$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa File: 23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa (raw, json) Hash identifier: qJ8S/i5yqlRvg5AytfGQXiF5vLB3Tw8rIP8GsFAwYug= Subject key identifier: 99:80:9A:37:8C:CF:E6:34:BF:86:48:25:07:47:CC:14:C0:5A:D1:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1583EFF8F24491AD51580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396596 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:3e:ff:8f:24:49:1a:d5:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=eb3e6fe2-c263-4d38-ab9c-6e0634d0fda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:a1:e3:a2:6b:4f:47:dd:b5:21:f3:9a:32: 4e:d7:e3:33:cb:fd:e3:da:3d:c3:79:64:38:99:44: 29:78:31:e1:3c:c5:98:d3:75:79:5b:33:50:0f:66: 18:05:91:06:18:3c:5a:72:cd:9e:be:e4:ad:8a:0f: 3b:b1:48:09:d8:c5:df:60:0a:46:da:9c:56:ba:fb: 8a:17:ff:3c:bd:c4:b9:9d:1d:04:df:1e:63:79:1c: c7:8d:a0:93:55:39:c6:ad:61:60:23:65:db:00:03: 98:ea:27:4e:9a:fc:f6:39:c1:e1:7d:7a:a1:44:ec: 49:21:43:a8:85:33:3b:ac:7d:3e:60:ce:0b:0f:a2: b4:70:13:5b:bf:76:93:50:d2:d0:3d:7d:66:8a:40: 39:06:8d:85:ea:2a:54:c3:b5:1f:92:81:45:69:5e: 21:95:b4:59:10:5c:65:8c:26:29:3c:e2:db:0a:43: 56:7b:42:d4:70:9e:b1:0c:03:79:40:21:96:04:b2: fb:85:59:3f:1d:a1:ed:7c:2e:be:fc:14:14:6f:fe: 4a:37:79:08:87:56:64:30:a9:33:42:88:aa:0c:9d: ea:e9:3a:dc:d4:12:16:bf:c2:d4:e5:d6:74:cb:54: a7:34:6a:9e:5a:7f:0a:43:a2:44:78:c2:c5:e7:c3: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:80:9A:37:8C:CF:E6:34:BF:86:48:25:07:47:CC:14:C0:5A:D1:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b1:ca:4e:c1:6e:5f:e2:f6:1c:cf:08:66:25:6c:bf:ef:0d: 3d:13:d3:d3:3b:23:10:5d:9b:8a:99:f0:28:14:be:ae:bb:78: 8b:ce:87:df:4f:5f:39:ed:cb:58:67:4f:67:58:92:ee:c3:35: c1:a9:c3:79:e1:de:aa:51:7a:a3:ab:f7:84:d1:fb:f8:c3:2a: 59:c4:eb:65:db:ef:77:50:5f:c9:1d:e7:17:13:cc:3f:35:7e: e0:a1:0b:3b:7c:e5:3c:06:b3:cf:48:96:54:59:aa:a9:51:33: cb:1f:3f:77:38:1e:b2:12:b6:31:97:9c:98:83:08:ea:fc:c0: 33:14:d8:5d:5a:c3:88:2d:5d:23:24:60:e2:67:b3:bc:e9:d0: de:cc:fa:4e:29:ed:e7:33:7f:07:63:3f:66:3d:72:4a:b9:c7: 22:f2:ae:3e:17:4d:03:6a:d2:17:2a:3d:12:89:cb:bd:01:40: 4e:fa:c4:d4:7e:bf:99:ff:93:ca:7e:88:26:eb:3e:a5:86:c4: 9c:47:0f:8b:89:a0:61:d7:8a:39:46:b8:98:93:44:1c:9c:30: 7a:b6:36:8a:2a:22:cf:9d:63:60:80:57:40:88:4b:42:cf:38: 2c:83:5b:92:95:b5:45:32:9f:73:62:26:86:39:61:31:d8:5b: e3:9d:af:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8Vg+/48kSRrVFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZWIzZTZmZTItYzI2My00ZDM4LWFiOWMtNmUwNjM0ZDBmZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN+h46JrT0fdtSHzmjJO1+Mzy/3j2j3DeWQ4 mUQpeDHhPMWY03V5WzNQD2YYBZEGGDxacs2evuStig87sUgJ2MXfYApG2pxWuvuK F/88vcS5nR0E3x5jeRzHjaCTVTnGrWFgI2XbAAOY6idOmvz2OcHhfXqhROxJIUOo hTM7rH0+YM4LD6K0cBNbv3aTUNLQPX1mikA5Bo2F6ipUw7UfkoFFaV4hlbRZEFxl jCYpPOLbCkNWe0LUcJ6xDAN5QCGWBLL7hVk/HaHtfC6+/BQUb/5KN3kIh1ZkMKkz QoiqDJ3q6Trc1BIWv8LU5dZ0y1SnNGqeWn8KQ6JEeMLF58PE2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJmAmjeMz+Y0v4ZIJQdHzBTAWtFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNiNmZmMjItNmNjMC0z MDhiLWFjMmQtZWJjMTk0ZjYxOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqxyk7Bbl/i9hzPCGYlbL/vDT0T09M7IxBdm4qZ8CgUvq67eIvO h99PXznty1hnT2dYku7DNcGpw3nh3qpReqOr94TR+/jDKlnE62Xb73dQX8kd5xcT zD81fuChCzt85TwGs89IllRZqqlRM8sfP3c4HrIStjGXnJiDCOr8wDMU2F1aw4gt XSMkYOJns7zp0N7M+k4p7eczfwdjP2Y9ckq5xyLyrj4XTQNq0hcqPRKJy70BQE76 xNR+v5n/k8p+iCbrPqWGxJxHD4uJoGHXijlGuJiTRBycMHq2NooqIs+dY2CAV0CI S0LPOCyDW5KVtUUyn3NiJoY5YTHYW+Odr1U= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:42 2025 by rpki-client