$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa File: dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa (raw, json) Hash identifier: W5dkIkFFv1IcnDvMkFobrinMdJJDmCIRrdi7hpEzvD0= Subject key identifier: E5:30:2E:82:9D:C5:8C:57:EB:25:AD:EF:41:9C:50:73:11:52:23:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366C8887A46C2292E16780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397196 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6c:88:87:a4:6c:22:92:e1:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=e0a47e22-8e1d-4f87-8d1d-f47a0365c83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:ea:e8:af:d7:d4:ab:3f:42:da:8c:d8:8a: 7f:40:96:52:fa:1e:95:a8:16:42:90:9b:7a:34:aa: 55:9e:33:00:da:f5:63:12:02:9f:1a:e0:c7:19:33: 09:83:cf:ce:18:8f:4a:99:b6:1b:29:2a:1f:a8:2e: 2d:4a:02:ce:5a:00:bd:3c:4e:42:3e:dc:3f:42:f2: 96:dc:56:e9:c2:fc:20:ad:36:d6:8e:67:bb:cd:90: 4c:97:11:4b:ca:82:19:27:6e:32:c9:e2:1c:d8:56: ee:d5:ab:d8:bf:2c:66:4e:c0:e6:48:dd:d3:50:4f: 4c:79:aa:29:8d:26:4b:57:78:0f:99:ad:13:34:f4: 94:2e:68:31:7b:a2:14:e6:2a:8e:05:4f:8d:2c:7c: 6e:96:5e:43:b6:9d:2d:f8:8c:25:cc:a1:89:ae:96: 0f:30:42:49:bb:c5:60:67:10:1d:ad:ff:55:0f:e3: 80:06:5b:4f:8c:b1:5f:ef:19:87:94:54:2d:62:b7: 27:75:4d:91:ff:05:3a:07:f5:a3:ee:36:d6:ac:c0: fc:d2:a5:e0:b6:d3:f0:f6:00:e2:bf:b1:e6:73:6f: 68:39:09:fc:0d:73:7f:7b:0c:ce:00:d1:46:52:67: 55:cb:7d:41:ec:ca:6a:46:af:da:43:10:8e:a7:5c: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:2E:82:9D:C5:8C:57:EB:25:AD:EF:41:9C:50:73:11:52:23:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1a:ec:29:15:64:93:63:9a:34:65:b6:be:35:97:c8:ea:2f: ac:31:4a:df:a6:ae:22:53:02:59:ba:8f:49:55:af:3d:2d:cc: fb:fb:f2:40:e8:08:f2:ba:61:73:99:28:24:d6:89:df:8e:da: 0a:d9:d0:1c:b4:1c:84:06:c8:be:37:9e:84:6d:2d:a2:d3:2b: e4:7e:df:54:47:37:66:b9:63:c1:27:77:8d:b0:42:e0:f6:4a: 0d:9f:31:ca:7b:97:50:21:1c:59:bd:48:c9:ee:a4:c0:72:b0: 87:0c:62:c7:06:71:e6:21:07:de:ee:d9:d5:95:68:2e:ce:1c: ce:e5:e4:aa:6c:75:18:ed:1a:22:39:af:f6:21:e8:7c:da:0c: 52:75:f6:f1:db:f0:f5:fc:bf:19:52:dd:22:90:f6:cc:65:03: ae:0c:54:55:ec:93:11:06:e8:7f:60:cc:1b:76:80:33:dd:78: 25:d6:ea:44:05:74:c8:43:63:ea:6c:fa:75:67:bb:73:17:b2: e7:b6:62:d9:80:f6:97:49:c5:f1:f7:81:e6:cc:f5:3b:fc:0d: d4:24:04:ed:77:26:9b:a8:66:47:3a:70:82:19:c4:93:f1:12: 5c:6c:82:ff:c5:1a:b7:74:d3:48:eb:34:a9:7d:a0:0c:3e:3d: 24:6c:72:78 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmyIh6RsIpLhZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTBhNDdlMjItOGUxZC00Zjg3LThkMWQtZjQ3YTAzNjVjODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLjq6K/X1Ks/QtqM2Ip/QJZS+h6VqBZCkJt6 NKpVnjMA2vVjEgKfGuDHGTMJg8/OGI9KmbYbKSofqC4tSgLOWgC9PE5CPtw/QvKW 3FbpwvwgrTbWjme7zZBMlxFLyoIZJ24yyeIc2Fbu1avYvyxmTsDmSN3TUE9Meaop jSZLV3gPma0TNPSULmgxe6IU5iqOBU+NLHxull5Dtp0t+IwlzKGJrpYPMEJJu8Vg ZxAdrf9VD+OABltPjLFf7xmHlFQtYrcndU2R/wU6B/Wj7jbWrMD80qXgttPw9gDi v7Hmc29oOQn8DXN/ewzOANFGUmdVy31B7MpqRq/aQxCOp1xRUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOUwLoKdxYxX6yWt70GcUHMRUiO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVjMDdlYjMtZjA0ZC0z YTRjLTlkNTItNmYyOTI3NDcyYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhGuwpFWSTY5o0Zba+NZfI6i+sMUrfpq4iUwJZ uo9JVa89Lcz7+/JA6AjyumFzmSgk1onfjtoK2dActByEBsi+N56EbS2i0yvkft9U RzdmuWPBJ3eNsELg9koNnzHKe5dQIRxZvUjJ7qTAcrCHDGLHBnHmIQfe7tnVlWgu zhzO5eSqbHUY7RoiOa/2Ieh82gxSdfbx2/D1/L8ZUt0ikPbMZQOuDFRV7JMRBuh/ YMwbdoAz3Xgl1upEBXTIQ2PqbPp1Z7tzF7LntmLZgPaXScXx94HmzPU7/A3UJATt dyabqGZHOnCCGcST8RJcbIL/xRq3dNNI6zSpfaAMPj0kbHJ4 -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:28 2025 by rpki-client