$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa File: a21d70ab-a157-3b94-a224-f34d1ef3955a.roa (raw, json) Hash identifier: LIzSyKFqDq1Cx9hT59fEAzZ2SyLFf/VDNcdwfUXVvRE= Subject key identifier: 67:57:5A:A6:E1:41:B4:FB:01:B6:2A:FB:54:59:B8:A0:04:C7:27:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814633D6653C1E6C1078E980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397207 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:33:d6:65:3c:1e:6c:10:78:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=e47b5d6f-5143-49c6-b517-e96342c572dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ef:ee:3d:50:2a:8b:a8:25:5f:91:0b:f0:b2: 78:e4:89:e9:56:57:ed:e9:24:34:3c:f7:ee:13:5d: af:5c:47:bc:d0:98:97:d8:bd:a4:36:b1:ed:00:62: 82:1d:08:4f:7c:7a:f8:35:ab:d8:01:e4:93:c4:81: 0f:4a:59:a9:62:63:94:8a:1b:4b:87:89:4a:79:06: 32:00:f5:b1:99:05:c6:00:ad:65:ab:1e:53:e8:81: be:79:1e:59:55:8f:20:73:85:bc:d3:85:5c:9d:29: b4:e9:81:be:4e:00:80:03:c5:e2:12:91:9e:29:1c: 06:95:fa:37:9d:ae:6e:72:eb:4d:40:49:83:88:01: bd:0c:8d:74:eb:60:bf:cf:2a:35:3f:10:1a:93:0f: 13:c4:ae:41:e3:32:c7:8a:7f:57:1d:39:32:50:7f: 20:5d:3a:79:13:85:2f:9c:19:6f:55:44:af:eb:d0: 42:f2:68:9b:b7:6c:d2:2b:f2:98:3b:e8:f2:08:d2: ce:1f:87:ac:40:fe:c3:cf:b5:14:1c:0a:4a:28:33: 27:22:fb:20:b2:c1:88:06:8d:33:19:fa:97:8f:dd: ae:6d:33:39:9f:e1:3b:a2:5d:6d:aa:11:d6:d4:5f: 15:21:9c:8d:55:b0:e7:c3:79:5a:9b:f4:2c:9f:3d: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:5A:A6:E1:41:B4:FB:01:B6:2A:FB:54:59:B8:A0:04:C7:27:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9a:31:46:22:0d:6d:7c:68:46:7c:6e:4b:38:07:64:e3:c4: 30:c0:66:45:90:ce:e6:01:dc:4f:c1:e8:0d:eb:c7:6a:b8:95: ef:26:df:4b:1e:c6:8b:73:f2:15:26:a4:64:0f:5f:c4:8f:fd: a0:c7:c7:97:58:fe:5d:30:86:f3:7c:ff:a6:22:28:25:8b:53: be:1b:ce:2f:74:36:91:80:59:d5:25:1d:3c:19:9f:d3:bd:bb: fb:ca:1d:5c:3a:8b:3f:be:1f:b2:e2:25:08:73:b1:8c:9a:7b: ab:43:0e:71:35:9a:66:c1:11:36:cf:6b:1b:a6:d5:ae:44:f9: 62:2c:2f:51:27:07:5a:2f:04:ce:7e:e1:90:b3:40:bd:f8:de: ee:c8:c7:6c:5a:ff:6e:2d:18:53:ec:b8:ed:34:2b:40:bd:a6: e3:28:a5:91:46:ed:ed:2c:a3:7e:fc:0f:dc:30:d7:4e:8d:65: c8:ce:f1:b5:d9:cb:22:1a:0e:36:dd:4f:04:1e:fd:5d:bd:c2: 1a:60:79:fb:79:cb:04:ff:00:c5:a5:7c:94:09:bb:c4:1f:d4: ee:b9:83:72:ba:a1:60:6b:46:61:6e:54:d7:d2:00:f7:ab:14: b8:ef:61:fc:cf:0d:31:de:45:9e:90:54:03:ff:ab:06:7b:93: d7:85:84:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjPWZTwebBB46YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTQ3YjVkNmYtNTE0My00OWM2LWI1MTctZTk2MzQyYzU3MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu/uPVAqi6glX5EL8LJ45InpVlft6SQ0PPfu E12vXEe80JiX2L2kNrHtAGKCHQhPfHr4NavYAeSTxIEPSlmpYmOUihtLh4lKeQYy APWxmQXGAK1lqx5T6IG+eR5ZVY8gc4W804VcnSm06YG+TgCAA8XiEpGeKRwGlfo3 na5ucutNQEmDiAG9DI1062C/zyo1PxAakw8TxK5B4zLHin9XHTkyUH8gXTp5E4Uv nBlvVUSv69BC8mibt2zSK/KYO+jyCNLOH4esQP7Dz7UUHApKKDMnIvsgssGIBo0z GfqXj92ubTM5n+E7ol1tqhHW1F8VIZyNVbDnw3lam/Qsnz1pxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGdXWqbhQbT7AbYq+1RZuKAExye9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIxZDcwYWItYTE1Ny0z Yjk0LWEyMjQtZjM0ZDFlZjM5NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCaMUYiDW18aEZ8bks4B2TjxDDAZkWQzuYB3E/B6A3rx2q4le8m 30sexotz8hUmpGQPX8SP/aDHx5dY/l0whvN8/6YiKCWLU74bzi90NpGAWdUlHTwZ n9O9u/vKHVw6iz++H7LiJQhzsYyae6tDDnE1mmbBETbPaxum1a5E+WIsL1EnB1ov BM5+4ZCzQL343u7Ix2xa/24tGFPsuO00K0C9puMopZFG7e0so378D9ww106NZcjO 8bXZyyIaDjbdTwQe/V29whpgeft5ywT/AMWlfJQJu8Qf1O65g3K6oWBrRmFuVNfS APerFLjvYfzPDTHeRZ6QVAP/qwZ7k9eFhJU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:45 2025 by rpki-client