$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa File: b1ee3038-ef24-3677-9eef-55387c02c99e.roa (raw, json) Hash identifier: Y8SA0KsD4inYMLzwj/6qSUc2ls5Z78ohIGrMLq1R8Bg= Subject key identifier: 02:C7:49:B6:68:26:A2:54:4C:5F:75:A0:1C:26:B3:3B:FC:32:30:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1051B6DFCF98EE9167DE60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396552 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:51:b6:df:cf:98:ee:91:67:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=6fae3408-2245-4f83-a946-000608bb8a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cd:04:1e:38:a5:ba:a0:52:22:61:36:e2:78: 08:ba:1c:33:c7:f1:74:da:18:3e:38:b5:6e:ac:64: 87:36:dd:0e:42:6c:68:67:6b:dd:85:48:d5:d8:83: da:08:33:3f:2f:53:3b:91:c7:ee:80:ca:3b:51:ea: 82:2e:ed:c9:f2:60:86:fb:f8:49:b3:ab:16:56:4f: 60:07:dc:7e:98:f4:fd:4d:7e:7f:81:e2:78:cf:8f: a2:88:c6:56:a8:06:01:0e:8c:d0:76:2d:38:40:0a: a5:47:17:6d:fa:0f:fa:0e:98:0b:00:04:83:6c:1b: 3f:8e:f3:71:e7:a1:a2:0d:1c:5b:0a:10:50:0e:d9: 0f:4b:78:88:da:8a:a9:68:c0:a9:5d:c5:4e:58:74: d0:39:36:84:b8:6b:f5:f5:68:81:c6:b9:58:38:4d: 75:51:78:fd:e1:0c:70:3c:6a:eb:8c:99:9d:4e:87: 37:45:24:6d:ee:e1:6b:82:7a:67:cb:8a:c2:14:f3: 1a:0f:ba:aa:e0:ce:3e:be:f2:e7:a5:5e:4b:8d:80: 0c:f0:ba:3b:5b:ea:0f:90:3d:0c:6f:a3:0e:fc:48: 1f:6e:6c:d7:8b:f8:51:26:89:b7:d4:3b:3b:03:0f: b8:9d:a2:8b:46:39:2e:fc:0a:6c:f9:d8:a4:fc:09: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C7:49:B6:68:26:A2:54:4C:5F:75:A0:1C:26:B3:3B:FC:32:30:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:24:bf:78:ec:29:ee:34:21:6d:a2:ae:ae:1a:31:51:88: 0b:c3:ec:a5:42:a1:b2:71:5b:a1:a9:d5:e9:f0:45:d3:8c:1c: cc:d0:98:3f:ed:4e:1f:92:d2:b2:d8:52:d6:dc:57:5b:6a:23: b7:53:d7:36:b7:9e:cf:03:50:73:d3:82:88:05:3d:9a:b2:ea: 55:42:10:8e:99:cb:e9:5d:a4:e1:e0:f2:3b:24:f4:9b:ee:b3: cf:55:fc:76:91:81:20:28:03:de:f2:1a:09:66:29:11:de:5a: 92:77:e0:2f:cb:37:11:36:d3:18:33:28:25:f6:6a:eb:a8:c5: 5e:98:70:48:29:10:8d:33:fd:7f:5f:92:23:83:26:ca:9d:35: 6d:02:20:13:2f:45:35:ff:e5:90:28:c8:40:d1:54:eb:a2:e3: 51:a1:21:c7:3b:f2:3c:37:a4:51:3f:53:7a:a1:c1:89:97:42: 55:43:4f:4e:f1:e3:bd:4f:73:07:29:22:ce:c0:a7:d5:34:8d: 95:1c:8b:71:7e:6c:51:c1:73:93:53:77:bd:4c:ee:e6:4b:f3: 92:af:90:86:9d:a4:59:52:59:52:e7:6e:90:27:b6:63:b7:ec: 28:0e:9d:04:5a:74:5b:d5:34:74:b5:78:32:49:79:11:d4:ce: f4:b6:51:b8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFG238+Y7pFn3mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NmZhZTM0MDgtMjI0NS00ZjgzLWE5NDYtMDAwNjA4YmI4YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps0EHjiluqBSImE24ngIuhwzx/F02hg+OLVu rGSHNt0OQmxoZ2vdhUjV2IPaCDM/L1M7kcfugMo7UeqCLu3J8mCG+/hJs6sWVk9g B9x+mPT9TX5/geJ4z4+iiMZWqAYBDozQdi04QAqlRxdt+g/6DpgLAASDbBs/jvNx 56GiDRxbChBQDtkPS3iI2oqpaMCpXcVOWHTQOTaEuGv19WiBxrlYOE11UXj94Qxw PGrrjJmdToc3RSRt7uFrgnpny4rCFPMaD7qq4M4+vvLnpV5LjYAM8Lo7W+oPkD0M b6MO/EgfbmzXi/hRJom31Ds7Aw+4naKLRjku/Aps+dik/AkBWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFALHSbZoJqJUTF91oBwmszv8MjDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjFlZTMwMzgtZWYyNC0z Njc3LTllZWYtNTUzODdjMDJjOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7xCS/eOwp7jQhbaKurhoxUYgLw+ylQqGycVuh qdXp8EXTjBzM0Jg/7U4fktKy2FLW3FdbaiO3U9c2t57PA1Bz04KIBT2asupVQhCO mcvpXaTh4PI7JPSb7rPPVfx2kYEgKAPe8hoJZikR3lqSd+AvyzcRNtMYMygl9mrr qMVemHBIKRCNM/1/X5IjgybKnTVtAiATL0U1/+WQKMhA0VTrouNRoSHHO/I8N6RR P1N6ocGJl0JVQ09O8eO9T3MHKSLOwKfVNI2VHItxfmxRwXOTU3e9TO7mS/OSr5CG naRZUllS526QJ7Zjt+woDp0EWnRb1TR0tXgySXkR1M70tlG4 -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:36 2025 by rpki-client