$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa File: 30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa (raw, json) Hash identifier: LHREJc1a2jE3xImYprbCjhisG7M8sR/4Jq5eGrRzgwg= Subject key identifier: E5:2B:A4:E0:90:CD:B7:68:CE:6C:B2:DF:66:F1:9A:1B:67:15:44:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15B5D76E542D8BB404B60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396574 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5b:5d:76:e5:42:d8:bb:40:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=f0d772a1-0fbc-4921-8159-d1c1bf6f9eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:6b:ab:de:e6:04:f4:a8:f1:00:2d:c2:62: 4e:75:30:b3:e0:f1:26:b3:ba:f0:d8:a5:ba:3a:ce: 3d:7b:90:7d:db:38:fc:a5:e5:95:2b:5b:41:79:66: 9e:eb:49:c3:e8:f9:00:5b:8e:ea:f4:ae:e2:e8:30: 6f:50:7e:37:1f:88:8c:86:a4:7c:a7:54:74:ae:c0: b4:5c:9c:68:44:a7:f4:bc:a8:6c:f8:73:b0:1c:64: d0:9b:33:fb:5e:b8:04:e2:84:44:14:c4:c1:a9:e0: d7:3c:43:f2:81:61:a0:9f:76:59:83:04:eb:83:58: 3e:c1:cf:f6:64:31:82:07:8a:f8:ac:44:84:24:94: 1c:78:c0:d1:00:55:e5:6d:81:7f:55:69:1d:09:df: e7:19:73:ba:3f:8e:e6:85:69:ad:4d:be:27:6b:b2: e6:89:3a:e5:89:13:ae:8e:a0:9c:72:6c:da:87:c2: 1b:5a:16:fc:5d:25:f9:2c:1d:60:df:04:2f:97:8d: 7f:40:cb:39:60:41:0f:2c:7a:b8:49:a9:a1:7c:53: 99:1c:da:f4:f4:25:b1:3f:bd:60:45:a0:7c:b4:1a: df:13:9b:97:88:f7:d7:44:5b:dc:bc:35:44:c0:55: 92:d9:f0:e3:cb:2a:2f:96:4a:ed:c7:51:52:10:da: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2B:A4:E0:90:CD:B7:68:CE:6C:B2:DF:66:F1:9A:1B:67:15:44:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:da:8f:67:42:32:d7:5c:62:12:7f:8f:3f:5d:14:a7:f6:ed: a0:0a:87:2d:e8:db:eb:ae:36:88:ed:c8:98:fc:83:8a:51:37: 70:9a:82:9b:2b:ef:86:5b:9d:ef:3f:0a:c5:9a:17:82:de:ac: bc:b4:b3:5f:19:e4:8b:03:92:8a:7a:da:ba:59:8f:8c:5b:a9: 05:eb:a0:72:d3:c5:f8:fa:f2:3e:ff:5f:a7:9a:86:f6:91:9d: e5:04:54:75:53:52:93:a3:40:a9:59:d3:4b:bf:a5:75:e6:e5: db:bb:79:82:d1:82:41:64:47:04:25:37:a2:e8:cf:7e:60:63: 59:4b:30:20:5e:d3:7e:ee:42:7c:20:ab:90:07:2c:5c:36:d4: d3:a3:c2:c5:ec:06:a8:1f:70:f9:18:59:f9:6a:a1:da:7c:49: 5d:f0:d8:b2:cd:c8:58:73:d1:93:0d:aa:c8:3f:9c:44:56:fb: 2e:4f:96:14:21:d4:63:74:af:6c:45:17:7f:25:65:7d:b6:dc: 6d:de:fe:9c:a2:52:b6:a5:4a:64:49:f9:b3:88:33:ae:68:50: 4d:61:3b:00:0b:b3:fd:15:9a:ba:a0:50:60:71:3a:bc:a8:0c: ae:da:79:9f:20:b4:36:ad:a5:c8:c2:ed:35:50:f5:d4:92:00: e4:0c:6f:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VtdduVC2LtAS2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjBkNzcyYTEtMGZiYy00OTIxLTgxNTktZDFjMWJmNmY5ZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmJrq97mBPSo8QAtwmJOdTCz4PEms7rw2KW6 Os49e5B92zj8peWVK1tBeWae60nD6PkAW47q9K7i6DBvUH43H4iMhqR8p1R0rsC0 XJxoRKf0vKhs+HOwHGTQmzP7XrgE4oREFMTBqeDXPEPygWGgn3ZZgwTrg1g+wc/2 ZDGCB4r4rESEJJQceMDRAFXlbYF/VWkdCd/nGXO6P47mhWmtTb4na7LmiTrliROu jqCccmzah8IbWhb8XSX5LB1g3wQvl41/QMs5YEEPLHq4SamhfFOZHNr09CWxP71g RaB8tBrfE5uXiPfXRFvcvDVEwFWS2fDjyyovlkrtx1FSENrZJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOUrpOCQzbdozmyy32bxmhtnFUS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBmNzljMGYtYzg0NS0z ODBiLWJiNjctMTliM2E4ZThhNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHaj2dCMtdcYhJ/jz9dFKf27aAKhy3o2+uuNojtyJj8g4pRN3Ca gpsr74Zbne8/CsWaF4LerLy0s18Z5IsDkop62rpZj4xbqQXroHLTxfj68j7/X6ea hvaRneUEVHVTUpOjQKlZ00u/pXXm5du7eYLRgkFkRwQlN6Loz35gY1lLMCBe037u Qnwgq5AHLFw21NOjwsXsBqgfcPkYWflqodp8SV3w2LLNyFhz0ZMNqsg/nERW+y5P lhQh1GN0r2xFF38lZX223G3e/pyiUralSmRJ+bOIM65oUE1hOwALs/0VmrqgUGBx OryoDK7aeZ8gtDatpcjC7TVQ9dSSAOQMb+E= -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:26 2025 by rpki-client