ae:bb:9d:91: 1c:64:78:25:64:1a:c2:5e:b1:d2:31:c3:1e:6f:9f:1b:27:de: 64:18:24:28:11:be:90:9b:85:5d:14:a9:e6:25:45:11:53:af: f3:5c:ca:ac:ba:cd:1d:8a:6a:9a:e6:f7:ef:1b:bd:69:01:72: d1:eb:03:75:6a:78:de:9e:89:1e:5a:27:2e:cb:22:93:40:66: 63:a7:e3:d3:b7:17:7a:5f:ba:8c:af:a4:b9:b5:bf:62:80:9d: 0b:1d:3e:3a:15:9a:ed:dd:45:74:cc:d7:f6:fb:06:0a:f2:0a: 4a:83:bf:27:92:af:bf:35:65:93:15:bc:ac:05:3c:32:c4:9f: 51:50:a0:34:a7:d1:e8:6a:d8:57:32:7d:70:10:28:e3:37:bd: 77:96:a5:c9:42:76:a1:90:2b:10:bc:28:b4:d0:e4:61:1f:25: a1:c5:76:53:2b:02:b7:38:6a:5c:f4:d0:fe:88:c4:34:72:8f: ea:ae:19:1a:84:3b:6e:a9:f7:63:a1:0c:a4:75:16:db:53:93: 0b:d8:09:85:e2:36:16:0f:db:bf:d4:4d:ea:8e:33:22:05:90: 6b:e7:2f:a7:0f:73:e2:48:2a:00:34:b5:5c:b7:c5:7d:c9:88: aa:81:43:2e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwIOTo4XiXX8UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2U1ZTRlN2ItNGZhZi00ODk4LThlNzYtOTY1NmUxYmI0NTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4yYttwkcSzQjlBcFdA+HYfU01BR8Nrs+qUh NAzITeCo6NflSnsS5X0QMSvIAKunbCHxo/Ue53qRZFwCcmw+l3GRxRuOQxktYh5e YTe6RuWbRRox9NajmZl+exEeSodO0iXRWOh2QO3b6ck0eSPZjOubP9k2BdDbE+7P seClz2r6xxeEqPyr7FBa8t9kcoEs2v1p1Y4Lwnc9ioj98YU6735oi8JLi3I85axd 5bbjZdme1wCzH1hBwZDJ0VWOhdoUEoxFzp+eKsy7TJbRkrb5j7bfTb+6vHlbbfyb HZA/xPnSK4/XXpUPXOSE4KcT40PwvZgrSTWwlDKY/PIZwKN60wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMzf44pjTSU9Ol/DQD8v4qRmW9FpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmFmNzZhYzItZTY5Ny0z YTRhLTllOWMtODE4Mzk0NTY1YWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7Fvt4/ikVWeTaelIgLa67nZEcZHglZBrCXrHS McMeb58bJ95kGCQoEb6Qm4VdFKnmJUURU6/zXMqsus0dimqa5vfvG71pAXLR6wN1 anjenokeWicuyyKTQGZjp+PTtxd6X7qMr6S5tb9igJ0LHT46FZrt3UV0zNf2+wYK 8gpKg78nkq+/NWWTFbysBTwyxJ9RUKA0p9HoathXMn1wECjjN713lqXJQnahkCsQ vCi00ORhHyWhxXZTKwK3OGpc9ND+iMQ0co/qrhkahDtuqfdjoQykdRbbU5ML2AmF 4jYWD9u/1E3qjjMiBZBr5y+nD3PiSCoANLVct8V9yYiqgUMu -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:47 2025 by rpki-client