$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa File: 4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa (raw, json) Hash identifier: GiEMoTKXRtfb+G5gSxlUI8g+sID0gQRuQ2yACBDSz0U= Subject key identifier: A1:DD:C8:37:49:CD:4F:5D:D2:DC:FB:B3:5D:F4:EC:B2:D7:06:D7:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366A506DBBAC671F1BE400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396608 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6a:50:6d:bb:ac:67:1f:1b:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=f49131b7-0d47-4d7c-87ed-ddc0581ac1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:80:dc:3e:6c:f7:1b:76:91:b8:a2:89:fb: 20:a1:1b:c2:aa:d4:bf:6b:0e:27:1f:9c:26:2b:a4: cf:56:56:0d:fa:71:e7:cc:4d:89:03:fb:d8:8b:99: aa:62:e0:a6:b6:d4:83:bd:a1:7a:4e:ff:a3:b4:5c: b6:43:f3:37:e0:d4:16:01:5d:76:9b:2a:44:ff:09: e1:94:11:16:71:23:0f:14:9c:46:9d:d6:8e:f4:ac: 87:7a:44:c8:d7:96:90:3f:6d:41:f0:d2:7d:e2:19: df:41:4f:c8:5a:86:b0:08:d8:d8:a8:c7:1a:c0:94: 13:2b:73:81:71:bd:80:20:7e:3d:44:86:26:7e:9e: 95:51:3c:e2:10:42:05:5c:ec:4b:79:21:c8:04:a7: ca:da:61:c8:87:03:39:fc:c1:d0:27:f4:1d:ca:d7: 05:d7:04:50:ed:29:5c:f6:84:8a:2d:ea:9a:f4:32: 95:73:a4:81:7b:98:4d:2b:4b:20:85:98:58:34:8c: 88:05:a7:04:3a:5b:49:d5:ca:7b:41:47:38:59:d4: 05:7d:a3:a6:a4:51:b7:b4:f3:a3:40:3b:80:37:42: 43:a9:21:a5:1b:91:2b:67:a2:d7:6a:9a:5a:50:92: b6:92:4c:43:43:49:92:ae:2a:89:7c:8e:6d:68:19: 21:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DD:C8:37:49:CD:4F:5D:D2:DC:FB:B3:5D:F4:EC:B2:D7:06:D7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:13:16:ba:0f:ec:3a:ae:18:a5:a7:66:90:28:85:af:9a:1a: 61:78:8e:a8:65:3e:18:4a:04:ce:8b:f6:86:a4:69:4b:2d:32: 8b:c2:14:68:ca:04:88:7e:c2:16:5a:fa:76:09:0a:c8:83:e3: 11:fb:5a:41:ea:4a:43:38:fa:87:ac:b4:45:bf:5e:c8:cf:f5: 5b:65:a6:ad:d9:89:af:e7:79:6b:8a:8e:c7:4b:47:f7:a6:13: 60:c6:9a:7f:8a:75:e8:6b:1c:a4:46:59:64:fd:20:c9:e0:19: 52:dc:03:a1:82:ff:7b:56:8b:3d:eb:52:5e:c5:2b:d9:02:e7: 3b:ad:94:be:4b:7f:21:a4:6e:29:d5:8a:a4:96:47:cd:9d:3f: 8f:f2:63:e4:f3:d9:61:4b:6a:22:ca:73:09:76:ed:05:28:fc: 84:5e:b9:fb:66:b8:02:b1:b8:55:08:31:47:98:38:de:f0:4f: 75:c9:db:c0:55:e4:24:31:59:23:98:5a:48:64:5d:e6:c0:ea: 34:1f:d9:8f:e8:81:cc:24:19:a7:6f:f9:5d:8f:5e:d5:89:bf: 9b:a6:b5:eb:1a:db:ea:ac:63:95:c3:c7:df:d8:be:ad:73:ef: 2d:18:d6:41:47:b8:ed:97:c6:fc:49:2e:16:24:2e:e3:15:6c: 81:5b:6d:a8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmpQbbusZx8b5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjQ5MTMxYjctMGQ0Ny00ZDdjLTg3ZWQtZGRjMDU4MWFjMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMmA3D5s9xt2kbiiifsgoRvCqtS/aw4nH5wm K6TPVlYN+nHnzE2JA/vYi5mqYuCmttSDvaF6Tv+jtFy2Q/M34NQWAV12mypE/wnh lBEWcSMPFJxGndaO9KyHekTI15aQP21B8NJ94hnfQU/IWoawCNjYqMcawJQTK3OB cb2AIH49RIYmfp6VUTziEEIFXOxLeSHIBKfK2mHIhwM5/MHQJ/QdytcF1wRQ7Slc 9oSKLeqa9DKVc6SBe5hNK0sghZhYNIyIBacEOltJ1cp7QUc4WdQFfaOmpFG3tPOj QDuAN0JDqSGlG5ErZ6LXappaUJK2kkxDQ0mSriqJfI5taBkhyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKHdyDdJzU9d0tz7s1307LLXBtc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZlMmEzY2QtYjMxZi0z NGRiLThkMmQtNmU2NDIzZTI3YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1Exa6D+w6rhilp2aQKIWvmhpheI6oZT4YSgTO i/aGpGlLLTKLwhRoygSIfsIWWvp2CQrIg+MR+1pB6kpDOPqHrLRFv17Iz/VbZaat 2Ymv53lrio7HS0f3phNgxpp/inXoaxykRllk/SDJ4BlS3AOhgv97Vos961JexSvZ Auc7rZS+S38hpG4p1YqklkfNnT+P8mPk89lhS2oiynMJdu0FKPyEXrn7ZrgCsbhV CDFHmDje8E91ydvAVeQkMVkjmFpIZF3mwOo0H9mP6IHMJBmnb/ldj17Vib+bprXr GtvqrGOVw8ff2L6tc+8tGNZBR7jtl8b8SS4WJC7jFWyBW22o -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:06 2025 by rpki-client