$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95042852-c099-393e-8c17-ff715ccc91bc.roa File: 95042852-c099-393e-8c17-ff715ccc91bc.roa (raw, json) Hash identifier: 4+0lmoneccIlHRsDRULhPC9AVF4oiov6LTI3b/QFU7I= Subject key identifier: 33:98:97:81:C1:4E:5B:A3:A7:32:01:3B:9A:48:C5:E0:AB:60:6C:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BB45D3F9464D577C137B18480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95042852-c099-393e-8c17-ff715ccc91bc.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2620:74:87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3f:94:64:d5:77:c1:37:b1:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=5d955983-1572-495d-a535-72520947865b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:0d:f6:5e:21:67:4d:38:f3:d4:89:4d:91: 32:4a:55:2b:20:ad:10:d8:6f:f9:65:62:54:e7:9e: 78:5a:8d:98:5a:69:6f:5d:e8:df:da:f7:da:29:32: 36:0d:f4:63:fb:18:75:91:97:b2:b0:0a:3e:33:26: cb:97:9c:5c:af:61:be:34:35:bb:1e:14:ca:b1:0c: 94:99:66:5a:6c:26:50:d8:9d:fa:d6:c4:0e:07:1e: 00:0a:15:e2:5c:b7:5a:07:15:86:a5:a3:a9:9f:b2: 32:bd:91:dd:5d:f3:4f:fc:83:88:a6:42:1d:7e:ac: 96:a4:89:4c:31:bf:41:fb:f4:ec:c3:21:c1:95:7c: 20:86:ab:bc:ad:73:f9:15:21:b7:ae:3d:e9:2d:c9: 27:00:d1:0e:94:0d:14:55:a9:f8:72:9a:45:cf:d6: 33:df:e8:81:5a:90:a1:3b:8a:33:9d:84:be:dc:b6: e3:03:f7:79:83:32:2e:9b:8a:23:0d:68:0b:1e:7d: 55:df:61:83:65:55:42:89:09:5a:0f:c8:f0:23:bc: a7:18:20:d1:97:59:63:32:6c:f3:51:11:a0:3f:e8: 14:0a:63:15:4b:bb:20:07:39:54:a4:c2:ec:f1:92: c4:36:1e:03:03:5c:cd:be:40:6d:c1:b1:ba:c1:8e: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:98:97:81:C1:4E:5B:A3:A7:32:01:3B:9A:48:C5:E0:AB:60:6C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95042852-c099-393e-8c17-ff715ccc91bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d3:31:b6:5c:bf:2d:15:db:8c:4d:a8:38:64:1b:a4:d9:3a: 8a:d4:f4:dd:99:6d:78:99:ab:60:e6:f4:32:11:ad:71:4f:bf: 99:3b:8a:02:c3:b3:f8:9a:a8:70:cb:a7:8f:87:39:21:d0:8d: aa:17:1f:65:7a:c0:b0:e7:1c:7a:2f:61:29:90:a2:e2:2a:44: 9c:13:22:a2:90:53:b9:87:f5:df:c8:1f:05:d2:b2:51:6a:a2: 19:f5:46:f9:27:8a:53:08:87:e5:52:6e:85:d4:84:9b:3b:48: 9a:be:04:11:e3:f4:6a:20:ee:59:5e:7c:09:fd:ec:da:72:f8: 31:56:fc:ee:13:f9:8c:c5:cc:dd:c3:fe:c2:52:97:d7:cc:1e: 79:16:f5:bd:c8:e1:00:15:92:c4:05:eb:12:c7:22:f8:4c:c2: 96:58:28:f8:91:f8:4e:03:85:db:52:8e:a9:56:bd:91:68:27: 6e:f3:33:5c:2e:0a:f5:f6:ea:b1:07:8c:77:c9:5b:ff:6f:b9: 26:ae:dc:2b:43:ef:de:cd:4e:64:1b:08:8a:4d:3f:e3:35:b3: b3:9e:fe:9f:0c:8f:04:c4:2c:1c:d1:ab:5c:60:91:58:04:62: cc:7e:50:4d:7f:87:33:74:97:f1:a4:99:a2:db:36:5b:a1:41: d5:6b:2b:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XT+UZNV3wTexhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NWQ5NTU5ODMtMTU3Mi00OTVkLWE1MzUtNzI1MjA5NDc4NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArloN9l4hZ00489SJTZEySlUrIK0Q2G/5ZWJU 5554Wo2YWmlvXejf2vfaKTI2DfRj+xh1kZeysAo+MybLl5xcr2G+NDW7HhTKsQyU mWZabCZQ2J361sQOBx4AChXiXLdaBxWGpaOpn7IyvZHdXfNP/IOIpkIdfqyWpIlM Mb9B+/TswyHBlXwghqu8rXP5FSG3rj3pLcknANEOlA0UVan4cppFz9Yz3+iBWpCh O4oznYS+3LbjA/d5gzIum4ojDWgLHn1V32GDZVVCiQlaD8jwI7ynGCDRl1ljMmzz URGgP+gUCmMVS7sgBzlUpMLs8ZLENh4DA1zNvkBtwbG6wY6+awIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDOYl4HBTlujpzIBO5pIxeCrYGz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTUwNDI4NTItYzA5OS0z OTNlLThjMTctZmY3MTVjY2M5MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPTMbZcvy0V24xNqDhkG6TZOorU9N2ZbXiZq2Dm9DIRrXFPv5k7 igLDs/iaqHDLp4+HOSHQjaoXH2V6wLDnHHovYSmQouIqRJwTIqKQU7mH9d/IHwXS slFqohn1RvknilMIh+VSboXUhJs7SJq+BBHj9Gog7llefAn97Npy+DFW/O4T+YzF zN3D/sJSl9fMHnkW9b3I4QAVksQF6xLHIvhMwpZYKPiR+E4DhdtSjqlWvZFoJ27z M1wuCvX26rEHjHfJW/9vuSau3CtD797NTmQbCIpNP+M1s7Oe/p8MjwTELBzRq1xg kVgEYsx+UE1/hzN0l/GkmaLbNluhQdVrK1g= -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:00 2025 by rpki-client