$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa File: be8b0ba4-4c98-3879-8103-ca1a55408f51.roa (raw, json) Hash identifier: vxOTB+JXaCoEvJLsYe9aFh/fdUPOvO2J1CjNEmoX3rg= Subject key identifier: 96:BF:0B:28:3B:2C:04:B8:15:77:24:D7:E4:7B:29:C0:66:D7:6B:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE196B910C6E51F8D75AF4080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:b9:10:c6:e5:1f:8d:75:af:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=5d3e3597-4df4-4cd3-927a-ddf49ba0acbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:42:f5:d1:e6:8a:1f:bb:ad:96:28:c1:f4: da:b1:e4:f3:9e:d7:39:f0:6a:6f:88:54:86:91:46: b8:c7:0b:9c:1c:a9:01:d7:f2:33:13:68:62:2c:fb: 5d:9a:a8:07:8d:64:0f:f8:fc:d3:c4:87:9a:81:4a: 12:50:22:2f:10:af:78:bc:a3:74:b5:7b:d4:84:ea: 6c:be:58:99:5d:ae:72:54:03:9c:a6:9a:d3:37:5f: 43:5a:ff:50:74:69:d7:0a:c5:3d:4b:ba:05:73:28: 91:17:4e:a3:6d:81:20:2c:9d:65:9d:a6:59:22:ba: 39:4f:f7:01:4e:6d:5a:84:89:8f:af:22:6e:4a:45: d0:e9:29:e0:f3:e8:24:22:dc:1e:ab:09:cb:74:f9: 96:e5:92:c6:a5:0f:63:30:ef:85:13:17:1e:d4:f4: 14:49:f5:9e:03:8f:12:5e:91:ec:a8:b7:5c:ae:2e: a9:17:21:5d:cf:b8:42:85:9f:6b:f9:ce:21:c6:1a: 2e:e7:7b:64:c8:cd:45:76:2e:22:81:a2:dd:30:9e: 22:08:d1:d2:bc:a6:bc:96:53:5e:d7:a8:ce:2e:4c: d0:25:a0:de:8f:e9:c6:59:42:54:2a:57:14:1d:7f: 0f:95:71:e6:e0:a3:3c:1f:de:7a:7d:cf:f8:7d:98: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:0B:28:3B:2C:04:B8:15:77:24:D7:E4:7B:29:C0:66:D7:6B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:45:dc:ea:ff:c5:a4:02:28:04:b4:2e:97:54:38:09:57:39: 7e:6f:94:d0:1f:ef:8d:37:8d:03:a0:1f:ca:ea:69:52:33:34: 64:ba:b5:59:4d:b1:c8:be:31:da:7b:95:dd:6c:57:4c:48:aa: d0:e9:46:32:b9:84:cf:89:88:49:3f:77:be:29:48:39:70:4d: 60:32:a1:76:db:74:c7:47:1d:77:20:cc:87:4e:27:61:8b:a7: 30:e6:9e:d1:be:07:bc:ba:0e:d9:8c:af:72:ba:77:b0:b1:df: c9:e2:bd:19:8d:60:05:b5:6d:8a:e7:e4:4b:73:4f:de:3b:c5: 76:40:63:c7:dd:e5:25:f7:e9:dc:fe:7a:5a:a8:9d:19:ec:25: ea:a4:71:b8:63:a2:89:de:29:0f:63:fe:24:16:47:2e:e3:18: 3b:e6:66:f2:6e:70:5b:e2:a0:1a:0f:25:dd:12:56:6c:53:91: 80:db:16:36:b1:45:8a:6b:45:15:81:62:f3:90:61:e3:e2:99: 01:7d:4e:a7:e7:95:a2:b6:c4:77:40:1f:83:61:3f:e8:99:7f: 67:06:ac:65:17:cf:7b:d1:30:46:cc:29:79:29:6d:14:51:d3: 9e:d2:73:b7:b1:f8:b5:fd:14:51:0c:1f:16:79:7c:bf:e9:a0: 9d:80:aa:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlrkQxuUfjXWvQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NWQzZTM1OTctNGRmNC00Y2QzLTkyN2EtZGRmNDliYTBhY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ5C9dHmih+7rZYowfTaseTzntc58GpviFSG kUa4xwucHKkB1/IzE2hiLPtdmqgHjWQP+PzTxIeagUoSUCIvEK94vKN0tXvUhOps vliZXa5yVAOcpprTN19DWv9QdGnXCsU9S7oFcyiRF06jbYEgLJ1lnaZZIro5T/cB Tm1ahImPryJuSkXQ6Sng8+gkItweqwnLdPmW5ZLGpQ9jMO+FExce1PQUSfWeA48S XpHsqLdcri6pFyFdz7hChZ9r+c4hxhou53tkyM1Fdi4igaLdMJ4iCNHSvKa8llNe 16jOLkzQJaDej+nGWUJUKlcUHX8PlXHm4KM8H956fc/4fZh56QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJa/Cyg7LAS4FXck1+R7KcBm12tWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmU4YjBiYTQtNGM5OC0z ODc5LTgxMDMtY2ExYTU1NDA4ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZF3Or/xaQCKAS0LpdUOAlXOX5vlNAf7403jQOgH8rqaVIzNGS6 tVlNsci+Mdp7ld1sV0xIqtDpRjK5hM+JiEk/d74pSDlwTWAyoXbbdMdHHXcgzIdO J2GLpzDmntG+B7y6DtmMr3K6d7Cx38nivRmNYAW1bYrn5EtzT947xXZAY8fd5SX3 6dz+elqonRnsJeqkcbhjooneKQ9j/iQWRy7jGDvmZvJucFvioBoPJd0SVmxTkYDb FjaxRYprRRWBYvOQYePimQF9TqfnlaK2xHdAH4NhP+iZf2cGrGUXz3vRMEbMKXkp bRRR057Sc7ex+LX9FFEMHxZ5fL/poJ2AqtQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:26:20 2025 by rpki-client