$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddc885cb-5a0d-3766-add7-f08d7df7aace.roa File: ddc885cb-5a0d-3766-add7-f08d7df7aace.roa (raw, json) Hash identifier: 7fS0GWipd2e8n7MEamuiWTWBVnvm4aAD+tQlqVg4feA= Subject key identifier: 67:09:C6:4D:B0:1F:B8:BD:00:D2:74:D3:E6:4C:F8:BC:76:3F:63:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD93670877CF487190B9D1380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddc885cb-5a0d-3766-add7-f08d7df7aace.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397211 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:70:87:7c:f4:87:19:0b:9d:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=a26724ab-996e-445a-bcb0-cfb12c652029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:9a:3a:97:a7:c0:96:be:ca:5a:8c:39:29: a0:1d:7b:25:c6:ad:92:14:22:b9:96:a6:1e:97:25: ed:ab:a2:00:f1:57:80:3e:ff:eb:43:bf:53:b5:d2: 3a:c8:53:08:f7:18:35:79:88:03:ed:2a:44:fe:71: d1:3d:bd:18:fc:f6:3d:cd:a4:31:97:a0:f8:8b:ff: af:67:8f:98:cb:46:04:15:21:66:48:1f:12:2c:2c: b0:16:b4:18:51:fc:e8:5c:1d:7b:de:0c:8a:b3:07: 6b:1c:77:d9:1a:90:99:02:ce:a8:70:54:cc:12:e5: 03:1a:70:bc:2d:40:64:84:c4:8d:65:35:3d:e9:18: 1d:77:ef:cb:cd:ab:06:44:98:2f:67:b3:d5:d9:0f: f5:f9:5e:8d:58:e2:b0:7b:24:ee:c1:f4:8d:6c:a2: aa:7e:79:5e:37:68:d4:7d:94:64:c7:3a:4a:19:33: 20:76:1e:6b:79:a8:93:ac:0c:04:b1:6e:36:20:1e: 3e:4e:03:c1:98:d7:74:5e:1d:4f:d8:df:f7:2d:fa: f7:9b:9a:0f:1a:a6:bf:1e:b0:19:0c:98:cd:d3:ad: 59:7a:22:28:3d:c0:ad:f7:7b:8c:b5:52:b8:11:88: 7e:51:25:b0:f8:d1:05:7e:f3:fd:52:43:4a:d6:3c: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:09:C6:4D:B0:1F:B8:BD:00:D2:74:D3:E6:4C:F8:BC:76:3F:63:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddc885cb-5a0d-3766-add7-f08d7df7aace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f9:b9:26:c9:ac:5d:71:75:6e:97:05:ee:e5:82:50:e3:21: 13:b9:ae:24:bb:5d:54:26:bf:b9:d1:af:87:92:98:9e:f5:c6: 29:0b:38:08:74:38:07:a5:65:00:2b:ec:31:f8:68:8c:67:46: 8b:da:b7:ee:c1:e3:4a:66:7b:51:4a:9a:02:87:cb:fe:c7:79: 89:5e:0d:77:4e:f3:e6:ae:22:fa:59:92:25:8a:63:c3:c6:9c: b9:0e:11:84:7c:be:20:b7:84:3c:7f:01:c4:c7:33:0e:ce:8a: c9:e9:ba:65:47:fc:10:4f:eb:13:10:bf:3f:e6:07:c9:8a:7b: b3:13:ca:0a:e2:d6:36:7d:54:13:a5:fc:ae:3b:d3:aa:62:51: 4b:21:08:38:12:39:cb:f4:d8:73:5d:af:44:51:fb:00:b6:0c: 28:6e:66:30:38:a6:d9:e7:78:1f:da:a3:50:7a:1c:40:f4:a2: 75:0c:f5:c6:c8:79:17:b2:23:7b:7c:1d:2d:cc:42:dd:a3:e0: 63:d8:81:7a:5b:e4:bf:bf:a8:6e:9e:b8:af:77:39:3b:7f:b2: 13:aa:3b:ef:b8:45:6d:ee:92:22:59:cc:0f:35:70:68:a6:88: 62:da:37:9c:31:9b:1d:7a:e5:8c:3a:4f:ec:4f:43:44:3c:e5: 73:c2:cd:ce -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNnCHfPSHGQudE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YTI2NzI0YWItOTk2ZS00NDVhLWJjYjAtY2ZiMTJjNjUyMDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrKaOpenwJa+ylqMOSmgHXslxq2SFCK5lqYe lyXtq6IA8VeAPv/rQ79TtdI6yFMI9xg1eYgD7SpE/nHRPb0Y/PY9zaQxl6D4i/+v Z4+Yy0YEFSFmSB8SLCywFrQYUfzoXB173gyKswdrHHfZGpCZAs6ocFTMEuUDGnC8 LUBkhMSNZTU96Rgdd+/LzasGRJgvZ7PV2Q/1+V6NWOKweyTuwfSNbKKqfnleN2jU fZRkxzpKGTMgdh5reaiTrAwEsW42IB4+TgPBmNd0Xh1P2N/3Lfr3m5oPGqa/HrAZ DJjN061ZeiIoPcCt93uMtVK4EYh+USWw+NEFfvP9UkNK1jzREwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGcJxk2wH7i9ANJ00+ZM+Lx2P2NDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGRjODg1Y2ItNWEwZC0z NzY2LWFkZDctZjA4ZDdkZjdhYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBf+bkmyaxdcXVulwXu5YJQ4yETua4ku11UJr+5 0a+Hkpie9cYpCzgIdDgHpWUAK+wx+GiMZ0aL2rfuweNKZntRSpoCh8v+x3mJXg13 TvPmriL6WZIlimPDxpy5DhGEfL4gt4Q8fwHExzMOzorJ6bplR/wQT+sTEL8/5gfJ inuzE8oK4tY2fVQTpfyuO9OqYlFLIQg4EjnL9NhzXa9EUfsAtgwobmYwOKbZ53gf 2qNQehxA9KJ1DPXGyHkXsiN7fB0tzELdo+Bj2IF6W+S/v6hunrivdzk7f7ITqjvv uEVt7pIiWcwPNXBopohi2jecMZsdeuWMOk/sT0NEPOVzws3O -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:23 2025 by rpki-client