$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa File: 21a4ea39-0e65-3c46-9645-6a40d2e40110.roa (raw, json) Hash identifier: Bw7uOoOpokt2FEk95Qv2+ETnfoXupp9cy6vbVXjCV1Q= Subject key identifier: 74:ED:87:40:61:31:91:F0:37:EA:9D:9D:DE:C7:B9:41:15:CC:F8:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814631B47DAC8479497E8C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397203 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:31:b4:7d:ac:84:79:49:7e:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=068a4d09-4bca-4385-ae27-eb8bcc4af456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:2d:46:cc:18:76:90:87:09:b8:63:57:5b: 42:a0:b8:8b:d2:0b:c6:93:99:c6:26:b4:be:e8:c3: c7:bf:97:42:e4:c8:7f:c6:43:ad:81:d1:bc:57:0a: 64:3e:47:97:b5:da:b9:27:18:86:fb:93:53:13:46: 16:c4:31:91:71:ef:ef:54:ef:81:61:77:e6:20:09: 86:f9:26:89:c5:c1:8f:2e:83:df:5a:df:8f:03:f4: 3f:f9:5b:69:51:ba:cb:8c:f1:89:08:c4:30:c5:9b: 60:61:73:06:9d:c9:84:11:c2:fa:7a:f0:f3:d2:bf: f3:0b:47:aa:31:b2:9c:67:b1:7d:7b:f6:2a:fd:c7: a1:10:20:21:06:65:71:76:66:ed:33:c9:8e:d4:85: a0:f2:e9:65:49:19:61:b1:1a:89:cb:fb:58:8d:73: 26:41:d6:d0:e3:95:dc:cd:d8:dd:81:da:b3:79:43: ef:fc:d8:1e:19:ec:a0:9a:fc:a6:3c:c6:f1:78:92: 1d:43:74:71:fa:19:b6:21:c9:3c:70:1d:a5:06:df: 66:15:ca:f4:fe:0d:4c:2c:61:cf:bf:01:55:07:d1: 06:21:d4:b6:2c:ca:67:59:aa:e2:0c:80:19:56:64: 90:8f:9b:61:31:ac:ce:84:09:55:8e:27:9d:99:77: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:ED:87:40:61:31:91:F0:37:EA:9D:9D:DE:C7:B9:41:15:CC:F8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:96:da:c8:77:cf:ef:c4:33:8d:f0:65:62:a3:77:aa:80:6a: 47:4f:d3:c9:c5:ab:45:65:9c:dc:f5:dd:5d:c3:3a:94:c4:d9: 47:fa:65:d6:b8:14:b1:ff:d0:ff:59:4c:84:c5:1e:46:d6:c6: 0f:96:7e:9b:bb:c4:b3:b5:95:b0:40:df:94:78:0d:2b:88:2f: 50:21:42:34:0f:f3:3d:b4:6a:43:3c:8a:9a:9e:90:c5:29:3c: 87:ce:de:e9:00:bc:2c:18:af:31:27:57:0f:9a:e3:7c:7c:66: be:73:0f:42:f3:55:f7:ea:d0:bd:e8:47:bc:5e:a9:e2:df:11: df:03:67:8b:f0:44:25:f3:7d:60:20:6e:b2:fe:13:4d:34:22: 31:4d:27:c4:57:12:60:e1:19:46:38:6d:04:30:1e:e3:a6:fc: 18:80:d9:65:4e:f3:42:44:e1:44:0d:c5:2a:d7:a4:cf:09:55: 7d:4a:38:b7:3f:80:ae:dd:d6:a8:aa:4b:7e:ba:59:45:ea:8a: 6b:06:92:e1:88:f6:30:a9:3b:43:40:3e:0a:87:96:ba:e3:57: 17:25:fb:f4:9f:45:a7:ee:09:9d:fa:e5:b8:39:e3:ce:f1:59: 81:2f:69:a7:bf:33:f8:f9:de:c7:65:0e:5c:4e:c0:39:e0:7f: c7:e0:50:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjG0fayEeUl+jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MDY4YTRkMDktNGJjYS00Mzg1LWFlMjctZWI4YmNjNGFmNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2EtRswYdpCHCbhjV1tCoLiL0gvGk5nGJrS+ 6MPHv5dC5Mh/xkOtgdG8VwpkPkeXtdq5JxiG+5NTE0YWxDGRce/vVO+BYXfmIAmG +SaJxcGPLoPfWt+PA/Q/+VtpUbrLjPGJCMQwxZtgYXMGncmEEcL6evDz0r/zC0eq MbKcZ7F9e/Yq/cehECAhBmVxdmbtM8mO1IWg8ullSRlhsRqJy/tYjXMmQdbQ45Xc zdjdgdqzeUPv/NgeGeygmvymPMbxeJIdQ3Rx+hm2Ick8cB2lBt9mFcr0/g1MLGHP vwFVB9EGIdS2LMpnWariDIAZVmSQj5thMazOhAlVjiedmXfziwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHTth0BhMZHwN+qdnd7HuUEVzPgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFhNGVhMzktMGU2NS0z YzQ2LTk2NDUtNmE0MGQyZTQwMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGW2sh3z+/EM43wZWKjd6qAakdP08nFq0VlnNz13V3DOpTE2Uf6 Zda4FLH/0P9ZTITFHkbWxg+Wfpu7xLO1lbBA35R4DSuIL1AhQjQP8z20akM8ipqe kMUpPIfO3ukAvCwYrzEnVw+a43x8Zr5zD0LzVffq0L3oR7xeqeLfEd8DZ4vwRCXz fWAgbrL+E000IjFNJ8RXEmDhGUY4bQQwHuOm/BiA2WVO80JE4UQNxSrXpM8JVX1K OLc/gK7d1qiqS366WUXqimsGkuGI9jCpO0NAPgqHlrrjVxcl+/SfRafuCZ365bg5 487xWYEvaae/M/j53sdlDlxOwDngf8fgUJ0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:54 2025 by rpki-client