$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/152aa566-6047-3044-a1c4-061259070c26.roa File: 152aa566-6047-3044-a1c4-061259070c26.roa (raw, json) Hash identifier: K9/2BTgz2KMu/t+m48heZg3rnOH8EmaW4cW0lY2xYKA= Subject key identifier: A0:F2:E6:E8:DF:8E:6B:B5:1F:02:EB:87:AE:34:83:6C:55:79:AC:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366F72718FF90676919E20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/152aa566-6047-3044-a1c4-061259070c26.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396560 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6f:72:71:8f:f9:06:76:91:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=1c605d3d-c528-4f21-b4a5-328981649604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:af:5e:37:6b:34:c5:d9:31:04:d3:0c:c3: 50:cf:8d:b8:10:5e:6d:e0:67:d0:b9:2e:ce:01:ea: 58:f3:e3:cc:b6:64:d5:ce:52:fa:a8:37:08:01:c0: 61:46:46:53:1c:e4:55:c4:c8:18:ff:79:94:f5:3b: 9a:8b:54:ae:52:6a:9b:d6:c5:2f:6e:0b:69:1c:6c: 3a:78:fe:36:e5:94:82:a4:a8:62:fc:a9:b1:e9:ec: 6b:6a:33:01:96:27:7c:81:36:bb:b3:24:99:83:f9: 1c:61:4f:58:ff:7f:b2:3f:47:73:0c:f5:48:49:5b: 85:86:a3:35:11:4d:9e:c8:41:9d:50:69:03:52:7b: 1d:66:dd:d3:ae:4e:6f:a0:d7:8b:a1:eb:53:31:0d: 7c:c6:da:ff:d6:2d:75:c7:0d:e2:34:97:c6:a4:b0: 74:6e:50:9a:01:3b:dc:7d:72:15:13:b0:5b:34:f3: e8:35:d2:fa:a2:97:e1:3c:3f:31:2b:68:38:d7:3e: fb:91:a7:5c:75:b5:b3:c0:b1:db:b5:4a:3a:16:7d: 9b:a4:d9:55:6b:60:d9:06:aa:81:d5:77:4f:56:5f: ad:8e:ef:ab:e5:cf:05:d2:9b:fa:64:b1:03:4a:23: 59:5c:ef:c2:dd:fc:91:ad:74:8a:41:17:c0:1e:b5: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:E6:E8:DF:8E:6B:B5:1F:02:EB:87:AE:34:83:6C:55:79:AC:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/152aa566-6047-3044-a1c4-061259070c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d3:d7:8c:53:aa:a2:be:95:f2:1e:24:fa:c2:74:9d:b7:85: fa:7c:f7:7d:4f:0d:93:a6:4b:da:92:e6:64:fd:39:25:7b:25: 7a:68:a8:31:61:da:1c:66:67:99:ec:e5:e1:d4:83:97:5d:57: 69:8b:a1:9e:58:d2:8a:40:c4:f7:08:f9:0c:b1:8c:1e:12:29: 10:da:01:0c:ba:d3:d0:e7:bf:a8:7d:a0:5a:56:10:c6:88:12: f4:ed:43:7a:f8:a1:75:8c:23:a5:d6:d8:3e:73:ee:77:2b:85: 5e:9f:c9:01:03:35:b1:09:56:d6:d2:f9:e7:0e:75:d5:25:2a: 16:82:b6:6d:3f:c0:91:9b:6b:a9:7a:67:b4:d8:e3:35:7c:4f: d6:73:3c:a9:91:4e:f9:07:2e:d0:d9:73:9b:e3:10:00:b7:3a: e7:d0:27:1d:06:0a:c4:17:60:bc:8b:0c:65:28:4f:08:b8:8a: 8f:d5:0f:36:11:fc:24:4a:60:a6:99:94:88:a3:5f:21:51:48: 2d:48:39:37:d5:69:f1:b7:10:c4:a1:1c:f5:38:40:e5:cf:e1: 99:d6:11:13:a0:1d:01:b9:31:5d:f2:de:a0:84:4c:ef:b6:ba: 34:64:6b:fb:82:e4:fd:10:22:f1:90:31:b9:30:4f:a8:ed:91: 56:0c:7f:55 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm9ycY/5BnaRniAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MWM2MDVkM2QtYzUyOC00ZjIxLWI0YTUtMzI4OTgxNjQ5NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVKvXjdrNMXZMQTTDMNQz424EF5t4GfQuS7O AepY8+PMtmTVzlL6qDcIAcBhRkZTHORVxMgY/3mU9Tuai1SuUmqb1sUvbgtpHGw6 eP425ZSCpKhi/Kmx6exrajMBlid8gTa7sySZg/kcYU9Y/3+yP0dzDPVISVuFhqM1 EU2eyEGdUGkDUnsdZt3Trk5voNeLoetTMQ18xtr/1i11xw3iNJfGpLB0blCaATvc fXIVE7BbNPPoNdL6opfhPD8xK2g41z77kadcdbWzwLHbtUo6Fn2bpNlVa2DZBqqB 1XdPVl+tju+r5c8F0pv6ZLEDSiNZXO/C3fyRrXSKQRfAHrWrPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKDy5ujfjmu1HwLrh640g2xVeazQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTUyYWE1NjYtNjA0Ny0z MDQ0LWExYzQtMDYxMjU5MDcwYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/09eMU6qivpXyHiT6wnSdt4X6fPd9Tw2Tpkva kuZk/TkleyV6aKgxYdocZmeZ7OXh1IOXXVdpi6GeWNKKQMT3CPkMsYweEikQ2gEM utPQ57+ofaBaVhDGiBL07UN6+KF1jCOl1tg+c+53K4Ven8kBAzWxCVbW0vnnDnXV JSoWgrZtP8CRm2upeme02OM1fE/WczypkU75By7Q2XOb4xAAtzrn0CcdBgrEF2C8 iwxlKE8IuIqP1Q82EfwkSmCmmZSIo18hUUgtSDk31WnxtxDEoRz1OEDlz+GZ1hET oB0BuTFd8t6ghEzvtro0ZGv7guT9ECLxkDG5ME+o7ZFWDH9V -----END CERTIFICATE-----Generated at Wed Oct 29 20:44:48 2025 by rpki-client