$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa File: 3673f064-7948-38e5-92a3-2922376a7bb7.roa (raw, json) Hash identifier: AtgineBZ/1IEJCvqbbFjxHjnClYxslNxSO9Tt7BEWE4= Subject key identifier: BB:7E:BD:6F:30:58:99:BB:28:06:D2:56:99:CB:7B:F0:0F:80:CE:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1582D19B8EFD6FD515980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36619 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:2d:19:b8:ef:d6:fd:51:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=56f897d1-5118-48ae-8652-8f265843795b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:23:fb:c3:cf:52:4c:38:81:d2:3d:3f:4f:bc: 76:0d:68:58:e3:ee:c2:9c:1d:6c:a9:a9:af:c7:3d: c5:1f:14:23:f2:a7:f0:4b:e3:a1:0a:3a:43:b1:72: e0:ae:90:2c:fe:8a:04:f2:c7:f1:a2:1c:a0:f9:95: d2:18:c7:db:2a:47:07:33:44:a9:58:c6:d2:ae:7e: b4:f9:2a:91:92:46:57:15:9f:f5:2e:ff:2d:1e:93: 05:65:08:fa:22:15:41:4c:fa:c7:e4:83:22:db:8c: 7c:b5:03:e4:68:80:21:7e:72:90:3f:39:61:4c:b0: e9:da:ad:bc:42:84:49:cb:d8:a9:d4:69:6e:06:2c: 92:18:f0:cf:77:1a:1f:1c:cb:8a:9d:7a:7d:ae:0e: bd:88:66:58:d0:2d:0b:da:09:12:c5:24:bf:46:3b: 6a:d0:05:c4:8e:08:94:8f:c4:13:ed:7b:71:00:8a: 80:05:0c:c6:9a:e0:17:11:0a:a4:e2:a8:ed:72:71: 84:7f:d1:5a:02:fc:ee:37:6a:45:79:7b:7b:22:46: 44:5a:f8:bc:0f:af:37:d1:bb:27:2f:48:4a:56:1a: 63:10:1f:ba:5c:14:fe:89:63:25:3b:c8:71:3c:dc: 2e:d6:f5:74:f3:9f:3b:ed:85:64:bc:33:98:71:98: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7E:BD:6F:30:58:99:BB:28:06:D2:56:99:CB:7B:F0:0F:80:CE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c9:48:6a:3b:d0:be:bc:40:38:3b:1d:0f:b3:71:74:3c:56: bb:eb:55:f8:f0:bf:de:45:ee:cf:f7:b3:b0:1c:09:b5:72:35: 8e:2d:6b:5f:94:7e:8b:3a:43:fb:29:15:3b:b1:30:22:4b:98: 6a:0f:1c:16:a5:f6:c6:90:ed:c4:70:e3:83:70:3b:27:9a:ff: 12:4f:3c:ab:4b:f2:ec:18:39:50:6d:e5:9b:53:68:b8:78:d9: 15:b6:7c:4e:72:44:fe:20:27:95:96:6e:a7:d3:74:12:fe:1b: ee:48:79:54:35:aa:0a:f1:ea:4d:68:c3:9f:b5:97:d4:80:01: 83:06:cb:d5:77:c5:f2:77:d7:1d:be:bb:ff:a5:3f:ec:9d:64: 2d:2b:0a:08:48:92:66:c7:5a:3b:ed:99:20:a1:6a:51:6a:cf: f5:2b:cb:c6:43:b9:86:4a:59:75:f7:ad:64:54:55:03:2f:b8: 7d:cf:eb:21:2d:b2:2b:35:dd:4e:f9:b9:ee:e3:5d:a5:6e:14: d3:06:7c:94:09:bc:a5:5e:61:1a:fd:22:48:bd:a3:d2:fa:62: 9f:34:96:95:21:d9:b7:06:49:ad:be:f8:11:24:a6:1b:16:04: 4a:ad:4e:3a:94:bc:8f:fb:f9:02:c0:b2:70:29:3c:6c:af:dc: 46:1a:bf:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VgtGbjv1v1RWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTZmODk3ZDEtNTExOC00OGFlLTg2NTItOGYyNjU4NDM3OTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCP7w89STDiB0j0/T7x2DWhY4+7CnB1sqamv xz3FHxQj8qfwS+OhCjpDsXLgrpAs/ooE8sfxohyg+ZXSGMfbKkcHM0SpWMbSrn60 +SqRkkZXFZ/1Lv8tHpMFZQj6IhVBTPrH5IMi24x8tQPkaIAhfnKQPzlhTLDp2q28 QoRJy9ip1GluBiySGPDPdxofHMuKnXp9rg69iGZY0C0L2gkSxSS/Rjtq0AXEjgiU j8QT7XtxAIqABQzGmuAXEQqk4qjtcnGEf9FaAvzuN2pFeXt7IkZEWvi8D6830bsn L0hKVhpjEB+6XBT+iWMlO8hxPNwu1vV085877YVkvDOYcZjKewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLt+vW8wWJm7KAbSVpnLe/APgM7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY3M2YwNjQtNzk0OC0z OGU1LTkyYTMtMjkyMjM3NmE3YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnJSGo70L68QDg7HQ+zcXQ8VrvrVfjwv95F7s/3s7AcCbVyNY4t a1+Ufos6Q/spFTuxMCJLmGoPHBal9saQ7cRw44NwOyea/xJPPKtL8uwYOVBt5ZtT aLh42RW2fE5yRP4gJ5WWbqfTdBL+G+5IeVQ1qgrx6k1ow5+1l9SAAYMGy9V3xfJ3 1x2+u/+lP+ydZC0rCghIkmbHWjvtmSChalFqz/Ury8ZDuYZKWXX3rWRUVQMvuH3P 6yEtsis13U75ue7jXaVuFNMGfJQJvKVeYRr9Iki9o9L6Yp80lpUh2bcGSa2++BEk phsWBEqtTjqUvI/7+QLAsnApPGyv3EYav6s= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:05 2025 by rpki-client