$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa File: a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa (raw, json) Hash identifier: Dy4UK6mB6BKhTWZGJtrKrc20THHfhZJUsQ9iZSVcz48= Subject key identifier: 84:48:B2:34:6A:C6:EF:8D:F3:7D:4B:D1:B2:9C:A5:D3:B0:E8:B2:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146350E170C02D7F913A000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396563 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:0e:17:0c:02:d7:f9:13:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=9c1efc9d-5d98-4d28-8ad1-08f9966b4695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:36:1b:39:e9:30:58:a7:5c:f8:9a:f5:3e: 3d:04:11:77:71:61:02:56:d2:9f:a9:cb:49:94:b1: bd:22:20:03:5f:24:2c:ae:49:6c:ff:7c:c4:eb:e7: 76:7c:74:7d:69:25:cf:25:ee:29:1f:5d:70:54:6c: 3d:ca:ab:48:12:2f:56:f3:f8:6b:21:68:3a:85:ac: 39:34:45:51:fc:b9:b3:1f:08:36:12:d4:ee:ee:f0: be:ac:5a:0b:b1:62:82:a4:1e:e2:b4:36:05:cf:80: 9c:64:f6:5c:c9:54:83:50:aa:c1:cf:55:15:16:2a: d9:c7:fd:99:7c:6e:cc:9d:47:66:e1:21:07:1b:f8: cd:92:53:f0:fa:4c:3b:02:bc:88:70:9a:96:09:b9: d1:d9:49:d7:89:a6:8a:d7:b7:21:e8:83:a0:6d:38: 84:2d:b4:c4:c6:53:47:c9:43:aa:c8:e1:4a:62:d9: f7:40:85:ff:df:27:9b:96:0a:ed:78:9e:26:f4:26: be:92:c3:2d:ec:8e:11:4d:12:1e:f9:79:f8:ef:e4: 6a:b2:95:26:33:c9:c0:a9:a4:43:75:30:a5:87:d7: b7:6b:84:1a:5a:b0:e3:12:57:36:b7:e4:3f:b2:0b: d9:07:d1:1d:e1:ca:e6:f7:dd:36:3d:7d:14:e3:08: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:48:B2:34:6A:C6:EF:8D:F3:7D:4B:D1:B2:9C:A5:D3:B0:E8:B2:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a1:92:81:5b:6e:ac:ca:35:44:49:22:b3:8f:8b:27:dc:e8: e3:e2:41:39:9e:15:a4:6d:79:6a:e5:2d:03:6c:34:88:83:76: 4a:be:d3:d3:31:8c:dd:51:14:cb:aa:1a:97:d7:66:bb:72:7e: ce:e4:f3:2c:06:0c:52:4f:bc:6a:05:c8:fd:15:92:c7:ac:55: 06:11:e7:b5:f0:9e:b2:45:05:25:7d:e1:07:de:33:f3:ea:8f: ee:b5:99:6e:8a:e4:50:28:e3:14:f1:83:1a:35:92:c8:41:00: 6a:66:5c:56:d5:5d:4e:8d:17:1d:a8:13:db:86:54:d4:b1:33: 2d:9a:ec:06:9e:7e:07:1c:1e:18:89:1b:7c:33:08:51:a2:4b: 39:36:21:dd:a6:a1:99:77:29:74:a2:44:00:5c:26:72:40:2f: e0:c6:da:2b:9e:1b:0d:69:b0:8c:74:45:d1:98:c7:4e:82:4e: 1e:b0:1b:33:60:3c:aa:bd:d9:1c:2d:7c:ef:f6:c5:7b:e8:e8: c4:fa:a1:57:6a:02:2c:06:e8:17:c6:aa:44:db:de:e3:e1:4c: 93:14:72:de:3a:f3:ca:ba:75:d6:9c:3e:cd:22:2c:ad:90:99: 54:2b:82:b8:c6:7c:0c:59:86:1f:66:5b:d6:d8:9f:20:23:3c: 82:94:80:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjUOFwwC1/kToAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OWMxZWZjOWQtNWQ5OC00ZDI4LThhZDEtMDhmOTk2NmI0Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmc2GznpMFinXPia9T49BBF3cWECVtKfqctJ lLG9IiADXyQsrkls/3zE6+d2fHR9aSXPJe4pH11wVGw9yqtIEi9W8/hrIWg6haw5 NEVR/LmzHwg2EtTu7vC+rFoLsWKCpB7itDYFz4CcZPZcyVSDUKrBz1UVFirZx/2Z fG7MnUdm4SEHG/jNklPw+kw7AryIcJqWCbnR2UnXiaaK17ch6IOgbTiELbTExlNH yUOqyOFKYtn3QIX/3yeblgrteJ4m9Ca+ksMt7I4RTRIe+Xn47+RqspUmM8nAqaRD dTClh9e3a4QaWrDjElc2t+Q/sgvZB9Ed4crm9902PX0U4wjFawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIRIsjRqxu+N831L0bKcpdOw6LIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ4YTI5ZmYtMDdkYy0z NjczLWFkMTQtZjFkY2NlYTRkMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOhkoFbbqzKNURJIrOPiyfc6OPiQTmeFaRteWrlLQNsNIiDdkq+ 09MxjN1RFMuqGpfXZrtyfs7k8ywGDFJPvGoFyP0VksesVQYR57XwnrJFBSV94Qfe M/Pqj+61mW6K5FAo4xTxgxo1kshBAGpmXFbVXU6NFx2oE9uGVNSxMy2a7Aaefgcc HhiJG3wzCFGiSzk2Id2moZl3KXSiRABcJnJAL+DG2iueGw1psIx0RdGYx06CTh6w GzNgPKq92RwtfO/2xXvo6MT6oVdqAiwG6BfGqkTb3uPhTJMUct4688q6ddacPs0i LK2QmVQrgrjGfAxZhh9mW9bYnyAjPIKUgL4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:43 2025 by rpki-client