
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
File: b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa (raw, json)
Hash identifier: mrvebeugiBGOP7ETqVWWtLoCn2DABVYQ3HuUES6UlLc=
Subject key identifier: 77:D1:82:90:FB:67:CD:19:67:56:19:EB:AB:3B:2C:FD:61:20:C7:32
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B84E7932314723ACA6245B280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
Signing time: Tue 14 Oct 2025 13:00:37 +0000
ROA not before: Tue 14 Oct 2025 13:00:37 +0000
ROA not after: Mon 12 Jan 2026 14:00:37 +0000
asID: 396552
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:84:e7:93:23:14:72:3a:ca:62:45:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 14 13:00:37 2025 GMT
Not After : Jan 12 14:00:37 2026 GMT
Subject: CN=1d153de4-8313-4113-ad14-42bf3c29f6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:57:3b:3a:d4:41:f4:97:a3:23:0a:f1:75:
2a:7b:6c:e5:e5:f9:72:5a:20:90:fc:20:ef:88:06:
75:b6:8f:be:dd:6b:6b:ff:bf:b4:20:f7:bf:68:54:
13:25:d8:db:eb:89:c7:3b:f6:b5:83:e2:ed:05:dc:
51:b0:0a:94:da:60:af:df:58:5a:d1:65:75:ac:c0:
a3:0c:4e:fb:44:a3:dd:9e:cc:a9:90:dd:cd:a4:d9:
8d:5d:2f:cf:f7:49:2b:2e:e9:c8:2e:a4:5f:e0:58:
b5:9a:16:0a:aa:47:3c:27:1d:6b:fc:41:4f:c3:59:
8d:e8:23:88:ee:8b:03:e4:33:11:bf:31:c7:3d:1e:
02:3d:ab:de:10:84:b1:91:44:e4:c5:27:aa:39:74:
c3:e0:55:22:98:ac:be:3b:3e:d2:67:63:d6:a5:b6:
4f:ce:73:d2:80:b3:4a:0a:65:09:e8:6d:71:d5:9d:
93:64:39:a1:09:d4:16:53:66:23:b3:8f:a9:a7:34:
9d:e7:5a:67:13:c4:e4:8f:32:6e:36:1b:cc:8c:42:
0a:44:60:3a:24:94:52:a5:f6:63:cf:7c:a9:6f:9b:
b4:72:96:6a:ba:c7:2d:c1:38:38:b9:e3:6d:07:60:
ce:f2:ef:a1:33:44:27:bb:8e:81:11:56:20:a9:38:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:82:90:FB:67:CD:19:67:56:19:EB:AB:3B:2C:FD:61:20:C7:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:44:9e:b7:5e:ad:71:0c:c9:7b:26:99:b8:0f:90:c8:99:2d:
2a:29:52:a5:5c:9a:1d:2e:62:2f:bb:b3:f8:51:5a:cb:3a:84:
94:ba:29:58:52:08:90:36:e0:4e:cf:9a:e9:2c:a9:bb:d3:79:
ce:cc:74:d9:cd:ea:54:8b:a8:ce:03:04:ce:a9:02:e2:2e:84:
3e:4b:07:20:d0:e7:7d:e5:49:2c:12:78:40:e4:4f:99:70:3f:
45:f1:4b:e3:ee:13:7d:0f:83:45:b2:94:a0:be:e1:86:35:ad:
0e:08:0b:0f:d5:fc:c0:d8:f9:f7:76:96:27:18:2b:74:47:c4:
f1:c3:a0:d3:3a:e2:5e:4f:de:e8:e7:e3:9d:35:be:04:9f:cb:
99:6a:a0:04:0c:3f:07:03:b1:31:24:ca:4e:3f:c6:8c:b7:e7:
34:84:23:ff:66:cf:ab:b6:f4:fc:d7:a4:00:1c:1e:20:38:8c:
65:62:d7:65:ef:f5:75:e5:3c:4f:95:bb:1a:90:b4:0e:86:cf:
2e:34:c6:2b:bb:d2:e3:a3:66:c2:00:98:14:c1:f4:27:d0:4e:
58:6c:5a:4f:bd:51:63:47:ce:4a:9f:01:1c:73:9c:b1:2f:f7:
2e:dc:20:65:b1:47:20:6a:8a:40:13:fd:ae:28:00:e6:73:c6:
7c:b5:ff:3b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55MjFHI6ymJFsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
MWQxNTNkZTQtODMxMy00MTEzLWFkMTQtNDJiZjNjMjlmNmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtONXOzrUQfSXoyMK8XUqe2zl5flyWiCQ/CDv
iAZ1to++3Wtr/7+0IPe/aFQTJdjb64nHO/a1g+LtBdxRsAqU2mCv31ha0WV1rMCj
DE77RKPdnsypkN3NpNmNXS/P90krLunILqRf4Fi1mhYKqkc8Jx1r/EFPw1mN6COI
7osD5DMRvzHHPR4CPaveEISxkUTkxSeqOXTD4FUimKy+Oz7SZ2PWpbZPznPSgLNK
CmUJ6G1x1Z2TZDmhCdQWU2Yjs4+ppzSd51pnE8TkjzJuNhvMjEIKRGA6JJRSpfZj
z3ypb5u0cpZqusctwTg4ueNtB2DO8u+hM0Qnu46BEVYgqTijIwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHfRgpD7Z80ZZ1YZ66s7LP1hIMcyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxZTZhZmEtNDMyYy0z
ZTk3LWJjY2MtZDNiNDBjMTBkZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/RJ63Xq1xDMl7Jpm4D5DImS0qKVKlXJodLmIv
u7P4UVrLOoSUuilYUgiQNuBOz5rpLKm703nOzHTZzepUi6jOAwTOqQLiLoQ+Swcg
0Od95UksEnhA5E+ZcD9F8Uvj7hN9D4NFspSgvuGGNa0OCAsP1fzA2Pn3dpYnGCt0
R8Txw6DTOuJeT97o5+OdNb4En8uZaqAEDD8HA7ExJMpOP8aMt+c0hCP/Zs+rtvT8
16QAHB4gOIxlYtdl7/V15TxPlbsakLQOhs8uNMYru9Ljo2bCAJgUwfQn0E5YbFpP
vVFjR85KnwEcc5yxL/cu3CBlsUcgaopAE/2uKADmc8Z8tf87
-----END CERTIFICATE-----
Generated at Wed Oct 29 20:23:53 2025 by rpki-client