$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa File: b228ac62-7a79-352e-9c29-196e7a6f8297.roa (raw, json) Hash identifier: YpkVrzD1YK76TMBC4rFMGTddHk/4PUoPgdwXOYkkkj8= Subject key identifier: A1:B7:47:31:B6:EB:3C:C4:A5:FC:89:ED:31:23:E0:76:57:02:45:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366894F6BEEA31E318FB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 36622 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:68:94:f6:be:ea:31:e3:18:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=bf60e49d-d0aa-4fe0-b84e-dbe22aa49425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:52:75:ab:78:ef:de:3e:18:21:50:b8:a7: 6f:68:6b:2c:23:0a:9d:e5:e8:98:f4:f9:81:43:b9: 34:c3:1e:5f:ac:2f:14:7a:47:29:e1:cc:f0:98:d3: d0:77:bd:a7:6c:58:eb:8c:bf:c4:67:e9:d7:6e:11: 11:36:11:f5:48:55:0e:4f:a2:6d:33:62:63:76:06: 19:78:3a:02:9c:e0:87:8f:80:c7:77:57:28:12:e1: 8c:4e:3c:e8:06:79:cb:26:af:21:4b:6a:59:c3:03: 18:74:cb:a3:2b:4d:dc:81:a5:d3:1a:cb:23:eb:1b: 4b:5d:82:e2:3b:4c:f8:f3:0a:bf:97:f9:fb:71:3b: 30:35:7d:45:75:12:ff:b8:6d:8f:00:1e:2e:ba:be: 22:9e:49:cd:de:73:d8:e2:e1:9d:f4:40:f6:a6:86: 1b:18:48:cf:cc:81:7d:33:87:fe:bb:2c:80:40:83: f3:87:61:35:67:33:37:17:f1:7d:22:b3:25:8f:ba: 3e:79:3b:fb:80:0c:06:a1:1d:19:2c:a5:0f:fc:f1: a5:a7:24:f5:8c:ea:0e:4c:17:4d:39:e0:e9:52:18: 51:43:09:2b:ba:19:ab:cd:46:c7:25:a6:8f:85:49: 96:06:7a:e8:26:3b:da:a4:87:4e:a1:f9:66:38:f2: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B7:47:31:B6:EB:3C:C4:A5:FC:89:ED:31:23:E0:76:57:02:45:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f8:b0:88:4e:d7:8f:61:f4:dd:c9:4e:ae:31:86:2e:bb:50: 4c:d9:d3:2f:00:30:74:a4:32:4d:00:3f:63:b3:b5:70:74:ae: f9:e6:eb:10:7e:24:4b:be:9c:d0:7b:fe:cf:31:52:08:e5:73: b9:b3:5b:54:37:7c:ef:16:67:43:0c:fe:cd:ab:0f:3a:23:58: 21:ff:a4:ac:d1:71:e2:88:3f:70:12:5d:73:9e:53:55:49:ea: 27:0e:de:88:78:96:04:9f:58:fa:cd:80:a4:94:44:b8:57:de: 04:06:8d:15:a7:a8:26:d1:43:6b:84:34:1e:76:8f:89:bb:dd: 32:09:b3:9b:e1:52:29:46:0d:7e:bf:94:5e:d0:3d:6f:ab:94: 1e:22:13:77:08:62:58:53:d9:07:03:79:b7:f6:33:44:88:ba: 4f:cb:24:d2:b0:7e:fa:4d:86:69:77:8f:cc:dd:0a:e2:8e:aa: 55:8d:76:97:99:c3:70:ae:fd:cd:53:fa:f6:09:31:ce:5c:f7: ac:c3:a1:9d:71:19:ec:36:d8:07:ab:c5:85:71:4a:5f:9f:6d: 7d:de:98:a6:25:77:fc:68:fd:60:26:d3:fe:6c:cf:01:8c:c9: 2f:8b:c6:41:57:40:c3:4d:4d:46:e0:64:1d:d2:e9:34:54:7c: 8b:20:b1:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmiU9r7qMeMY+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YmY2MGU0OWQtZDBhYS00ZmUwLWI4NGUtZGJlMjJhYTQ5NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKJSdat4794+GCFQuKdvaGssIwqd5eiY9PmB Q7k0wx5frC8Uekcp4czwmNPQd72nbFjrjL/EZ+nXbhERNhH1SFUOT6JtM2JjdgYZ eDoCnOCHj4DHd1coEuGMTjzoBnnLJq8hS2pZwwMYdMujK03cgaXTGssj6xtLXYLi O0z48wq/l/n7cTswNX1FdRL/uG2PAB4uur4inknN3nPY4uGd9ED2poYbGEjPzIF9 M4f+uyyAQIPzh2E1ZzM3F/F9IrMlj7o+eTv7gAwGoR0ZLKUP/PGlpyT1jOoOTBdN OeDpUhhRQwkruhmrzUbHJaaPhUmWBnroJjvapIdOoflmOPIr2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKG3RzG26zzEpfyJ7TEj4HZXAkVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIyOGFjNjItN2E3OS0z NTJlLTljMjktMTk2ZTdhNmY4Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBo+LCITtePYfTdyU6uMYYuu1BM2dMvADB0pDJN AD9js7VwdK755usQfiRLvpzQe/7PMVII5XO5s1tUN3zvFmdDDP7Nqw86I1gh/6Ss 0XHiiD9wEl1znlNVSeonDt6IeJYEn1j6zYCklES4V94EBo0Vp6gm0UNrhDQedo+J u90yCbOb4VIpRg1+v5Re0D1vq5QeIhN3CGJYU9kHA3m39jNEiLpPyyTSsH76TYZp d4/M3QrijqpVjXaXmcNwrv3NU/r2CTHOXPesw6GdcRnsNtgHq8WFcUpfn2193pim JXf8aP1gJtP+bM8BjMkvi8ZBV0DDTU1G4GQd0uk0VHyLILED -----END CERTIFICATE-----Generated at Wed Oct 29 22:45:11 2025 by rpki-client