$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa File: 9449775a-db61-31cd-b34d-9168a384b676.roa (raw, json) Hash identifier: OhO1Yy6eRmoWdfnSdE7uIe9tJmaVgxESlomVuMNshow= Subject key identifier: 8A:06:EA:F5:E2:8C:62:16:48:4F:43:7C:6E:02:B1:9E:D0:EA:24:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1055C5072FF77D4312FA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396540 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:55:c5:07:2f:f7:7d:43:12:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=60ef3808-9203-456d-82d2-b008afa64086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:77:9b:c9:db:65:d1:27:20:87:75:3e:87: 47:25:53:ae:9d:49:51:b2:69:5f:d4:01:96:77:db: 8c:ce:f6:ba:13:e5:e8:ff:8c:2c:46:fe:cd:f9:31: 73:b8:68:77:bd:d3:03:8b:cc:01:84:68:42:85:f2: 40:88:71:55:eb:2c:4c:98:b7:09:66:f5:f8:dc:9e: 3c:41:be:3b:23:61:04:16:e4:30:a7:80:f7:aa:14: 08:ff:bd:32:04:12:08:17:4c:e0:6b:c6:b1:7c:09: 8b:77:14:d0:4c:00:41:36:28:bd:0a:e1:ef:fd:a9: a4:2f:16:0b:e8:32:e2:f2:1a:39:87:7f:30:96:a6: ab:f7:10:b2:b5:0f:78:98:62:ab:c5:ac:87:a0:8e: 53:c9:05:c6:84:2d:5e:4a:28:43:36:14:f4:b0:e5: 52:08:7a:4e:08:03:c0:54:3a:69:f0:86:76:1b:0a: 77:8c:67:e8:8a:62:50:0b:2f:78:b9:51:40:7c:f0: a6:2b:4c:16:50:a1:57:0c:9c:0f:64:27:1f:0a:dc: 9d:31:07:41:4f:a9:e8:4b:69:cb:86:d3:8f:6c:d3: e8:31:f8:86:3e:60:eb:3d:80:6a:e2:b0:35:72:03: 8c:37:11:42:8d:65:32:0e:41:a3:5e:b5:8d:06:b0: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:06:EA:F5:E2:8C:62:16:48:4F:43:7C:6E:02:B1:9E:D0:EA:24:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4b:57:6d:1e:f5:b4:cc:75:96:1c:a7:36:e8:fd:b0:67:6b: f9:40:3a:23:8f:06:77:ae:ca:7d:3a:f9:be:bc:ab:02:a5:47: 5d:88:8d:fb:ef:b8:3d:22:44:f6:e4:09:b6:a3:24:f0:cc:d5: c1:48:f2:6b:07:a1:1d:4c:b6:ac:ff:7f:ca:4a:c1:a9:ec:1b: 82:88:2c:a7:69:5f:0a:1c:b3:62:92:95:d8:be:15:fe:91:07: 96:40:25:ee:4d:04:3e:6c:86:e4:0e:13:40:74:cc:3c:18:d1: 73:7d:ba:25:f9:d0:60:af:3a:c3:c2:12:39:eb:4c:8e:70:65: 97:e8:70:74:3f:d2:30:50:82:35:30:73:af:3e:66:2a:a1:28: b2:4d:e3:da:c8:e4:8b:b7:09:98:48:d3:61:41:32:0b:18:7f: 9c:05:ce:93:42:c0:9a:a8:29:2e:e0:9b:0c:a6:c9:d6:37:fa: 62:49:66:91:5f:4e:09:b5:5a:70:ca:10:11:73:ba:8e:47:ae: ef:6a:74:d2:8a:27:fd:6f:6b:4c:22:19:9e:76:10:f3:6b:82: 5d:7e:fd:c0:3b:36:0a:93:73:fb:bb:17:af:b8:8f:93:9d:7c: f2:6e:bc:4c:3c:54:0e:9d:81:b4:b8:32:58:f5:2d:59:f9:57: 53:eb:cb:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFXFBy/3fUMS+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NjBlZjM4MDgtOTIwMy00NTZkLTgyZDItYjAwOGFmYTY0MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYB3m8nbZdEnIId1PodHJVOunUlRsmlf1AGW d9uMzva6E+Xo/4wsRv7N+TFzuGh3vdMDi8wBhGhChfJAiHFV6yxMmLcJZvX43J48 Qb47I2EEFuQwp4D3qhQI/70yBBIIF0zga8axfAmLdxTQTABBNii9CuHv/amkLxYL 6DLi8ho5h38wlqar9xCytQ94mGKrxayHoI5TyQXGhC1eSihDNhT0sOVSCHpOCAPA VDpp8IZ2Gwp3jGfoimJQCy94uVFAfPCmK0wWUKFXDJwPZCcfCtydMQdBT6noS2nL htOPbNPoMfiGPmDrPYBq4rA1cgOMNxFCjWUyDkGjXrWNBrCvSwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIoG6vXijGIWSE9DfG4CsZ7Q6iRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQ0OTc3NWEtZGI2MS0z MWNkLWIzNGQtOTE2OGEzODRiNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAbS1dtHvW0zHWWHKc26P2wZ2v5QDojjwZ3rsp9 Ovm+vKsCpUddiI3777g9IkT25Am2oyTwzNXBSPJrB6EdTLas/3/KSsGp7BuCiCyn aV8KHLNikpXYvhX+kQeWQCXuTQQ+bIbkDhNAdMw8GNFzfbol+dBgrzrDwhI560yO cGWX6HB0P9IwUII1MHOvPmYqoSiyTePayOSLtwmYSNNhQTILGH+cBc6TQsCaqCku 4JsMpsnWN/piSWaRX04JtVpwyhARc7qOR67vanTSiif9b2tMIhmedhDza4Jdfv3A OzYKk3P7uxevuI+TnXzybrxMPFQOnYG0uDJY9S1Z+VdT68s0 -----END CERTIFICATE-----Generated at Wed Nov 5 04:15:44 2025 by rpki-client