$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa File: 10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa (raw, json) Hash identifier: OnCt4rlDy+GGoFg/NdLLZiZrcuf9Y42jS+bxGyZ7Vno= Subject key identifier: 74:5E:8B:66:99:E6:1A:C5:A3:FD:9D:F1:65:A7:37:3F:98:A2:B2:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD936693BF3A711F2EAF96180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396600 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:69:3b:f3:a7:11:f2:ea:f9:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=45e2c5ec-cde5-4bae-8504-a2a72d1be25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:92:a2:c8:19:15:08:ba:87:eb:74:55:6d: 84:e8:1c:b6:dd:c8:78:51:11:5d:87:7c:16:99:01: 3d:94:83:f6:0a:fd:d7:b8:9c:44:22:c7:1a:cf:5a: 78:77:74:5e:29:a7:b7:c7:97:b3:ed:6d:a8:41:0f: cd:51:52:69:e7:b1:a3:ed:4a:0b:2e:b5:32:d9:74: b3:af:63:0e:e8:93:8d:80:e1:2c:9d:59:e2:99:a0: da:56:3c:07:fe:79:76:60:6b:aa:34:48:8c:79:16: 8b:de:52:dd:ab:d3:7d:7f:e6:e1:92:f9:0c:fb:15: d2:84:ff:81:59:59:8c:d6:01:0f:af:a8:90:f3:4c: c4:1b:58:aa:32:45:d7:21:70:d3:a7:10:a7:a5:e7: 80:dc:7a:2a:64:32:27:80:f9:74:b9:52:e6:5f:df: 9b:0f:be:38:1d:d9:07:4e:27:60:ba:36:a9:f4:06: b7:1e:70:98:a6:f6:f5:5f:b1:fa:10:33:7d:48:ef: a0:61:90:14:17:3c:8f:30:32:2f:05:2a:eb:34:74: fc:f4:f5:9d:cf:14:b2:85:f2:64:70:58:c6:10:e8: d0:0d:a1:c4:3b:06:28:df:6a:dc:ef:7a:04:93:69: b9:b8:44:ed:7c:11:ec:ec:8e:32:57:c3:48:f9:c3: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5E:8B:66:99:E6:1A:C5:A3:FD:9D:F1:65:A7:37:3F:98:A2:B2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:dd:fb:d8:4a:df:2c:64:3d:5f:29:72:cb:a5:5e:12:9d:56: 0c:c5:1a:9c:5b:1c:b4:2b:fd:a9:31:b5:76:ca:3f:d2:a1:9e: db:6f:48:4a:f0:be:7d:b1:6a:c2:01:ab:90:7b:50:e0:42:b4: 43:5b:ae:5e:e1:f1:f6:14:49:5e:02:9e:ab:ae:cc:b5:2b:21: 7a:ee:34:12:3e:a7:7d:6a:3b:c7:e6:a8:6a:b9:80:cc:3a:1d: f6:49:ef:21:e7:28:c0:26:1e:35:78:56:22:b4:b8:1e:f3:d8: 0f:33:2a:5b:a4:d3:f9:3a:df:3e:09:eb:49:ae:7d:69:be:63: 90:19:03:95:7f:9a:eb:22:20:43:40:33:46:df:e4:73:87:0c: a7:36:53:1e:60:d7:bc:37:62:29:f5:e9:fd:18:06:26:6f:75: 59:51:1e:14:8b:74:92:d1:3a:a9:43:31:90:d2:df:7f:c4:50: e1:ff:03:cb:2f:97:08:c3:d1:f2:c9:be:7d:89:e0:be:7b:17: f2:32:4f:01:50:99:d9:47:ce:c8:62:d8:db:e1:da:28:62:7f: c3:6c:c6:97:3f:46:5f:91:b6:5b:81:e0:21:0a:27:4e:1e:0d: 19:fa:c5:17:6d:bb:93:21:cc:51:38:8c:b4:f2:11:bf:78:34: e2:94:39:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmk786cR8ur5YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NDVlMmM1ZWMtY2RlNS00YmFlLTg1MDQtYTJhNzJkMWJlMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPmSosgZFQi6h+t0VW2E6By23ch4URFdh3wW mQE9lIP2Cv3XuJxEIscaz1p4d3ReKae3x5ez7W2oQQ/NUVJp57Gj7UoLLrUy2XSz r2MO6JONgOEsnVnimaDaVjwH/nl2YGuqNEiMeRaL3lLdq9N9f+bhkvkM+xXShP+B WVmM1gEPr6iQ80zEG1iqMkXXIXDTpxCnpeeA3HoqZDIngPl0uVLmX9+bD744HdkH Tidgujap9Aa3HnCYpvb1X7H6EDN9SO+gYZAUFzyPMDIvBSrrNHT89PWdzxSyhfJk cFjGEOjQDaHEOwYo32rc73oEk2m5uETtfBHs7I4yV8NI+cO96wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHRei2aZ5hrFo/2d8WWnNz+YorL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTBhMTQyMGUtZWEyYi0z MGQ3LThhODctYWExMmZkNGFlMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA13fvYSt8sZD1fKXLLpV4SnVYMxRqcWxy0K/2p MbV2yj/SoZ7bb0hK8L59sWrCAauQe1DgQrRDW65e4fH2FEleAp6rrsy1KyF67jQS Pqd9ajvH5qhquYDMOh32Se8h5yjAJh41eFYitLge89gPMypbpNP5Ot8+CetJrn1p vmOQGQOVf5rrIiBDQDNG3+RzhwynNlMeYNe8N2Ip9en9GAYmb3VZUR4Ui3SS0Tqp QzGQ0t9/xFDh/wPLL5cIw9Hyyb59ieC+exfyMk8BUJnZR87IYtjb4dooYn/DbMaX P0ZfkbZbgeAhCidOHg0Z+sUXbbuTIcxROIy08hG/eDTilDkd -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:19 2025 by rpki-client