$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa File: 21812b5d-b2b3-398c-afb7-221a71c32c32.roa (raw, json) Hash identifier: 1QYvRblhCi//OxX0mbh5RrgjibofHEBSepReY8guSow= Subject key identifier: 43:91:5D:97:49:77:5D:8D:95:43:1F:31:D9:2B:90:5F:7A:6D:CC:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DFF64B3FE19C919187C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396575 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:df:f6:4b:3f:e1:9c:91:91:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=40f856b9-b709-42aa-a0e3-610b293d99cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:58:78:ae:c8:3c:a7:ff:76:5a:91:49:1f: 86:38:f2:de:db:4c:b4:8b:bf:8a:f7:17:56:88:50: cd:85:96:10:9a:13:3b:d8:73:de:88:1d:42:a9:1d: a4:a2:d0:cc:29:73:24:df:ba:75:1c:32:5b:1a:e3: b6:62:a1:9e:db:c1:54:48:b4:e7:45:26:1f:f4:90: aa:03:ce:9d:4b:19:3f:fc:23:8d:b0:1f:ea:db:7f: c1:93:01:b8:01:89:21:a9:ad:94:c5:27:d2:6f:00: 48:fa:2d:ce:e2:19:ca:b8:3c:65:84:04:57:bd:45: 81:88:fd:2a:30:5d:35:0e:c8:e7:ec:41:62:14:68: e7:0e:7a:88:9a:6c:36:b7:2e:5e:9c:a7:91:0c:27: c0:6a:1b:98:31:a5:a0:29:44:26:be:d8:88:ed:78: 9a:bb:a3:b6:3c:1a:bd:31:c7:38:2d:9e:81:3d:de: 19:21:2d:23:89:be:df:ff:98:85:2c:c7:32:88:0b: c2:83:5e:89:17:4d:e9:95:74:ed:a7:07:30:9f:de: b6:72:7c:93:12:e9:8e:ef:e9:73:fa:7e:30:82:69: a3:1e:cd:68:df:0c:67:5e:01:95:06:aa:93:f4:94: 61:c8:3d:23:c7:c2:66:ff:3b:8b:ac:85:b7:c6:4e: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:5D:97:49:77:5D:8D:95:43:1F:31:D9:2B:90:5F:7A:6D:CC:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4c:7a:d9:b8:3e:24:eb:40:67:8d:4a:31:f4:63:21:84:89: 0c:01:e8:96:4b:a1:36:e6:0e:25:b1:60:99:b2:24:75:b4:65: 01:e9:35:29:0b:65:5f:b7:b3:a8:62:11:db:43:c2:ac:7f:b5: ee:8f:c4:8d:e2:ee:57:9c:ef:51:bd:c2:af:bc:61:b6:33:a9: 0d:26:c2:2f:03:d2:2d:4b:d8:bf:94:99:2c:a8:a0:c5:2e:dd: 12:46:23:e6:f2:34:e1:08:5b:34:58:da:60:e4:49:b8:f3:67: 2c:23:4e:bd:73:2c:8f:d1:8f:cc:64:a8:96:9f:35:5b:a7:74: d3:0e:60:34:91:20:d8:59:4b:04:5b:61:79:bc:bb:d7:81:29: ed:ca:35:80:96:4d:34:72:71:08:59:1c:b5:d7:a8:77:dd:a7: 96:c9:c5:9d:7a:94:c2:f1:71:cf:d6:a7:f4:60:68:ed:cd:f4: bc:d6:0c:07:8b:68:ee:a7:e9:d4:89:5c:e2:a9:7d:af:c6:7e: 2d:b1:98:4d:63:5a:b6:be:12:df:28:6a:44:bb:39:03:fd:c0: a6:63:46:ed:4d:da:ec:12:fe:04:39:f3:a4:f6:95:10:05:8d: e8:b6:f3:59:be:f4:14:b3:26:55:dc:0f:e7:ba:a9:c6:bf:c2: 0a:f0:03:6a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19/2Sz/hnJGRh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDBmODU2YjktYjcwOS00MmFhLWEwZTMtNjEwYjI5M2Q5OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVZYeK7IPKf/dlqRSR+GOPLe20y0i7+K9xdW iFDNhZYQmhM72HPeiB1CqR2kotDMKXMk37p1HDJbGuO2YqGe28FUSLTnRSYf9JCq A86dSxk//CONsB/q23/BkwG4AYkhqa2UxSfSbwBI+i3O4hnKuDxlhARXvUWBiP0q MF01Dsjn7EFiFGjnDnqImmw2ty5enKeRDCfAahuYMaWgKUQmvtiI7Xiau6O2PBq9 Mcc4LZ6BPd4ZIS0jib7f/5iFLMcyiAvCg16JF03plXTtpwcwn962cnyTEumO7+lz +n4wgmmjHs1o3wxnXgGVBqqT9JRhyD0jx8Jm/zuLrIW3xk7ofQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEORXZdJd12NlUMfMdkrkF96bcz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjE4MTJiNWQtYjJiMy0z OThjLWFmYjctMjIxYTcxYzMyYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3THrZuD4k60BnjUox9GMhhIkMAeiWS6E25g4l sWCZsiR1tGUB6TUpC2Vft7OoYhHbQ8Ksf7Xuj8SN4u5XnO9RvcKvvGG2M6kNJsIv A9ItS9i/lJksqKDFLt0SRiPm8jThCFs0WNpg5Em482csI069cyyP0Y/MZKiWnzVb p3TTDmA0kSDYWUsEW2F5vLvXgSntyjWAlk00cnEIWRy116h33aeWycWdepTC8XHP 1qf0YGjtzfS81gwHi2jup+nUiVziqX2vxn4tsZhNY1q2vhLfKGpEuzkD/cCmY0bt TdrsEv4EOfOk9pUQBY3otvNZvvQUsyZV3A/nuqnGv8IK8ANq -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:55 2025 by rpki-client