$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/652542c3-1d40-3378-83f0-fa3486bbad43.roa File: 652542c3-1d40-3378-83f0-fa3486bbad43.roa (raw, json) Hash identifier: nptXOcCF3LLXvdl5PfWJlqfpzUGhb9VQhr8wl14v0b0= Subject key identifier: 24:9C:40:C1:10:D3:04:CC:66:63:77:F7:4F:CE:FC:AD:61:45:DF:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA104E37E6B2C39A4A082680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/652542c3-1d40-3378-83f0-fa3486bbad43.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396617 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4e:37:e6:b2:c3:9a:4a:08:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=9995ef13-b6d2-4bf1-9e89-030a6a75f82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:fb:1b:cb:de:de:69:32:0f:7c:8f:25:2f: 1f:2a:a3:97:60:46:77:23:75:cc:be:1f:3f:19:40: df:e6:61:d4:af:da:f2:ed:e2:1b:f2:d9:c8:68:f3: 1f:96:12:cc:ec:6c:a8:3c:24:ab:f2:15:6d:9a:ef: e4:8c:b6:19:be:41:57:66:67:42:fc:0e:79:d1:9d: ad:73:16:aa:bd:e1:20:7a:9d:f4:cf:bb:07:61:59: 0b:01:0a:95:16:75:49:7a:e3:b8:03:ce:7f:fb:dc: eb:35:fe:81:d4:d5:2b:55:bf:57:d2:2e:eb:24:c6: c0:79:f2:22:56:5a:c3:b4:91:d7:ad:ad:97:32:06: 09:15:15:f4:42:08:11:ac:cb:49:7c:f5:6c:49:20: 92:6b:ed:5c:ac:db:53:a6:ab:ee:60:56:46:9c:c5: 5b:03:e4:48:ee:5a:a6:39:72:b4:b6:76:25:5c:a4: 27:45:ac:07:55:49:31:b1:fc:a5:56:49:98:bb:75: 36:76:dd:63:a6:16:46:af:75:59:d8:c4:a3:29:be: 5b:2d:0b:d7:8c:c6:c8:c9:2e:dc:b3:95:30:ff:6f: 0e:92:8c:92:28:8b:2c:bb:08:dc:ee:64:40:ba:fa: 73:10:c4:b2:38:1b:52:e8:62:9c:42:f1:18:b7:f9: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:40:C1:10:D3:04:CC:66:63:77:F7:4F:CE:FC:AD:61:45:DF:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/652542c3-1d40-3378-83f0-fa3486bbad43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:49:42:ea:26:8f:85:8c:a7:d3:1b:91:44:35:52:c6:b4:77: 15:e5:a4:25:a1:1f:85:0a:58:d6:08:54:50:21:a6:e9:ed:e4: 26:5d:2b:dc:f4:0d:87:43:b0:b6:9b:db:61:0a:5c:f4:6e:57: 11:8c:cf:64:c0:d3:2d:ac:79:ec:b1:75:2e:ef:68:64:74:14: e0:ad:63:88:a7:09:6a:b8:42:3e:64:b2:45:17:c1:b2:11:4a: 53:d3:36:0c:74:c4:70:7b:ba:59:32:47:af:39:cd:3a:a3:f0: c1:03:01:eb:c4:fa:b8:3c:48:f7:14:58:32:aa:11:ce:e7:68: 77:71:ae:52:c8:14:c9:7a:c3:a8:97:4d:1d:6a:b3:c4:4d:1f: e8:98:56:ea:b7:b1:1a:b8:74:21:4d:b7:69:a2:27:ca:f8:c2: 43:4e:40:b7:3d:4e:b9:02:a7:7a:26:c6:7c:40:d0:ad:61:1c: 8b:5f:f8:d6:68:35:20:28:d3:66:77:94:b6:83:9a:83:95:07: 16:e2:9e:8f:01:86:ef:50:e5:76:06:10:d5:d1:48:22:30:1a: 6d:7a:b4:ea:8c:ca:8a:bf:76:e0:80:e5:65:df:0e:a4:1d:04: 47:73:2b:05:ac:47:df:0d:17:15:21:67:dd:78:70:36:dc:56: 14:27:92:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EE435rLDmkoIJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OTk5NWVmMTMtYjZkMi00YmYxLTllODktMDMwYTZhNzVmODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOf7G8ve3mkyD3yPJS8fKqOXYEZ3I3XMvh8/ GUDf5mHUr9ry7eIb8tnIaPMflhLM7GyoPCSr8hVtmu/kjLYZvkFXZmdC/A550Z2t cxaqveEgep30z7sHYVkLAQqVFnVJeuO4A85/+9zrNf6B1NUrVb9X0i7rJMbAefIi VlrDtJHXra2XMgYJFRX0QggRrMtJfPVsSSCSa+1crNtTpqvuYFZGnMVbA+RI7lqm OXK0tnYlXKQnRawHVUkxsfylVkmYu3U2dt1jphZGr3VZ2MSjKb5bLQvXjMbIyS7c s5Uw/28OkoySKIssuwjc7mRAuvpzEMSyOBtS6GKcQvEYt/lNdQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCScQMEQ0wTMZmN390/O/K1hRd8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjUyNTQyYzMtMWQ0MC0z Mzc4LTgzZjAtZmEzNDg2YmJhZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDSULqJo+FjKfTG5FENVLGtHcV5aQloR+FCljW CFRQIabp7eQmXSvc9A2HQ7C2m9thClz0blcRjM9kwNMtrHnssXUu72hkdBTgrWOI pwlquEI+ZLJFF8GyEUpT0zYMdMRwe7pZMkevOc06o/DBAwHrxPq4PEj3FFgyqhHO 52h3ca5SyBTJesOol00darPETR/omFbqt7EauHQhTbdpoifK+MJDTkC3PU65Aqd6 JsZ8QNCtYRyLX/jWaDUgKNNmd5S2g5qDlQcW4p6PAYbvUOV2BhDV0UgiMBpterTq jMqKv3bggOVl3w6kHQRHcysFrEffDRcVIWfdeHA23FYUJ5JQ -----END CERTIFICATE-----Generated at Wed Nov 5 03:11:15 2025 by rpki-client