$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa File: 78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa (raw, json) Hash identifier: qe/JFCjOzFfd4goqkHPObZQeHeM3uXs+BzUcR46riVU= Subject key identifier: DB:A4:AF:F2:50:39:AB:3B:19:B5:D4:6E:61:E0:97:E4:C6:49:B7:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD3A123AE6B9CE948ADD3AEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:23:ae:6b:9c:e9:48:ad:d3:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=720d85b0-8a3f-4565-a38e-5df379670008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:c4:bb:28:a3:6b:ad:ba:ae:50:49:be:be: 19:08:5b:28:71:67:7e:6c:6b:04:5d:ec:09:f7:e7: e4:b7:1c:68:ff:5f:ca:58:14:cb:de:10:ba:98:9b: 87:f8:65:dd:b8:67:9e:5f:22:87:65:65:de:70:c8: 56:53:b3:56:af:30:9e:17:75:3f:d7:4c:d6:ea:9b: c0:b4:a4:1b:99:d3:84:34:54:b2:4f:30:2f:95:73: 00:68:19:e6:c1:3a:33:17:37:bb:ca:b5:b1:a5:c2: 14:1e:a5:43:59:b8:e5:d7:28:21:3a:dc:55:0b:de: bf:0c:96:5e:64:31:f9:71:c5:de:13:d3:50:b9:31: 6c:ba:eb:74:0d:c7:1a:7f:1c:e8:5e:66:c1:b2:9e: 2e:97:82:57:f9:83:3d:cd:e4:d2:66:81:41:12:cf: 71:e7:0f:4f:b4:00:05:db:66:21:f3:f7:07:11:ca: 7d:58:30:ce:6f:15:fc:dc:11:c5:33:2a:0e:2d:ba: 62:e5:61:13:e6:8c:00:c7:0c:e2:a1:13:a8:2f:bf: a2:58:dd:45:28:e0:83:a0:71:08:02:2f:2c:57:33: 81:07:2b:39:dd:3e:29:a5:7c:f1:99:c1:1f:f6:57: 42:65:72:84:cf:21:4a:88:c2:ab:ec:7c:ec:a4:73: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A4:AF:F2:50:39:AB:3B:19:B5:D4:6E:61:E0:97:E4:C6:49:B7:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e8:ee:0b:9d:19:ee:56:be:8d:3a:56:5b:07:90:05:9c:0a: cd:8a:8d:c3:d5:d4:56:40:5a:b7:92:95:f0:41:07:40:fb:e6: 81:62:28:9f:73:2f:cc:89:2b:cf:5a:1e:a8:58:86:ea:19:3c: f0:fb:61:e8:e2:33:d2:97:cf:9f:7f:9d:20:22:8e:87:fa:5d: 1e:47:e3:ad:cb:9d:07:24:ce:e7:e1:e4:8b:47:a7:9a:02:c0: 31:e6:b2:98:ee:ff:26:fa:62:cc:b3:16:20:02:23:80:57:f8: d7:37:e0:3e:04:61:cf:71:95:df:4e:b6:8f:99:53:14:80:e0: 97:24:dd:56:39:b8:2e:6a:44:27:48:a1:46:2b:71:01:35:65: 6d:10:a0:d4:36:49:cf:f2:3f:99:56:07:48:72:3b:d4:71:d1: d6:9b:67:23:1d:4a:1a:e9:c3:f7:cd:00:c6:94:23:e8:cb:c6: e8:f0:ea:6d:5a:e8:c5:8b:d4:ab:de:d8:2a:ec:37:d5:37:2c: 0f:f5:6f:55:93:3d:1b:40:db:97:2b:64:ad:7f:3c:9e:bd:96: 03:cc:de:05:1d:48:00:af:b3:63:fe:d6:cc:3c:75:11:f4:f2: e4:db:ee:7d:b0:e5:cc:a4:f3:93:ea:46:09:ee:c9:f9:8f:73: 5b:22:f3:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToSOua5zpSK3TrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NzIwZDg1YjAtOGEzZi00NTY1LWEzOGUtNWRmMzc5NjcwMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGvEuyija626rlBJvr4ZCFsocWd+bGsEXewJ 9+fktxxo/1/KWBTL3hC6mJuH+GXduGeeXyKHZWXecMhWU7NWrzCeF3U/10zW6pvA tKQbmdOENFSyTzAvlXMAaBnmwTozFze7yrWxpcIUHqVDWbjl1yghOtxVC96/DJZe ZDH5ccXeE9NQuTFsuut0DccafxzoXmbBsp4ul4JX+YM9zeTSZoFBEs9x5w9PtAAF 22Yh8/cHEcp9WDDObxX83BHFMyoOLbpi5WET5owAxwzioROoL7+iWN1FKOCDoHEI Ai8sVzOBBys53T4ppXzxmcEf9ldCZXKEzyFKiMKr7HzspHNSWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNukr/JQOas7GbXUbmHgl+TGSbdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhmM2ZhMjktMTExNy0z YmZmLWE2NzAtMmQzM2Q0ZTIxZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbo7gudGe5Wvo06VlsHkAWcCs2KjcPV1FZAWreSlfBBB0D75oFi KJ9zL8yJK89aHqhYhuoZPPD7YejiM9KXz59/nSAijof6XR5H463LnQckzufh5ItH p5oCwDHmspju/yb6YsyzFiACI4BX+Nc34D4EYc9xld9Oto+ZUxSA4Jck3VY5uC5q RCdIoUYrcQE1ZW0QoNQ2Sc/yP5lWB0hyO9Rx0dabZyMdShrpw/fNAMaUI+jLxujw 6m1a6MWL1Kve2CrsN9U3LA/1b1WTPRtA25crZK1/PJ69lgPM3gUdSACvs2P+1sw8 dRH08uTb7n2w5cyk85PqRgnuyfmPc1si8z4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:32 2025 by rpki-client