$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa File: e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa (raw, json) Hash identifier: vHrq9L8+HJ1o6sWKXdkene+gPwXkW4f1kAQFUJ0ghGA= Subject key identifier: 81:F2:77:5D:E4:86:DC:83:CB:B3:36:79:A7:61:CB:FE:7B:96:3F:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA10545A56A68691C31080C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 397203 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:54:5a:56:a6:86:91:c3:10:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=7812be6c-a32b-407f-82d5-a17b3f848036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:f7:44:a1:cc:89:5c:74:d3:8c:3d:af:fc: f2:d8:59:f0:22:8f:37:16:0f:0c:c5:8f:80:ef:8a: fb:e2:50:1e:69:b1:8e:c1:80:d2:86:b5:c3:40:8a: 63:aa:cc:2d:25:2a:f2:4c:1c:ac:c1:78:4f:7f:6e: 55:7a:dc:ba:7a:76:69:75:24:b2:44:1c:26:c5:09: e3:7b:32:ca:ea:17:8e:d7:1a:ae:f9:c5:99:b7:4d: 88:8a:75:8d:ac:6c:54:6a:f3:48:7b:67:03:6d:17: 48:25:2e:73:14:32:af:34:ab:96:07:20:1d:28:8e: 56:b8:48:fb:6e:56:5b:5a:ec:5b:9f:c8:b6:e7:fa: be:9c:c3:38:7e:7d:c2:e4:9a:8b:cd:82:03:89:3f: 77:b4:45:b2:0c:29:6c:0f:c5:22:6d:fb:7c:e5:6d: e8:a6:f4:7c:14:6e:03:7a:03:3e:66:00:c3:83:bc: f9:fb:1f:83:72:4d:93:38:f4:52:fb:a4:4c:00:b4: c1:68:72:a4:0e:e4:14:7b:e6:c1:54:cc:17:cd:a1: b4:52:d0:5e:c1:1d:50:7c:90:d9:fb:5a:86:f6:7a: 89:95:5a:66:eb:e3:29:cd:0a:07:95:91:3c:51:a2: b6:60:d6:89:70:40:7a:e6:c7:2d:37:ab:ca:f5:3c: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F2:77:5D:E4:86:DC:83:CB:B3:36:79:A7:61:CB:FE:7B:96:3F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:21:d1:02:6a:0e:59:49:1b:28:b4:3f:e8:aa:f4:e1:bb:7e: e2:86:3f:bf:60:fb:32:4d:80:a2:56:06:4d:5c:e7:96:e4:5c: 48:0d:d2:e0:6e:7b:66:ac:a6:54:35:27:03:6b:37:83:79:d8: 67:28:43:f3:95:30:49:e9:3f:4a:ea:30:46:2e:11:86:fc:f1: fe:01:66:32:f9:24:9a:d6:fc:76:ac:ab:94:61:fa:10:be:a7: 27:63:15:9f:19:33:22:98:d6:18:ed:b5:88:f9:0f:1c:c8:ac: 9a:95:22:d2:7c:f7:a2:e3:79:e0:f3:f5:44:31:d1:bf:02:d2: da:98:b7:3c:13:81:7d:f1:be:5f:9b:b6:dc:96:3b:81:ea:b2: ba:73:00:31:aa:82:0f:5e:be:ba:11:b9:37:0f:95:4f:aa:ab: ee:aa:07:f3:f3:13:d8:14:92:e4:c5:ca:73:45:fd:88:90:96: 69:1a:80:0f:ee:37:c5:14:63:a1:d8:f2:9e:17:9c:5a:82:26: 0f:50:5e:ee:67:50:6d:80:d5:15:9c:8b:1b:e4:a2:49:88:90: f7:b6:45:18:18:22:92:6e:2d:f4:ec:f1:4c:c0:1c:8f:3c:2a: 39:16:81:ee:6d:f9:4c:93:74:65:18:b0:46:a0:59:82:01:ac: dc:32:d1:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFRaVqaGkcMQgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NzgxMmJlNmMtYTMyYi00MDdmLTgyZDUtYTE3YjNmODQ4MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhz3RKHMiVx004w9r/zy2FnwIo83Fg8MxY+A 74r74lAeabGOwYDShrXDQIpjqswtJSryTByswXhPf25Vety6enZpdSSyRBwmxQnj ezLK6heO1xqu+cWZt02IinWNrGxUavNIe2cDbRdIJS5zFDKvNKuWByAdKI5WuEj7 blZbWuxbn8i25/q+nMM4fn3C5JqLzYIDiT93tEWyDClsD8Uibft85W3opvR8FG4D egM+ZgDDg7z5+x+Dck2TOPRS+6RMALTBaHKkDuQUe+bBVMwXzaG0UtBewR1QfJDZ +1qG9nqJlVpm6+MpzQoHlZE8UaK2YNaJcEB65sctN6vK9Tyv9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIHyd13khtyDy7M2eadhy/57lj9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTllMmM3OWQtMjRhMC0z MzAwLWE0MTYtN2YyNGFiNTE3YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASIdECag5ZSRsotD/oqvThu37ihj+/YPsyTYCi VgZNXOeW5FxIDdLgbntmrKZUNScDazeDedhnKEPzlTBJ6T9K6jBGLhGG/PH+AWYy +SSa1vx2rKuUYfoQvqcnYxWfGTMimNYY7bWI+Q8cyKyalSLSfPei43ng8/VEMdG/ AtLamLc8E4F98b5fm7bcljuB6rK6cwAxqoIPXr66Ebk3D5VPqqvuqgfz8xPYFJLk xcpzRf2IkJZpGoAP7jfFFGOh2PKeF5xagiYPUF7uZ1BtgNUVnIsb5KJJiJD3tkUY GCKSbi307PFMwByPPCo5FoHubflMk3RlGLBGoFmCAazcMtFU -----END CERTIFICATE-----Generated at Wed Nov 5 03:16:00 2025 by rpki-client