$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa File: a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa (raw, json) Hash identifier: Dk608Ekdmtz5VAR3jalrpW75pL7SvgAUV2mB/X7ZH98= Subject key identifier: 3F:EE:75:31:E3:F2:81:53:DC:F3:79:8B:91:34:A4:73:A3:D2:DC:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1594787290A70592DBF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 40717 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:47:87:29:0a:70:59:2d:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8a0a6e92-8b8b-41eb-9101-4c2a742e5845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:1d:d1:02:54:ef:72:5a:18:7e:9e:2d:04: d5:77:2f:38:5e:56:00:c4:50:44:c7:88:9e:e1:cf: dc:c8:fd:9b:67:36:10:be:2c:c8:71:e9:ef:17:fd: 06:eb:8b:4e:49:60:ca:2e:9b:ad:dd:d8:8d:92:1f: 22:60:ca:55:24:9a:d9:de:a4:5c:fd:24:3c:1b:18: a9:2d:1f:44:87:65:cf:1f:49:9f:af:8c:eb:c6:f2: 3b:05:69:04:1d:73:c7:b4:7a:b2:99:c8:4d:9a:8f: 0d:44:f7:85:91:e8:41:6d:db:05:68:a5:6f:2e:c9: d4:ae:e7:bd:f2:8e:98:ac:38:c2:20:f9:e1:c9:c3: c5:0c:00:6f:42:65:ec:74:16:55:4f:7b:fe:76:6d: 51:04:69:80:e4:ba:39:65:c0:9c:70:38:5d:9f:d3: 2d:20:a1:a1:2e:28:63:94:71:5a:38:11:11:84:7f: 1e:93:c8:58:18:35:75:4f:16:2c:51:35:99:ce:70: b5:53:f4:d5:4e:8f:72:d3:d0:42:00:33:d0:b1:55: 4a:48:bc:ce:5c:15:0f:f5:46:60:ec:01:1f:8d:48: b0:4a:93:26:f4:28:33:34:ca:76:ad:cc:3f:41:9a: ec:79:da:32:a9:7d:f5:e1:92:fb:0c:3e:d2:46:d7: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EE:75:31:E3:F2:81:53:DC:F3:79:8B:91:34:A4:73:A3:D2:DC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:53:d0:9e:1c:2e:6b:c0:51:5c:15:d6:b6:e3:33:e1:f8:6a: 26:bf:ec:3d:3b:e0:36:da:38:8a:c3:2b:16:84:c8:03:23:45: 09:9e:0e:cb:bb:dd:90:74:8a:0d:61:25:e3:8f:05:54:3a:e4: 8a:e8:5a:66:9a:07:aa:55:40:fd:99:46:94:cc:81:67:29:c6: 60:6c:db:2d:22:db:d0:a0:b6:da:cc:8c:6b:09:b6:35:f2:12: ad:5f:b1:8c:38:44:92:15:78:5e:9b:76:4f:6b:ea:53:f0:9d: f8:96:61:bb:59:f6:ae:99:af:18:a4:1e:82:48:30:4c:38:2d: 75:4e:7a:ed:f6:95:31:b3:9d:fe:34:7a:59:8e:5a:ba:71:a3: bb:b8:5b:ed:f2:b5:62:0d:23:92:5d:a5:db:2f:83:53:5a:e9: a6:77:c4:e3:7f:fb:31:3f:aa:64:e3:1d:3f:d4:7d:1d:ee:e7: ae:22:36:ca:65:33:63:59:c0:30:b0:dd:4e:25:82:81:6d:62: 81:44:cd:84:ac:48:d1:16:1c:e3:30:e6:bd:47:c5:da:1c:35: ee:01:a8:6e:10:7e:ac:0b:38:d1:45:f7:95:84:8a:d5:4f:e8: f1:76:d9:40:3d:ee:ad:5f:45:3b:84:64:48:bf:80:bf:d0:4f: 85:f0:8e:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VlHhykKcFktv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OGEwYTZlOTItOGI4Yi00MWViLTkxMDEtNGMyYTc0MmU1ODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv88d0QJU73JaGH6eLQTVdy84XlYAxFBEx4ie 4c/cyP2bZzYQvizIcenvF/0G64tOSWDKLput3diNkh8iYMpVJJrZ3qRc/SQ8Gxip LR9Eh2XPH0mfr4zrxvI7BWkEHXPHtHqymchNmo8NRPeFkehBbdsFaKVvLsnUrue9 8o6YrDjCIPnhycPFDABvQmXsdBZVT3v+dm1RBGmA5Lo5ZcCccDhdn9MtIKGhLihj lHFaOBERhH8ek8hYGDV1TxYsUTWZznC1U/TVTo9y09BCADPQsVVKSLzOXBUP9UZg 7AEfjUiwSpMm9CgzNMp2rcw/QZrsedoyqX314ZL7DD7SRted7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/udTHj8oFT3PN5i5E0pHOj0txTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZiOWNlMzctYzdkNy0z OGE1LWJiNWMtYzFmNjM2MDQyOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNT0J4cLmvAUVwV1rbjM+H4aia/7D074DbaOIrDKxaEyAMjRQme Dsu73ZB0ig1hJeOPBVQ65IroWmaaB6pVQP2ZRpTMgWcpxmBs2y0i29CgttrMjGsJ tjXyEq1fsYw4RJIVeF6bdk9r6lPwnfiWYbtZ9q6ZrxikHoJIMEw4LXVOeu32lTGz nf40elmOWrpxo7u4W+3ytWINI5Jdpdsvg1Na6aZ3xON/+zE/qmTjHT/UfR3u564i NsplM2NZwDCw3U4lgoFtYoFEzYSsSNEWHOMw5r1HxdocNe4BqG4QfqwLONFF95WE itVP6PF22UA97q1fRTuEZEi/gL/QT4Xwji0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:55:46 2025 by rpki-client