$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa File: 6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa (raw, json) Hash identifier: j2NGTodA5rXkWxuv/sY2JIxBLgK0L9QCrBHIP6AErvs= Subject key identifier: 25:E1:65:1D:59:78:09:F1:B6:1B:B3:9C:2E:97:0C:C2:F0:00:EB:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15AE40FAC954D3C9C0AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36626 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5a:e4:0f:ac:95:4d:3c:9c:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=87d4d98c-0d64-4668-a36f-149291e68917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:dd:0b:9e:15:b9:fc:1b:f9:af:69:de:c5: 05:52:15:ed:67:87:2e:c8:49:85:13:fe:c9:f5:f7: 51:37:1b:6e:30:c0:b5:d1:3c:0b:67:fa:08:e8:04: 0e:6a:d0:c3:06:a5:2f:8a:8b:c5:0d:8c:47:df:18: bd:48:2c:73:ce:cf:3d:23:e2:a3:68:0a:b9:e2:e9: 13:2d:57:ee:3d:0a:14:11:9b:ea:1e:74:88:9a:50: e2:0e:e9:d3:e4:da:22:4e:4a:f7:66:6d:c1:fc:b3: 7d:d6:c0:78:dc:ff:7c:c9:78:01:fc:e5:c3:57:72: bc:38:4d:90:d3:4c:56:91:10:42:9e:33:d1:4e:95: 89:a2:a5:3d:65:55:a6:05:6b:aa:62:01:9a:a4:6a: 7a:eb:cc:2a:81:59:f1:ab:b2:84:fb:2d:58:46:0d: 7f:06:70:b0:8b:f4:9b:d1:63:3d:d8:3f:e1:35:bd: 39:04:1b:ff:bd:c0:20:e0:d9:5a:76:b7:d4:6c:4c: e2:72:a9:1f:72:a6:99:53:80:c2:19:51:a2:75:8c: 64:90:58:da:74:43:40:b8:59:32:81:08:a1:3a:16: 13:fc:18:f5:9a:cc:8d:45:3b:e5:e7:a3:42:48:86: 2d:dc:a4:61:b3:fc:1e:bf:9d:5d:f6:f5:b4:be:72: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:65:1D:59:78:09:F1:B6:1B:B3:9C:2E:97:0C:C2:F0:00:EB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f108b03-827c-3f4c-8b5d-5b229e7e5efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:63:f6:51:1f:18:8c:40:38:a7:b0:26:60:ea:a1:08:62:75: ed:1b:d5:2c:b4:40:cd:ce:95:b1:5c:33:97:36:eb:5d:a9:21: 68:f7:1a:d0:1b:38:fc:4e:4f:25:1f:36:04:fa:b1:8a:53:fc: ca:2b:25:9f:fb:f8:1e:b0:55:8a:4b:ec:b2:2c:ce:de:53:96: d6:fe:11:a8:a1:43:96:2b:51:0f:34:cd:01:28:42:c0:b1:02: 5c:c7:70:ed:9a:58:85:0c:99:5a:3d:c1:e7:f3:32:75:3a:ea: aa:8e:02:ae:bf:35:28:ea:3b:53:2d:49:54:76:1a:bb:6a:93: 91:1a:dd:95:38:31:d9:f5:34:42:32:dc:70:52:c6:c6:3c:50: 04:4a:91:bf:a4:95:f6:67:ef:af:b5:af:7b:ed:37:c2:66:f2: 53:26:f3:30:a7:c5:02:aa:2c:7a:16:87:1e:d3:9c:5f:05:b7: dc:5f:d3:86:5c:a7:0e:f8:45:cd:8f:05:7e:6b:9e:e4:6c:7b: a2:fb:09:3e:d8:e9:1d:a1:ed:7c:08:26:4d:c9:a4:0f:f4:95: 52:bd:b7:cb:6a:56:94:02:bc:f4:01:c0:62:7d:cd:22:79:2e: e2:ce:ad:58:b9:c9:bb:60:9f:7f:44:ed:9d:16:be:c9:3e:8d: 51:2d:c0:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VrkD6yVTTycCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ODdkNGQ5OGMtMGQ2NC00NjY4LWEzNmYtMTQ5MjkxZTY4OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7vdC54Vufwb+a9p3sUFUhXtZ4cuyEmFE/7J 9fdRNxtuMMC10TwLZ/oI6AQOatDDBqUviovFDYxH3xi9SCxzzs89I+KjaAq54ukT LVfuPQoUEZvqHnSImlDiDunT5NoiTkr3Zm3B/LN91sB43P98yXgB/OXDV3K8OE2Q 00xWkRBCnjPRTpWJoqU9ZVWmBWuqYgGapGp668wqgVnxq7KE+y1YRg1/BnCwi/Sb 0WM92D/hNb05BBv/vcAg4NladrfUbEzicqkfcqaZU4DCGVGidYxkkFjadENAuFky gQihOhYT/Bj1msyNRTvl56NCSIYt3KRhs/wev51d9vW0vnLO0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXhZR1ZeAnxthuznC6XDMLwAOu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmYxMDhiMDMtODI3Yy0z ZjRjLThiNWQtNWIyMjllN2U1ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChj9lEfGIxAOKewJmDqoQhide0b1Sy0QM3OlbFcM5c2612pIWj3 GtAbOPxOTyUfNgT6sYpT/MorJZ/7+B6wVYpL7LIszt5Tltb+EaihQ5YrUQ80zQEo QsCxAlzHcO2aWIUMmVo9wefzMnU66qqOAq6/NSjqO1MtSVR2Grtqk5Ea3ZU4Mdn1 NEIy3HBSxsY8UARKkb+klfZn76+1r3vtN8Jm8lMm8zCnxQKqLHoWhx7TnF8Ft9xf 04Zcpw74Rc2PBX5rnuRse6L7CT7Y6R2h7XwIJk3JpA/0lVK9t8tqVpQCvPQBwGJ9 zSJ5LuLOrVi5ybtgn39E7Z0Wvsk+jVEtwME= -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:23 2025 by rpki-client