$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa File: 6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa (raw, json) Hash identifier: 0JJih1RjDQErw7buuEs3Tx9inUi9dN7VeMtL9sBJOUw= Subject key identifier: 14:92:47:33:CA:D1:B7:15:A5:70:E0:0E:57:76:08:14:11:30:CA:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15E7A63B563B5B19FB580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36629 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5e:7a:63:b5:63:b5:b1:9f:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=2fafbf19-d500-467c-a956-621b3521954e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:5a:6b:19:60:af:95:26:93:fb:3c:25:fc: c3:df:89:99:12:fc:0a:6d:41:f6:40:69:18:da:dc: e2:88:d8:ee:f8:dc:ef:c2:c4:a5:e2:ff:aa:49:6f: 17:e9:7a:ec:4e:06:ea:7e:23:31:d7:ee:11:85:9d: db:e2:8c:cb:d9:ea:2b:3b:21:d6:ca:1f:83:e1:d0: 64:58:6e:c3:d8:49:42:d7:e7:2d:a2:f4:3b:d1:8d: 0e:40:d4:8d:b3:1b:dc:a4:15:26:01:79:33:3e:a0: 1c:48:c6:2e:a8:17:c4:f9:0a:01:02:4d:19:af:e8: 4c:2a:ed:49:d5:0a:5a:f7:73:e3:95:8d:9a:f2:00: 0e:22:00:f1:ae:b9:33:86:c0:3d:58:1b:cc:4d:94: fb:f1:24:75:ce:a7:a8:d0:b4:17:04:e1:ac:22:11: 61:00:86:72:da:c7:04:f9:34:96:5a:12:6d:4f:27: 3e:bb:2d:b4:bd:c3:a7:6f:e3:67:22:75:7d:f4:aa: c7:38:af:79:fa:35:3e:1c:20:4e:e5:3a:18:16:c1: 23:57:7a:0b:22:90:7a:7c:c0:47:8f:52:0f:da:ad: 43:d5:ab:11:26:a2:b2:c9:bc:4d:d0:ce:52:9f:be: 7a:89:17:72:5d:f0:62:c9:ff:95:e4:6f:c0:eb:e4: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:47:33:CA:D1:B7:15:A5:70:E0:0E:57:76:08:14:11:30:CA:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:16:e5:71:db:48:42:5b:51:64:94:c2:1d:94:54:75:b6:09: fa:b5:2c:21:00:00:c7:27:3d:4a:b0:99:5b:bd:98:b3:28:5a: dd:6e:2b:ca:ad:c1:85:21:21:61:4f:09:e6:79:dd:25:f8:81: e7:0e:cc:c6:bd:28:9f:91:39:b7:31:e7:68:30:06:50:3b:41: d2:a7:3f:16:49:5e:6c:32:fd:3d:cc:bb:43:b7:55:5e:47:06: 00:b6:4a:04:a9:0e:9b:c1:e8:ec:9f:19:3a:75:c1:7b:5c:85: bb:80:54:32:89:ad:cc:72:7a:ae:9f:fb:5f:c5:54:93:b0:4e: 45:b7:51:90:bb:22:c3:6e:df:47:06:88:3a:0c:85:86:fa:4b: 6f:ee:c9:9f:05:4e:42:24:2a:bd:ac:87:ac:71:bb:8e:e4:f3: 2b:fc:1f:5e:d6:46:88:3e:07:dd:f5:28:f5:ce:47:2f:f8:f4: 43:5c:0b:8b:7f:da:50:f9:5d:82:4d:fe:2e:5e:61:56:57:e6: d3:e1:60:94:7b:f3:fa:c1:8c:c2:c9:49:03:30:b8:0d:17:de: c8:a3:45:10:da:4c:91:a2:06:cd:3d:0d:e4:59:3f:55:41:3a: 50:a7:a7:d9:71:91:8b:e9:30:17:aa:b9:4d:3c:13:b4:65:64: 53:9c:76:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V56Y7VjtbGftYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MmZhZmJmMTktZDUwMC00NjdjLWE5NTYtNjIxYjM1MjE5NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Jaaxlgr5Umk/s8JfzD34mZEvwKbUH2QGkY 2tziiNju+NzvwsSl4v+qSW8X6XrsTgbqfiMx1+4RhZ3b4ozL2eorOyHWyh+D4dBk WG7D2ElC1+ctovQ70Y0OQNSNsxvcpBUmAXkzPqAcSMYuqBfE+QoBAk0Zr+hMKu1J 1Qpa93PjlY2a8gAOIgDxrrkzhsA9WBvMTZT78SR1zqeo0LQXBOGsIhFhAIZy2scE +TSWWhJtTyc+uy20vcOnb+NnInV99KrHOK95+jU+HCBO5ToYFsEjV3oLIpB6fMBH j1IP2q1D1asRJqKyybxN0M5Sn756iRdyXfBiyf+V5G/A6+RASQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSSRzPK0bcVpXDgDld2CBQRMMrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmQ2ODI5YjUtNTJkOC0z MzY1LTk3Y2ItN2JhMjZjMDdjZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUW5XHbSEJbUWSUwh2UVHW2Cfq1LCEAAMcnPUqwmVu9mLMoWt1u K8qtwYUhIWFPCeZ53SX4gecOzMa9KJ+RObcx52gwBlA7QdKnPxZJXmwy/T3Mu0O3 VV5HBgC2SgSpDpvB6OyfGTp1wXtchbuAVDKJrcxyeq6f+1/FVJOwTkW3UZC7IsNu 30cGiDoMhYb6S2/uyZ8FTkIkKr2sh6xxu47k8yv8H17WRog+B931KPXORy/49ENc C4t/2lD5XYJN/i5eYVZX5tPhYJR78/rBjMLJSQMwuA0X3sijRRDaTJGiBs09DeRZ P1VBOlCnp9lxkYvpMBequU08E7RlZFOcdi4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:20:14 2025 by rpki-client