$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c524f610-ea5d-3088-99d7-b23761a08d99.roa File: c524f610-ea5d-3088-99d7-b23761a08d99.roa (raw, json) Hash identifier: 7d3oVgZFXd5MhaTgM6SIpDJV9R0L3yqGcgBG2wuvd+4= Subject key identifier: 50:E1:D7:68:D9:15:3E:3E:2E:92:7A:36:12:0E:5D:3A:0E:59:A4:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366BFC23DE0C86A7C61400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c524f610-ea5d-3088-99d7-b23761a08d99.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396597 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6b:fc:23:de:0c:86:a7:c6:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=48624f96-b4ba-4a03-b531-d850733007c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:56:ac:61:c5:51:3e:32:06:1d:f8:e1:d9: 6b:91:90:cb:f5:b9:e5:2a:6d:10:5d:1b:fd:37:cd: dc:6d:f7:ac:6e:41:9d:09:7f:60:7d:0f:07:5a:c3: 25:e5:02:d2:d2:5a:7d:17:fe:67:6d:a1:98:c1:9d: 9e:04:b4:a0:27:1f:cc:6c:16:ca:bd:96:45:ba:94: bb:ba:d7:33:e5:08:99:9b:a2:08:50:99:c7:66:75: 58:c8:8e:23:2c:e4:e1:0b:27:6b:0b:ec:63:71:01: b6:69:69:14:37:12:f3:3d:f5:cc:05:36:b6:cd:92: d0:74:9e:cb:90:90:f1:e2:60:1b:c2:d9:ac:f6:20: 7f:8a:07:b7:03:52:c3:73:c5:25:8b:44:0c:3f:89: a0:92:07:40:85:0b:90:fa:70:36:ab:d0:32:64:b2: 4d:dc:76:57:5b:f0:19:d2:b7:ac:fb:8e:de:c0:f1: 43:5d:6e:88:5d:ba:45:5a:fd:cb:a9:3d:52:8e:16: b3:dc:7c:92:bd:a0:f6:94:75:5e:64:a3:c5:63:33: 03:4e:c9:c2:84:85:53:7a:3e:39:3a:14:ce:c4:10: b3:70:f6:1c:b8:e2:ed:5c:4b:65:59:f4:7d:ef:6e: 80:05:63:49:7b:6a:64:c5:86:44:71:9c:79:81:c0: 5b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E1:D7:68:D9:15:3E:3E:2E:92:7A:36:12:0E:5D:3A:0E:59:A4:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c524f610-ea5d-3088-99d7-b23761a08d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:47:eb:3e:a4:1b:3a:6c:68:3f:7c:99:47:fa:9c:36:f8:52: 17:6d:07:42:bd:28:2f:87:88:48:27:26:f3:c0:67:87:94:ff: 38:7e:ec:c5:ab:61:4d:5c:b7:36:f6:f5:6a:a8:1e:c7:d3:d9: 6e:4c:1c:b5:23:7b:5b:2e:f8:e0:6f:fb:e1:a1:73:c7:85:ed: 90:63:72:13:9e:7b:20:e4:19:a2:9e:64:ed:ca:fa:22:97:3e: fb:05:e2:0c:75:5a:33:19:e5:3f:77:ba:2e:f4:1e:59:a5:95: a1:4c:1e:0c:be:63:4c:4a:4d:59:5d:83:0b:7f:4f:16:8c:f5: 69:b4:ac:9b:92:00:95:0e:02:26:bb:ee:95:58:e4:ac:09:42: 87:18:3f:ee:e6:0b:05:72:01:8b:af:14:2c:c8:01:2d:07:c6: 4b:11:95:47:99:8d:76:b8:51:bf:79:bb:fc:23:e1:c9:55:b8: f2:2a:10:29:8f:e9:c9:ed:a0:26:3e:88:fe:4b:22:14:62:87: f9:56:bd:49:1e:2e:e7:bc:e5:99:85:48:2a:8e:86:f3:1d:60: 0b:96:26:7b:3c:20:5b:72:84:3f:3a:93:75:4c:c7:1c:78:c9: 6f:5f:85:97:11:fc:4c:9b:7d:b2:6b:99:ed:a2:d3:ce:0d:d0: c9:ed:93:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmv8I94MhqfGFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NDg2MjRmOTYtYjRiYS00YTAzLWI1MzEtZDg1MDczMzAwN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmpWrGHFUT4yBh344dlrkZDL9bnlKm0QXRv9 N83cbfesbkGdCX9gfQ8HWsMl5QLS0lp9F/5nbaGYwZ2eBLSgJx/MbBbKvZZFupS7 utcz5QiZm6IIUJnHZnVYyI4jLOThCydrC+xjcQG2aWkUNxLzPfXMBTa2zZLQdJ7L kJDx4mAbwtms9iB/ige3A1LDc8Uli0QMP4mgkgdAhQuQ+nA2q9AyZLJN3HZXW/AZ 0res+47ewPFDXW6IXbpFWv3LqT1Sjhaz3HySvaD2lHVeZKPFYzMDTsnChIVTej45 OhTOxBCzcPYcuOLtXEtlWfR9726ABWNJe2pkxYZEcZx5gcBbiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFDh12jZFT4+LpJ6NhIOXToOWaTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzUyNGY2MTAtZWE1ZC0z MDg4LTk5ZDctYjIzNzYxYTA4ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBER+s+pBs6bGg/fJlH+pw2+FIXbQdCvSgvh4hI JybzwGeHlP84fuzFq2FNXLc29vVqqB7H09luTBy1I3tbLvjgb/vhoXPHhe2QY3IT nnsg5BminmTtyvoilz77BeIMdVozGeU/d7ou9B5ZpZWhTB4MvmNMSk1ZXYMLf08W jPVptKybkgCVDgImu+6VWOSsCUKHGD/u5gsFcgGLrxQsyAEtB8ZLEZVHmY12uFG/ ebv8I+HJVbjyKhApj+nJ7aAmPoj+SyIUYof5Vr1JHi7nvOWZhUgqjobzHWALliZ7 PCBbcoQ/OpN1TMcceMlvX4WXEfxMm32ya5ntotPODdDJ7ZOv -----END CERTIFICATE-----Generated at Wed Oct 29 11:58:56 2025 by rpki-client