$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c51551f8-b372-3f5f-81a2-83cfd5f4550e.roa File: c51551f8-b372-3f5f-81a2-83cfd5f4550e.roa (raw, json) Hash identifier: lEhfMlsvoNfSO3zP3uuiTgvMMoKeOFSFIMrn1AM9kas= Subject key identifier: A8:05:FE:F3:42:ED:19:60:55:37:DB:F4:11:3B:72:2E:D2:28:E0:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1590F1F0DDE651B1C32C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c51551f8-b372-3f5f-81a2-83cfd5f4550e.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396563 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:0f:1f:0d:de:65:1b:1c:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ddcccff7-39ad-45e0-a30c-9df42b39dd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:30:e9:af:30:74:d8:e4:f5:b5:9c:4d:30: 91:71:e8:31:5d:a5:37:fe:d0:8e:15:79:f1:cd:66: 08:17:0f:91:79:9e:72:58:80:eb:a6:d8:2e:ba:26: be:a4:28:13:4a:a9:26:17:39:86:77:23:05:d0:7f: aa:de:47:26:95:bd:62:dd:8e:2a:02:34:78:89:a6: a3:ce:01:ef:37:b7:1d:bf:09:fb:28:50:51:3e:3a: 9e:1b:10:27:63:92:ec:c5:96:13:30:58:78:ca:eb: ca:dd:8e:55:ef:a1:e8:59:65:f6:e3:eb:a5:60:6b: 77:4b:e3:4b:02:d6:fc:67:95:c9:00:72:6d:a2:64: 0b:36:21:e2:24:1a:2b:ce:c2:30:17:24:f8:97:06: 3a:3b:6f:f1:24:28:09:85:16:b0:ed:3a:aa:33:f3: 5e:74:8c:03:7e:52:4d:15:87:f7:49:c7:06:77:1f: 1c:86:c6:cf:c0:e1:f1:fe:ee:ce:bb:da:a1:bf:49: 22:ce:80:5a:4c:62:dd:e3:88:ac:94:5b:a3:9b:3b: 12:f1:85:87:d4:50:41:c6:ae:10:e9:db:26:ac:6a: 18:a5:38:5b:10:7d:bc:38:27:24:6a:fc:ff:9f:0a: b4:c2:53:e5:12:e4:4f:4e:af:27:77:ea:62:fc:6f: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:05:FE:F3:42:ED:19:60:55:37:DB:F4:11:3B:72:2E:D2:28:E0:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c51551f8-b372-3f5f-81a2-83cfd5f4550e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7c:2c:72:b5:01:e2:0a:0b:a4:74:f6:5b:ab:4e:be:d8:0a: 5b:7f:da:bb:ce:30:99:69:4f:02:b2:71:f0:c5:cb:9f:75:96: f7:f7:e2:c4:48:82:c6:f1:31:c1:e6:6a:fc:85:aa:78:a1:2a: 36:15:15:f1:67:ef:71:02:07:0c:a4:d7:36:43:35:18:60:81: 46:0f:07:77:29:79:cc:52:38:5d:2c:c2:f2:2b:a1:eb:bb:01: 02:96:36:58:e7:d0:a8:52:d0:2d:50:13:da:61:d7:34:64:a9: 30:59:33:ba:3f:a4:2d:a3:69:7b:e6:26:3e:eb:d4:71:92:a9: 12:49:69:4b:a0:59:5b:ef:04:f1:11:77:87:c8:78:ca:11:10: 6f:51:6b:c9:3e:46:05:fb:2f:f8:66:5c:04:c0:b1:c7:62:97: 02:77:24:32:8a:da:76:88:28:94:66:4a:6e:dc:19:0a:34:ea: 29:cc:ad:a8:e1:c3:2c:06:12:93:d9:52:5c:e6:9e:d1:f7:22: 3a:a1:62:b5:f5:10:be:da:73:00:46:f8:87:25:63:b1:4c:75: 7b:91:95:8f:d9:b1:5c:8b:92:51:79:b1:39:1c:37:45:60:66: f2:30:d4:f4:52:1f:97:1c:fb:6b:53:1a:3f:6c:dc:2a:ad:48: 5a:99:6c:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VkPHw3eZRscMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGRjY2NmZjctMzlhZC00NWUwLWEzMGMtOWRmNDJiMzlkZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidEw6a8wdNjk9bWcTTCRcegxXaU3/tCOFXnx zWYIFw+ReZ5yWIDrptguuia+pCgTSqkmFzmGdyMF0H+q3kcmlb1i3Y4qAjR4iaaj zgHvN7cdvwn7KFBRPjqeGxAnY5LsxZYTMFh4yuvK3Y5V76HoWWX24+ulYGt3S+NL Atb8Z5XJAHJtomQLNiHiJBorzsIwFyT4lwY6O2/xJCgJhRaw7TqqM/NedIwDflJN FYf3SccGdx8chsbPwOHx/u7Ou9qhv0kizoBaTGLd44islFujmzsS8YWH1FBBxq4Q 6dsmrGoYpThbEH28OCckavz/nwq0wlPlEuRPTq8nd+pi/G/jOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKgF/vNC7RlgVTfb9BE7ci7SKOCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzUxNTUxZjgtYjM3Mi0z ZjVmLTgxYTItODNjZmQ1ZjQ1NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACN8LHK1AeIKC6R09lurTr7YClt/2rvOMJlpTwKycfDFy591lvf3 4sRIgsbxMcHmavyFqnihKjYVFfFn73ECBwyk1zZDNRhggUYPB3cpecxSOF0swvIr oeu7AQKWNljn0KhS0C1QE9ph1zRkqTBZM7o/pC2jaXvmJj7r1HGSqRJJaUugWVvv BPERd4fIeMoREG9Ra8k+RgX7L/hmXATAscdilwJ3JDKK2naIKJRmSm7cGQo06inM rajhwywGEpPZUlzmntH3IjqhYrX1EL7acwBG+IclY7FMdXuRlY/ZsVyLklF5sTkc N0VgZvIw1PRSH5cc+2tTGj9s3CqtSFqZbHc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:56:11 2025 by rpki-client