$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e48b3209-fc22-3121-be19-d255ac8aff49.roa File: e48b3209-fc22-3121-be19-d255ac8aff49.roa (raw, json) Hash identifier: Ai94wiCIS7XMtv2Uv1uLleVhtIUrWuVauyNXn5KUNYE= Subject key identifier: 09:B5:8A:85:9E:4F:29:47:B1:7A:2B:50:6F:E9:FC:F2:7E:9D:D7:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F48DCA9A6752D3FBF680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e48b3209-fc22-3121-be19-d255ac8aff49.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397209 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f4:8d:ca:9a:67:52:d3:fb:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=b5d9727d-6d46-42f2-9cad-bf4d04937ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:bf:30:ff:0a:5f:85:7f:71:b8:d8:bb:21: 0b:87:bf:8d:ac:48:17:f0:64:ae:85:b8:e6:22:b2: 08:05:8d:1d:2e:d7:af:1c:a9:70:77:fd:44:47:41: 35:c3:b8:df:b8:46:99:0e:65:2d:4d:89:d1:4d:a9: 08:51:c9:db:c6:6f:f8:ab:c9:74:75:60:94:37:0c: 8b:81:35:68:b5:06:02:a0:db:7d:80:c3:cb:6a:67: 37:7c:8f:57:ba:8f:db:8c:09:61:c6:61:72:77:1e: 30:b7:60:fc:03:05:0d:af:6f:51:93:bc:b8:77:e8: 67:80:ea:2f:c7:a4:82:52:f6:79:1c:1d:2b:a8:2a: 8a:6b:2a:40:98:23:ae:fc:33:66:2d:f7:71:ff:67: 44:c4:ed:26:cc:06:df:b1:26:02:55:06:65:37:2a: 37:6a:4b:36:25:cd:e6:72:ef:fc:55:55:7b:c4:c8: 60:23:5c:e1:23:85:50:c1:c3:2a:ab:10:73:a7:95: c0:0f:0f:80:b8:70:11:d4:35:f7:32:fb:ff:b8:88: 58:e8:54:0f:e3:6b:b6:b1:ce:e2:82:e1:58:4b:d4: dc:94:88:45:8f:7d:48:24:47:e1:1a:08:0b:88:bb: 3e:b1:41:da:ef:5a:f9:5f:e1:dd:74:fa:76:49:f7: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B5:8A:85:9E:4F:29:47:B1:7A:2B:50:6F:E9:FC:F2:7E:9D:D7:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e48b3209-fc22-3121-be19-d255ac8aff49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:41:1e:6d:ef:00:76:a6:db:33:1c:73:bc:3c:f1:06:96:fb: 28:53:4d:e4:b8:ea:56:29:bf:c3:d2:e9:fd:54:2d:12:a5:b2: 70:36:87:31:ea:79:ea:e9:34:ac:5a:3e:db:b0:90:70:4d:1b: 77:a0:b4:ed:ff:4b:1d:0c:c7:6a:70:db:84:f9:9b:75:10:5a: 30:e5:92:69:f0:bb:01:a6:37:0c:f0:2e:ce:55:9b:95:65:fd: 61:98:20:49:1d:e6:29:02:31:70:e6:1a:c5:a2:2e:e0:1b:fc: 02:21:1a:1b:aa:af:92:10:89:65:34:63:0f:b9:15:c6:fb:f3: df:2d:51:e9:64:9e:17:70:95:81:92:39:85:be:17:71:a1:21: 8b:5e:79:64:b4:13:4d:a1:74:08:0d:44:6f:62:d7:8f:8b:0f: 52:43:67:d2:29:10:ff:1c:31:97:5d:a8:55:de:c5:97:c8:ef: ae:f0:66:43:af:e5:70:c7:41:16:94:03:f7:0b:31:58:e4:4c: f7:75:b6:35:9a:85:5e:24:21:ce:a7:97:75:70:30:2c:6c:62: ee:e7:32:4e:2e:37:de:51:9b:84:28:9a:63:dc:55:54:42:98: ea:d6:d1:77:9c:d7:c3:a4:ec:56:fe:00:fd:1d:1e:d8:49:ec: 63:3c:38:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfSNyppnUtP79oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YjVkOTcyN2QtNmQ0Ni00MmYyLTljYWQtYmY0ZDA0OTM3ZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUG/MP8KX4V/cbjYuyELh7+NrEgX8GSuhbjm IrIIBY0dLtevHKlwd/1ER0E1w7jfuEaZDmUtTYnRTakIUcnbxm/4q8l0dWCUNwyL gTVotQYCoNt9gMPLamc3fI9Xuo/bjAlhxmFydx4wt2D8AwUNr29Rk7y4d+hngOov x6SCUvZ5HB0rqCqKaypAmCOu/DNmLfdx/2dExO0mzAbfsSYCVQZlNyo3aks2Jc3m cu/8VVV7xMhgI1zhI4VQwcMqqxBzp5XADw+AuHAR1DX3Mvv/uIhY6FQP42u2sc7i guFYS9TclIhFj31IJEfhGggLiLs+sUHa71r5X+HddPp2SfdiNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAm1ioWeTylHsXorUG/p/PJ+ndcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQ4YjMyMDktZmMyMi0z MTIxLWJlMTktZDI1NWFjOGFmZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARBHm3vAHam2zMcc7w88QaW+yhTTeS46lYpv8PS6f1ULRKlsnA2 hzHqeerpNKxaPtuwkHBNG3egtO3/Sx0Mx2pw24T5m3UQWjDlkmnwuwGmNwzwLs5V m5Vl/WGYIEkd5ikCMXDmGsWiLuAb/AIhGhuqr5IQiWU0Yw+5Fcb7898tUelknhdw lYGSOYW+F3GhIYteeWS0E02hdAgNRG9i14+LD1JDZ9IpEP8cMZddqFXexZfI767w ZkOv5XDHQRaUA/cLMVjkTPd1tjWahV4kIc6nl3VwMCxsYu7nMk4uN95Rm4QommPc VVRCmOrW0Xec18Ok7Fb+AP0dHthJ7GM8ODg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:18 2025 by rpki-client