$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa File: c1ed2970-2690-38aa-b433-78dfcb1be478.roa (raw, json) Hash identifier: 7dAOpQk2+ogJKLvuLOGLalpPWz5TMm/Gu3/mIPXONVM= Subject key identifier: 4E:8E:BC:7E:E5:76:9A:23:47:4B:DE:12:6E:32:B0:40:34:3E:CD:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1051E9486F8E8BBDE2BDD0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396546 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:51:e9:48:6f:8e:8b:bd:e2:bd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=7cccf717-11c5-4b49-ae17-d282abff34d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:7f:a0:b7:bd:ab:c3:80:fa:08:d7:a2:6a: c6:ad:1f:08:51:1f:ea:74:c3:0b:10:48:28:39:f6: 3b:84:e7:fa:a4:ab:4f:66:9a:33:af:47:64:b8:5d: cd:4d:28:cf:ce:ff:25:10:a8:60:e3:7f:ce:17:08: 94:a2:54:dc:f9:19:41:12:c7:7a:4c:40:b6:be:b0: b9:a2:5c:57:68:8b:bf:13:39:44:f8:35:0b:90:5c: fc:24:4d:07:99:7b:94:10:ea:8f:c8:af:bf:1b:9b: 33:5f:ab:ec:10:96:83:40:fd:6d:5f:d9:7e:12:be: 67:c2:61:a3:a8:09:ad:4a:96:d4:4a:65:b9:15:0c: e0:c3:1a:a7:1f:d3:8b:22:f1:9e:f0:39:40:e7:37: 33:01:dd:ac:84:41:e5:31:7b:1c:84:40:dc:35:8c: 8d:c1:ef:c0:76:fb:97:fb:74:13:d0:40:88:a6:d4: 43:b0:34:03:1f:4c:83:79:68:dd:90:da:b9:d9:11: db:a8:1f:a6:ad:89:bc:69:54:62:7f:60:9d:0a:cc: b0:bb:fa:c8:cf:d8:37:a4:33:9d:16:ab:51:f7:88: ec:33:4b:be:ee:89:60:8c:d4:46:98:75:35:de:fc: e3:45:ee:93:45:78:3a:9c:84:38:94:ec:d2:51:be: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8E:BC:7E:E5:76:9A:23:47:4B:DE:12:6E:32:B0:40:34:3E:CD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bc:f0:5f:33:f9:8e:cb:c4:a8:4b:36:d3:12:a5:fb:ed:48: 2e:83:2f:98:80:cd:59:e6:46:e4:48:a7:d2:f2:4b:2a:aa:c0: c5:da:87:9d:94:e8:c8:41:14:3c:36:8b:3b:52:4d:05:6d:a6: 7a:40:67:80:ea:98:2c:cc:9c:de:ad:5d:96:e7:6d:e4:2d:1a: 3f:b7:5c:2d:16:f7:3a:0a:d3:8a:99:f5:da:bb:15:c3:ef:42: bc:89:d4:72:92:82:9b:8a:e7:8d:27:c2:e7:ca:e1:75:1b:b1: 37:ab:1e:38:c3:d2:dd:b1:d3:c6:4a:c5:f3:bb:0b:28:ef:b1: b9:fa:e9:a7:a9:a4:f7:94:78:5f:e7:da:b3:32:90:f8:64:b2: 06:cf:f8:24:98:dc:9d:3e:7c:73:f2:0c:a3:b1:af:dd:0a:17: 80:10:82:0c:56:bf:9d:64:9a:c0:e1:11:ce:ba:5b:5a:73:f8: c6:c8:4f:22:17:74:87:5c:b4:8f:b0:2e:7c:31:3c:78:c0:f4: 66:d0:58:2d:12:56:a0:12:53:2d:4a:f6:d1:b9:eb:d2:37:01: 5c:d1:d7:35:9e:63:3c:69:31:f3:56:b5:4b:c6:f7:fc:89:f1: 8c:43:a8:a5:91:5e:12:84:d0:68:e1:ba:f1:d5:c0:97:f9:b0: 74:c9:03:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFHpSG+Oi73ivdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk N2NjY2Y3MTctMTFjNS00YjQ5LWFlMTctZDI4MmFiZmYzNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9d/oLe9q8OA+gjXomrGrR8IUR/qdMMLEEgo OfY7hOf6pKtPZpozr0dkuF3NTSjPzv8lEKhg43/OFwiUolTc+RlBEsd6TEC2vrC5 olxXaIu/EzlE+DULkFz8JE0HmXuUEOqPyK+/G5szX6vsEJaDQP1tX9l+Er5nwmGj qAmtSpbUSmW5FQzgwxqnH9OLIvGe8DlA5zczAd2shEHlMXschEDcNYyNwe/AdvuX +3QT0ECIptRDsDQDH0yDeWjdkNq52RHbqB+mrYm8aVRif2CdCsywu/rIz9g3pDOd FqtR94jsM0u+7olgjNRGmHU13vzjRe6TRXg6nIQ4lOzSUb6izQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE6OvH7ldpojR0veEm4ysEA0Ps39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFlZDI5NzAtMjY5MC0z OGFhLWI0MzMtNzhkZmNiMWJlNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtvPBfM/mOy8SoSzbTEqX77Ugugy+YgM1Z5kbk SKfS8ksqqsDF2oedlOjIQRQ8Nos7Uk0FbaZ6QGeA6pgszJzerV2W523kLRo/t1wt Fvc6CtOKmfXauxXD70K8idRykoKbiueNJ8LnyuF1G7E3qx44w9LdsdPGSsXzuwso 77G5+umnqaT3lHhf59qzMpD4ZLIGz/gkmNydPnxz8gyjsa/dCheAEIIMVr+dZJrA 4RHOultac/jGyE8iF3SHXLSPsC58MTx4wPRm0FgtElagElMtSvbRuevSNwFc0dc1 nmM8aTHzVrVLxvf8ifGMQ6ilkV4ShNBo4brx1cCX+bB0yQMz -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:01 2025 by rpki-client