$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa File: a7eea992-e3da-31ef-98f7-dafc57d26c93.roa (raw, json) Hash identifier: QF/QoHuGMueLVaqZia1UnV135vcRx3OdcQftxvXYPEA= Subject key identifier: 50:0B:BB:CC:CD:52:C5:89:4C:BE:61:7D:0E:10:70:34:2A:F8:79:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F157B28B4F007078814720 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396571 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:57:b2:8b:4f:00:70:78:81:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=caa6a6cd-2b70-4abe-abc9-bc23a6ea2e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:05:55:a2:d5:24:72:f0:44:b7:22:6b:0c: 6d:c1:b3:cc:71:3e:bb:5f:42:0f:31:ed:83:77:3e: 6f:c0:a0:a0:ea:6c:31:1c:1a:c9:10:ae:80:32:31: 9f:6c:1a:0c:19:a6:66:d8:b3:1d:94:92:05:77:24: 12:1d:df:14:08:12:28:df:ad:3c:52:29:da:fb:b4: 1a:4b:f9:1f:3b:77:5e:35:1f:c7:ea:71:35:74:e8: f2:38:d6:b8:5e:a6:90:67:f3:44:f8:91:44:e1:af: 7b:88:11:ae:0a:d5:2f:26:5d:fd:c9:cf:82:8c:a4: 04:f2:53:69:ba:5c:45:29:f8:bc:f4:bc:1b:b1:7f: 32:a0:4f:89:62:db:47:39:67:a0:77:68:04:5e:b0: 20:00:cc:49:03:88:df:5d:64:e8:7b:64:e6:7e:7c: cc:6b:41:0a:ff:44:ce:3e:16:a8:78:ee:4f:1a:c3: a9:b0:77:da:2b:f9:fa:94:c2:06:e2:cf:34:67:f5: af:64:84:13:5a:a1:58:88:e0:79:c1:2b:d7:b6:c8: 2e:0a:82:04:b7:81:d6:f2:a5:39:33:2d:b4:24:b1: 63:5b:fc:1a:3c:e0:b1:f0:fa:98:6c:e5:b8:a5:23: 52:a4:bf:d3:23:22:90:0a:fc:5a:98:62:a9:28:7f: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0B:BB:CC:CD:52:C5:89:4C:BE:61:7D:0E:10:70:34:2A:F8:79:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ce:79:f6:7e:41:e9:70:c3:15:95:0a:0b:c9:29:c5:0d:52: 2e:3a:7e:3b:8c:2b:30:b8:f6:8e:be:12:65:89:41:9a:7b:e9: c8:6f:98:fc:f9:73:1d:ea:63:9f:5b:f7:4e:b7:f8:68:d1:f7: 66:2d:2f:8e:78:46:04:01:f1:9a:50:d8:e8:88:7a:e8:c2:d2: a5:96:95:2f:b2:d1:9c:ab:5c:38:d7:87:d5:e5:82:0e:29:2a: cb:ec:b7:0e:b6:74:21:af:07:89:75:bf:15:a4:09:b3:ab:fc: 60:4b:53:ff:a4:59:65:d0:12:13:92:f2:19:99:c9:25:3a:7e: fa:db:6a:e2:8a:9c:45:02:d2:c4:5e:8f:2e:55:b3:c4:6f:1c: 49:fd:df:10:80:70:e0:56:ed:46:30:07:77:03:b0:67:1c:be: 51:05:f7:89:80:42:11:8b:e4:2b:5e:30:d8:e6:08:6f:ae:1f: 69:d4:62:0f:36:93:1b:05:1b:65:bc:5e:e5:7d:1f:41:e3:f8: e9:96:b4:33:79:36:3e:a5:51:48:04:8e:48:67:a9:83:13:9f: fa:22:e4:7a:ec:ce:cb:5a:02:20:87:49:79:cb:9d:73:2f:ab: 98:3e:e1:f8:b5:1d:39:65:c8:49:b6:4d:31:b7:29:65:6e:cd: e7:af:9f:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8Veyi08AcHiBRyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk Y2FhNmE2Y2QtMmI3MC00YWJlLWFiYzktYmMyM2E2ZWEyZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH4FVaLVJHLwRLciawxtwbPMcT67X0IPMe2D dz5vwKCg6mwxHBrJEK6AMjGfbBoMGaZm2LMdlJIFdyQSHd8UCBIo3608Uina+7Qa S/kfO3deNR/H6nE1dOjyONa4XqaQZ/NE+JFE4a97iBGuCtUvJl39yc+CjKQE8lNp ulxFKfi89LwbsX8yoE+JYttHOWegd2gEXrAgAMxJA4jfXWToe2TmfnzMa0EK/0TO PhaoeO5PGsOpsHfaK/n6lMIG4s80Z/WvZIQTWqFYiOB5wSvXtsguCoIEt4HW8qU5 My20JLFjW/waPOCx8PqYbOW4pSNSpL/TIyKQCvxamGKpKH85JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFALu8zNUsWJTL5hfQ4QcDQq+Hm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlZWE5OTItZTNkYS0z MWVmLTk4ZjctZGFmYzU3ZDI2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfOefZ+QelwwxWVCgvJKcUNUi46fjuMKzC49o6+EmWJQZp76chv mPz5cx3qY59b9063+GjR92YtL454RgQB8ZpQ2OiIeujC0qWWlS+y0ZyrXDjXh9Xl gg4pKsvstw62dCGvB4l1vxWkCbOr/GBLU/+kWWXQEhOS8hmZySU6fvrbauKKnEUC 0sRejy5Vs8RvHEn93xCAcOBW7UYwB3cDsGccvlEF94mAQhGL5CteMNjmCG+uH2nU Yg82kxsFG2W8XuV9H0Hj+OmWtDN5Nj6lUUgEjkhnqYMTn/oi5HrszstaAiCHSXnL nXMvq5g+4fi1HTllyEm2TTG3KWVuzeevnz8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:20 2025 by rpki-client