$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be5fd134-b668-35a3-aa9a-f24a67f6e023.roa File: be5fd134-b668-35a3-aa9a-f24a67f6e023.roa (raw, json) Hash identifier: daKZKcpx/1mzq1obasBEzm7ifED2e9TBrfQk+yQCouM= Subject key identifier: 2E:AD:B6:E4:10:43:74:54:38:2E:A8:DC:8B:97:5D:F8:67:E5:D7:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366B7C321EC192D8271380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be5fd134-b668-35a3-aa9a-f24a67f6e023.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397197 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6b:7c:32:1e:c1:92:d8:27:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=c55edee2-ab08-486b-a6d9-8bdbcb0207be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:dc:1e:84:18:ff:40:b4:2a:59:92:7e:a9: 36:4e:0d:0a:72:33:cc:98:1a:cb:59:b0:2d:10:d9: 49:3a:f5:34:1d:27:a8:66:f5:d1:63:3d:05:0a:48: a3:2b:10:53:ec:82:45:01:93:38:13:14:35:2e:53: d2:c9:e5:b7:2c:c8:05:6a:ee:af:32:e0:30:f0:bf: 26:36:d0:e4:ac:fe:a2:b2:3e:58:e4:b0:3e:4d:39: 2a:c3:c0:f8:90:76:99:41:58:75:79:cc:86:67:6d: 7a:32:50:f7:c9:51:ef:cf:f5:ee:62:f5:94:5e:3f: 40:ac:bc:41:56:8e:a5:f1:e0:87:59:7e:64:da:a6: af:c4:ae:3c:25:2f:60:32:93:2b:38:c7:74:9a:5c: 8c:3a:82:37:78:2b:7e:14:63:3c:06:67:8e:03:f0: d2:8b:d0:ed:3d:c7:3a:26:14:82:bd:f2:63:26:68: 20:fc:f9:c3:1f:73:ff:a8:05:3a:b1:26:91:48:24: ae:80:4c:d7:ac:79:a4:2a:16:5d:b3:d9:d3:e8:8d: be:a7:2a:83:f3:5c:26:c2:ab:71:6e:35:37:73:95: e6:b1:1e:2a:5c:6d:9a:b2:06:9c:ea:d6:e3:f6:63: 13:6d:4a:0f:b5:3b:74:0b:9d:66:5c:2c:ae:43:a3: 85:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:B6:E4:10:43:74:54:38:2E:A8:DC:8B:97:5D:F8:67:E5:D7:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be5fd134-b668-35a3-aa9a-f24a67f6e023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:dd:b5:61:cb:71:96:41:5a:62:da:2d:93:a8:8c:ee:7a:fb: 06:bb:e2:ee:06:6a:39:d0:f1:28:59:f0:c5:b1:f0:84:b1:86: a7:ca:04:76:a3:21:35:1d:86:b2:93:ba:bb:d6:60:97:f8:f1: c1:33:01:9a:af:97:76:09:1c:9b:89:d2:af:f1:ad:a1:f6:95: 73:44:0e:db:aa:fd:10:eb:9c:44:7f:a9:df:ac:53:5e:ef:06: 7e:03:67:80:fd:32:4c:48:4a:2b:74:35:d6:be:ea:ef:bd:08: 44:01:b4:a3:f1:43:ca:73:0e:e3:4f:5e:57:69:3e:d4:18:9b: d7:fb:22:f9:f1:dc:47:2c:2a:dd:6c:d9:ee:49:58:c5:e4:97: da:35:30:b2:73:ba:86:59:62:90:a0:2c:c4:22:0e:61:9d:5b: a0:c0:b3:49:8f:cc:8a:1d:95:43:73:e2:a7:17:03:6a:e0:62: 0a:01:f0:8b:33:59:c4:70:f1:6a:7b:0c:4a:7b:ca:34:fc:9c: f8:55:8e:98:d7:e7:b2:f5:ba:1c:b3:f7:ea:aa:9c:8a:48:af: 39:c4:b9:38:47:ab:0a:82:6b:e8:14:34:bb:25:dc:a5:e6:ef: f7:7d:d6:3a:f2:5b:88:f4:39:b0:4a:e0:45:d7:3d:ac:82:e7: ec:63:65:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmt8Mh7BktgnE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YzU1ZWRlZTItYWIwOC00ODZiLWE2ZDktOGJkYmNiMDIwN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGPcHoQY/0C0KlmSfqk2Tg0KcjPMmBrLWbAt ENlJOvU0HSeoZvXRYz0FCkijKxBT7IJFAZM4ExQ1LlPSyeW3LMgFau6vMuAw8L8m NtDkrP6isj5Y5LA+TTkqw8D4kHaZQVh1ecyGZ216MlD3yVHvz/XuYvWUXj9ArLxB Vo6l8eCHWX5k2qavxK48JS9gMpMrOMd0mlyMOoI3eCt+FGM8BmeOA/DSi9DtPcc6 JhSCvfJjJmgg/PnDH3P/qAU6sSaRSCSugEzXrHmkKhZds9nT6I2+pyqD81wmwqtx bjU3c5XmsR4qXG2asgac6tbj9mMTbUoPtTt0C51mXCyuQ6OFMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC6ttuQQQ3RUOC6o3IuXXfhn5dcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmU1ZmQxMzQtYjY2OC0z NWEzLWFhOWEtZjI0YTY3ZjZlMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBa3bVhy3GWQVpi2i2TqIzuevsGu+LuBmo50PEo WfDFsfCEsYanygR2oyE1HYayk7q71mCX+PHBMwGar5d2CRybidKv8a2h9pVzRA7b qv0Q65xEf6nfrFNe7wZ+A2eA/TJMSEordDXWvurvvQhEAbSj8UPKcw7jT15XaT7U GJvX+yL58dxHLCrdbNnuSVjF5JfaNTCyc7qGWWKQoCzEIg5hnVugwLNJj8yKHZVD c+KnFwNq4GIKAfCLM1nEcPFqewxKe8o0/Jz4VY6Y1+ey9bocs/fqqpyKSK85xLk4 R6sKgmvoFDS7Jdyl5u/3fdY68luI9DmwSuBF1z2sgufsY2XY -----END CERTIFICATE-----Generated at Wed Oct 29 20:08:59 2025 by rpki-client