$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a575e46f-6c2c-3661-925e-248f010bf59d.roa File: a575e46f-6c2c-3661-925e-248f010bf59d.roa (raw, json) Hash identifier: ldMQdSYH3oe9yiXXRkWK0ebj37Mpze4/LwQcDiFDgAA= Subject key identifier: E5:7E:E7:A4:65:DF:59:6E:CF:10:80:57:33:5D:1C:22:1F:91:0B:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15DDE3B11DA50E34A20A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a575e46f-6c2c-3661-925e-248f010bf59d.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36627 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:de:3b:11:da:50:e3:4a:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=0a71d57e-27dc-4d83-a5a5-d72f16435512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:85:ab:da:af:43:b6:10:68:18:4e:48:f9: 18:27:55:5c:56:c9:aa:6f:e1:0d:45:39:b4:f3:16: 52:73:86:2a:35:43:9a:b8:eb:36:76:41:d5:fc:2f: 7e:59:37:2d:ca:e5:1e:29:36:83:cc:44:2e:d8:8b: a8:3b:f2:1a:1e:10:29:e9:3d:4b:7f:de:31:fb:35: ec:d9:48:6b:2b:d4:ea:b1:5a:90:df:2a:9d:21:2a: c1:57:3e:53:85:12:52:c4:4a:85:b2:4e:f6:98:3c: c6:26:c2:43:f6:49:32:6a:42:8b:26:a9:39:0a:75: b1:71:8a:b0:22:11:10:79:88:46:02:1e:fa:dc:2d: b2:07:2e:61:73:07:fc:7d:f3:c2:1e:f4:fd:92:e6: dc:4c:fc:f2:04:9c:b9:cf:f3:51:9f:09:49:c6:5f: 32:c8:b9:f2:f7:fe:46:d8:25:5a:1b:f8:88:52:8f: 7c:d9:33:ec:95:db:93:ad:91:c5:48:ed:a4:cf:69: 61:bf:9b:c1:3a:f6:b3:1b:3b:3c:1a:cd:d0:81:55: 95:9a:68:91:71:ae:87:8e:74:cf:c9:28:3e:97:dc: f1:2f:66:18:6b:ce:11:ef:e4:6d:31:80:61:ea:69: 29:95:2e:34:20:61:19:a1:33:c7:0e:39:ed:72:9a: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7E:E7:A4:65:DF:59:6E:CF:10:80:57:33:5D:1C:22:1F:91:0B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a575e46f-6c2c-3661-925e-248f010bf59d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8d:ff:09:eb:5c:26:a8:3e:a4:fa:17:af:64:aa:d9:49:1a: dd:30:98:b4:6d:44:20:51:a9:54:0a:5b:c2:84:b2:47:de:d9: 47:f4:e7:86:8b:f8:0c:33:12:a1:62:4e:ed:7a:75:de:e2:72: 20:f5:de:eb:a1:9b:9a:6e:b6:cb:2a:61:66:a8:46:60:6e:19: 34:03:17:b6:b0:3f:c3:63:bb:e3:b2:50:79:ab:39:be:ed:3d: 3f:19:8d:5c:2c:fe:91:77:96:16:e8:bb:e3:d0:5d:5c:07:a0: 85:b0:ed:19:91:9b:5f:c6:55:44:95:b1:9d:b4:ad:2b:d1:6e: 1c:56:12:bc:83:95:5c:32:24:b1:34:ac:9b:ef:34:6b:bc:2e: f1:83:48:97:3a:25:df:b3:d7:02:f2:14:63:85:c3:37:79:9d: a4:ad:ec:90:47:e2:4e:e7:73:9c:94:cc:0f:b4:e3:45:76:e8: 14:6e:2e:47:f0:d9:ce:43:6e:ca:f8:f8:c6:0b:05:1f:70:fb: dd:e9:e8:c3:24:a9:47:55:67:18:ba:90:cb:71:c3:83:fe:a8: 00:d0:b1:4e:8a:5d:3f:99:18:1f:c5:69:3b:87:90:6b:21:fc: 7a:15:6e:30:f3:72:33:75:ad:b8:ae:6c:a9:fc:de:a9:78:9f: 90:34:16:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V3eOxHaUONKIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MGE3MWQ1N2UtMjdkYy00ZDgzLWE1YTUtZDcyZjE2NDM1NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunCFq9qvQ7YQaBhOSPkYJ1VcVsmqb+ENRTm0 8xZSc4YqNUOauOs2dkHV/C9+WTctyuUeKTaDzEQu2IuoO/IaHhAp6T1Lf94x+zXs 2UhrK9TqsVqQ3yqdISrBVz5ThRJSxEqFsk72mDzGJsJD9kkyakKLJqk5CnWxcYqw IhEQeYhGAh763C2yBy5hcwf8ffPCHvT9kubcTPzyBJy5z/NRnwlJxl8yyLny9/5G 2CVaG/iIUo982TPslduTrZHFSO2kz2lhv5vBOvazGzs8Gs3QgVWVmmiRca6HjnTP ySg+l9zxL2YYa84R7+RtMYBh6mkplS40IGEZoTPHDjntcpr34QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOV+56Rl31luzxCAVzNdHCIfkQt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU3NWU0NmYtNmMyYy0z NjYxLTkyNWUtMjQ4ZjAxMGJmNTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+N/wnrXCaoPqT6F69kqtlJGt0wmLRtRCBRqVQKW8KEskfe2Uf0 54aL+AwzEqFiTu16dd7iciD13uuhm5putssqYWaoRmBuGTQDF7awP8Nju+OyUHmr Ob7tPT8ZjVws/pF3lhbou+PQXVwHoIWw7RmRm1/GVUSVsZ20rSvRbhxWEryDlVwy JLE0rJvvNGu8LvGDSJc6Jd+z1wLyFGOFwzd5naSt7JBH4k7nc5yUzA+040V26BRu Lkfw2c5Dbsr4+MYLBR9w+93p6MMkqUdVZxi6kMtxw4P+qADQsU6KXT+ZGB/FaTuH kGsh/HoVbjDzcjN1rbiubKn83ql4n5A0Fiw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:08 2025 by rpki-client