$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8470b6f-a20c-349d-8777-c507148ac3cd.roa File: c8470b6f-a20c-349d-8777-c507148ac3cd.roa (raw, json) Hash identifier: vcX+At2qSmf0E6E8xv5zkdiz3oQEqdXhO9OLfgmsQVI= Subject key identifier: F0:E2:FE:FB:1A:9F:95:CE:87:CD:14:12:E0:07:3A:C1:27:6F:AE:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B636743A7C866DF488DE0C780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8470b6f-a20c-349d-8777-c507148ac3cd.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:43:a7:c8:66:df:48:8d:e0:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=9a658630-e5d5-4f36-976e-651702273f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:96:f8:dd:b6:3f:fb:e2:f6:3b:e4:c5:fd: e7:45:39:f0:a1:90:19:54:5b:9b:16:21:80:1b:94: 0f:e8:20:a7:2e:af:1b:95:75:80:0e:1f:cc:dc:a2: 65:d8:6f:8c:f2:01:15:b7:ac:2c:79:9c:cc:d8:0f: 3c:a4:f8:93:3d:cd:8a:8c:ca:7d:87:2d:80:6c:8d: b0:7d:aa:22:17:c6:2b:12:3b:43:e1:fd:0f:20:f1: cc:2e:30:db:db:fa:29:49:cd:a0:a0:c6:a2:56:6b: f2:45:29:5d:88:c3:b0:8a:f2:58:d5:bc:1a:f3:bb: b7:63:70:f2:ec:77:08:ac:07:ec:d6:ef:ef:85:e1: 83:b0:f4:a0:2c:ef:c4:4a:d5:91:b3:12:13:f5:8e: 4a:58:46:00:fc:8f:6f:53:a0:40:b2:2c:6b:c3:3a: fc:3e:02:7d:db:8f:6d:d7:83:3a:1e:c3:9e:cb:ba: ff:c3:99:06:c5:2e:ee:7d:7a:cb:29:0d:e4:f4:79: cb:85:89:42:cb:ee:48:07:24:16:3c:7e:68:8c:79: 57:5d:22:0a:68:3a:59:9e:56:5a:37:a3:40:90:6b: a3:c9:69:bd:de:fd:3a:ec:40:32:46:1b:60:3d:d6: 54:53:66:e5:2a:e9:7a:e2:8d:18:9f:81:cd:b8:ac: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:FE:FB:1A:9F:95:CE:87:CD:14:12:E0:07:3A:C1:27:6F:AE:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8470b6f-a20c-349d-8777-c507148ac3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:49::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2f:c8:38:89:aa:7f:54:62:9a:89:03:9d:ab:75:39:7e:54: 83:5f:a1:05:d7:18:e9:55:74:ed:87:0f:04:87:97:c6:e3:29: be:85:cc:58:14:50:a2:c1:b3:46:0b:d0:1e:bc:6a:2b:62:a5: e9:98:bb:62:a1:75:49:95:d4:72:f5:9d:8d:1f:a0:e8:51:f3: be:34:37:4a:1e:3f:3a:99:1b:0e:47:ee:f8:53:d5:a8:a4:85: df:f9:80:95:4c:7e:3d:5e:23:58:ab:73:0d:bf:dc:78:88:d8: 66:b9:2a:fe:d3:24:9e:6e:cc:91:64:75:99:4b:22:12:15:c0: ba:61:05:55:ed:f6:f3:11:db:29:05:61:a2:38:e5:df:5b:db: 79:63:7f:a9:1e:20:4e:09:a9:17:af:e9:ae:74:f1:e4:da:bc: d8:0c:a1:fd:d9:e9:71:41:d6:d7:21:85:3b:11:53:89:35:fe: ee:d6:2c:09:ac:92:b3:31:d7:db:05:27:6d:0c:5f:8d:f1:53: cc:25:d3:e9:93:0e:65:de:94:4c:e3:c4:02:51:bc:87:a2:e5: 51:93:a5:a7:2d:28:68:47:b7:d4:ab:b8:e7:58:d3:54:4f:37: 42:57:db:59:bb:fc:4d:53:ea:6b:b2:d2:62:74:5e:4f:54:88: c3:77:61:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ0OnyGbfSI3gx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OWE2NTg2MzAtZTVkNS00ZjM2LTk3NmUtNjUxNzAyMjczZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlyW+N22P/vi9jvkxf3nRTnwoZAZVFubFiGA G5QP6CCnLq8blXWADh/M3KJl2G+M8gEVt6wseZzM2A88pPiTPc2KjMp9hy2AbI2w faoiF8YrEjtD4f0PIPHMLjDb2/opSc2goMaiVmvyRSldiMOwivJY1bwa87u3Y3Dy 7HcIrAfs1u/vheGDsPSgLO/EStWRsxIT9Y5KWEYA/I9vU6BAsixrwzr8PgJ9249t 14M6HsOey7r/w5kGxS7ufXrLKQ3k9HnLhYlCy+5IByQWPH5ojHlXXSIKaDpZnlZa N6NAkGujyWm93v067EAyRhtgPdZUU2blKul64o0Yn4HNuKyNGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPDi/vsan5XOh80UEuAHOsEnb64SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg0NzBiNmYtYTIwYy0z NDlkLTg3NzctYzUwNzE0OGFjM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE8vyDiJqn9UYpqJA52rdTl+VINfoQXXGOlVdO2HDwSHl8bjKb6F zFgUUKLBs0YL0B68aitipemYu2KhdUmV1HL1nY0foOhR8740N0oePzqZGw5H7vhT 1aikhd/5gJVMfj1eI1ircw2/3HiI2Ga5Kv7TJJ5uzJFkdZlLIhIVwLphBVXt9vMR 2ykFYaI45d9b23ljf6keIE4JqRev6a508eTavNgMof3Z6XFB1tchhTsRU4k1/u7W LAmskrMx19sFJ20MX43xU8wl0+mTDmXelEzjxAJRvIei5VGTpactKGhHt9SruOdY 01RPN0JX21m7/E1T6muy0mJ0Xk9UiMN3YeI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:02 2025 by rpki-client