$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/27ce3500-18d9-328c-baf4-616cb7305eb7.roa File: 27ce3500-18d9-328c-baf4-616cb7305eb7.roa (raw, json) Hash identifier: oQdixHIGdS8ae3gnxLPRephUZdR34HbO4IWlBPxUHaE= Subject key identifier: 1E:6F:9C:08:F2:83:29:59:7A:24:3E:F9:F6:16:0B:FB:4F:37:35:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1052515DC23AD8760AAD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/27ce3500-18d9-328c-baf4-616cb7305eb7.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396604 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:52:51:5d:c2:3a:d8:76:0a:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=6b9be8b6-e2d0-48d3-b943-b315bc13fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:95:c7:37:2f:0c:ba:4e:65:b0:9c:ce:1d: 83:c6:60:d0:90:45:22:c4:5b:d5:50:13:78:0a:16: 56:fa:c0:94:3d:db:88:24:92:4d:1d:90:89:41:72: df:eb:63:2e:64:1f:2b:ac:0e:be:06:cf:61:0e:06: 08:97:42:b8:c8:9a:e4:d5:92:22:37:9b:cf:32:1a: 54:77:8b:35:7f:ce:48:58:f5:d3:c9:de:36:52:5c: b6:4d:82:01:e6:29:10:c1:a2:05:92:42:ea:bd:08: 76:8d:84:2f:a4:da:1c:28:84:26:49:21:be:40:89: 03:54:36:f3:67:6e:5e:63:21:a9:1f:5f:c0:c4:35: e3:af:fe:cb:72:ca:59:35:8e:ab:81:56:e3:c7:3a: 0b:79:25:fe:a8:7d:ff:be:c8:f8:15:dd:8d:5a:a4: 30:93:8e:10:44:0c:1d:d7:e8:ee:9a:0c:d1:ba:07: 47:d5:84:2d:99:9e:d1:de:98:ff:9a:d7:fc:90:70: fa:b8:74:4f:07:b6:22:0a:c7:01:92:d0:42:17:34: 5a:97:7e:1a:b3:e8:4b:37:ae:5a:7a:1c:90:bc:4e: 92:fb:5c:fa:44:8b:d4:9b:27:a1:af:30:8f:b1:c7: 1f:f2:46:cf:83:70:5f:33:c5:0a:ad:dd:8b:d6:3e: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6F:9C:08:F2:83:29:59:7A:24:3E:F9:F6:16:0B:FB:4F:37:35:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/27ce3500-18d9-328c-baf4-616cb7305eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:55:07:31:fc:df:73:c8:89:8a:a6:d0:0a:e3:11:b2:46:72: 81:73:f1:d1:24:c3:27:42:a5:9a:e0:26:ee:99:28:30:f6:e3: d7:fc:ca:e2:e0:e7:70:91:d9:b1:46:15:ee:22:b2:c5:7f:58: 06:12:36:8d:2d:30:bc:15:45:a8:f5:ec:02:4c:7b:4c:85:e4: cc:f6:8c:f2:37:77:b3:56:6e:2c:a2:59:82:e0:69:38:3a:4b: 33:44:1e:db:b4:e7:ae:e1:50:f9:a7:3c:f0:df:be:1d:62:66: f4:f9:30:76:02:3c:9a:3e:99:9a:5e:2b:8b:59:96:44:92:19: 56:c6:07:d9:45:09:70:1c:1f:3a:3c:8d:e0:25:dc:49:38:24: 2c:18:86:c8:ed:d6:85:01:40:5c:4d:b6:3e:63:a6:66:28:85: 28:50:ba:0c:98:1c:42:f0:e8:ab:a1:6a:db:7d:77:0c:49:ae: 2a:f0:b6:cf:2a:c7:a4:af:c8:1c:7f:c0:f8:b4:f2:41:cd:c7: 4f:1f:1e:e0:25:1b:83:76:0f:8f:ba:86:3c:6f:58:fb:6f:aa: 42:58:68:00:7b:a9:c4:70:a9:3d:74:93:3a:33:e1:28:79:69: ad:dd:d9:57:f9:0b:89:1b:4c:fb:ba:1e:11:4e:71:92:2c:51: 9a:20:06:40 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFJRXcI62HYKrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NmI5YmU4YjYtZTJkMC00OGQzLWI5NDMtYjMxNWJjMTNmZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8iVxzcvDLpOZbCczh2DxmDQkEUixFvVUBN4 ChZW+sCUPduIJJJNHZCJQXLf62MuZB8rrA6+Bs9hDgYIl0K4yJrk1ZIiN5vPMhpU d4s1f85IWPXTyd42Uly2TYIB5ikQwaIFkkLqvQh2jYQvpNocKIQmSSG+QIkDVDbz Z25eYyGpH1/AxDXjr/7LcspZNY6rgVbjxzoLeSX+qH3/vsj4Fd2NWqQwk44QRAwd 1+jumgzRugdH1YQtmZ7R3pj/mtf8kHD6uHRPB7YiCscBktBCFzRal34as+hLN65a ehyQvE6S+1z6RIvUmyehrzCPsccf8kbPg3BfM8UKrd2L1j5QRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB5vnAjygylZeiQ++fYWC/tPNzUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjdjZTM1MDAtMThkOS0z MjhjLWJhZjQtNjE2Y2I3MzA1ZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB1VQcx/N9zyImKptAK4xGyRnKBc/HRJMMnQqWa 4CbumSgw9uPX/Mri4OdwkdmxRhXuIrLFf1gGEjaNLTC8FUWo9ewCTHtMheTM9ozy N3ezVm4solmC4Gk4OkszRB7btOeu4VD5pzzw374dYmb0+TB2AjyaPpmaXiuLWZZE khlWxgfZRQlwHB86PI3gJdxJOCQsGIbI7daFAUBcTbY+Y6ZmKIUoULoMmBxC8Oir oWrbfXcMSa4q8LbPKsekr8gcf8D4tPJBzcdPHx7gJRuDdg+PuoY8b1j7b6pCWGgA e6nEcKk9dJM6M+EoeWmt3dlX+QuJG0z7uh4RTnGSLFGaIAZA -----END CERTIFICATE-----Generated at Wed Nov 5 04:17:04 2025 by rpki-client