$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa File: bf7da230-50ad-3769-8c60-561c844420a1.roa (raw, json) Hash identifier: 2gKp/k/Wfz24yVWmhoJD2CCNcAgFAYNQJ/oLTO11uSM= Subject key identifier: 5B:5F:0E:DF:F3:5D:F0:D5:99:5D:B9:9B:3F:59:8E:21:48:E6:CC:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1585DE01E564396B7AEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396591 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:5d:e0:1e:56:43:96:b7:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=f5289420-9d47-4971-ad06-1b20b2de82aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ed:f4:ff:7a:38:8d:3e:5b:05:b6:12:85:0c: 10:65:ac:d9:3e:92:87:ed:b4:f0:56:fa:2a:80:3e: 96:52:43:56:48:ae:c2:2e:6f:df:4b:3a:85:40:3a: fc:2e:5f:ff:71:1e:77:ec:13:20:a3:0d:38:bc:ae: 57:31:04:96:e8:87:a3:ff:ef:c8:c1:12:0b:48:49: 22:b7:65:dc:be:e7:17:37:91:c4:b7:94:d3:a8:fb: a5:78:05:c6:e7:02:30:be:36:3d:14:dc:ff:7e:2d: fe:09:18:be:76:e2:b2:34:78:bb:e4:56:a0:f5:ee: 0c:5e:b0:d2:19:64:81:e5:12:ab:f5:c5:6b:f6:77: 35:fd:d7:ee:50:31:8b:ec:7f:67:b3:91:b3:94:a0: 5b:2b:c1:a6:da:11:03:b7:c7:d5:b6:6a:a2:4c:2b: 5c:d9:49:45:80:06:2b:57:cf:d7:3e:c6:db:b9:df: 07:13:46:0e:b5:46:cb:37:8b:6f:4f:63:4b:fb:d6: c5:bd:28:4f:fc:fe:84:1e:7b:58:f5:30:5c:22:8b: 16:90:2e:01:a1:e4:ec:44:3b:06:6f:25:27:80:96: a4:c5:9f:34:c4:f4:99:65:84:67:2e:56:ce:f3:c0: e0:eb:e1:63:9c:f1:a9:23:e8:56:83:4c:47:58:47: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5F:0E:DF:F3:5D:F0:D5:99:5D:B9:9B:3F:59:8E:21:48:E6:CC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e5:56:bb:d0:9f:f0:31:f5:5a:65:ca:52:68:ae:c9:ae:4f: 40:ee:4e:1d:07:7e:2f:53:f5:c4:2b:47:b2:91:7c:d8:e1:56: 38:80:76:14:bd:4b:39:7e:a4:ea:fd:4d:63:61:96:29:d4:b8: 11:1e:09:3f:18:ed:fc:e8:9b:ba:9f:59:df:4e:c7:b4:bd:87: 9e:44:02:87:5e:82:08:ff:3f:98:9e:d8:5d:d3:f7:f8:01:83: 02:5d:92:2b:fc:6a:28:e5:80:20:72:1e:33:da:35:5e:2b:69: e4:f9:77:3b:0c:19:2e:30:9a:4e:ff:73:c5:2f:11:c2:93:b2: 30:10:f5:03:61:75:1f:78:4e:8c:66:6c:b8:fc:7d:84:7c:1f: 72:04:0a:e8:a5:f2:37:9b:51:d0:81:26:cb:84:5e:c6:e2:56: c1:e4:a4:80:2f:ae:65:50:ff:06:1f:7c:90:80:c1:cc:b0:3b: 89:6d:ba:9a:2c:eb:5d:8f:c5:ce:d1:b4:d1:f2:ca:9f:ed:91: e9:1f:b4:66:fd:14:2d:44:d9:2e:8b:97:28:3a:6e:8a:0f:86: a6:98:ba:ff:69:61:cf:88:d1:45:bb:86:cf:e7:17:f2:c1:da: 3c:b0:c1:d3:37:1e:52:00:d9:dd:98:43:63:ab:16:35:4d:33: 7b:bd:7e:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8Vhd4B5WQ5a3rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjUyODk0MjAtOWQ0Ny00OTcxLWFkMDYtMWIyMGIyZGU4MmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu30/3o4jT5bBbYShQwQZazZPpKH7bTwVvoq gD6WUkNWSK7CLm/fSzqFQDr8Ll//cR537BMgow04vK5XMQSW6Iej/+/IwRILSEki t2XcvucXN5HEt5TTqPuleAXG5wIwvjY9FNz/fi3+CRi+duKyNHi75Fag9e4MXrDS GWSB5RKr9cVr9nc1/dfuUDGL7H9ns5GzlKBbK8Gm2hEDt8fVtmqiTCtc2UlFgAYr V8/XPsbbud8HE0YOtUbLN4tvT2NL+9bFvShP/P6EHntY9TBcIosWkC4BoeTsRDsG byUngJakxZ80xPSZZYRnLlbO88Dg6+FjnPGpI+hWg0xHWEdKOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFtfDt/zXfDVmV25mz9ZjiFI5sxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY3ZGEyMzAtNTBhZC0z NzY5LThjNjAtNTYxYzg0NDQyMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXlVrvQn/Ax9VplylJorsmuT0DuTh0Hfi9T9cQrR7KRfNjhVjiA dhS9Szl+pOr9TWNhlinUuBEeCT8Y7fzom7qfWd9Ox7S9h55EAodeggj/P5ie2F3T 9/gBgwJdkiv8aijlgCByHjPaNV4raeT5dzsMGS4wmk7/c8UvEcKTsjAQ9QNhdR94 ToxmbLj8fYR8H3IECuil8jebUdCBJsuEXsbiVsHkpIAvrmVQ/wYffJCAwcywO4lt upos612Pxc7RtNHyyp/tkekftGb9FC1E2S6Llyg6booPhqaYuv9pYc+I0UW7hs/n F/LB2jywwdM3HlIA2d2YQ2OrFjVNM3u9fhM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:18 2025 by rpki-client