$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa File: 158f952f-8b95-3141-87e9-41026ec3bc42.roa (raw, json) Hash identifier: dbkrDfgMSQ6kTKfBoOMT72JTaXtQCLOgcGrGlIiR+Yw= Subject key identifier: 01:1D:5D:A3:D5:24:06:3B:C3:B3:31:0B:AC:6B:F8:42:9B:2A:45:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1586D0BBB6B92E8E6D580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 397201 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:6d:0b:bb:6b:92:e8:e6:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=51c32ab3-4ddd-46b9-9bc6-168627919a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:2e:35:35:c7:fe:1c:dd:28:7a:07:72:ce: 7f:d2:f0:a5:d8:e6:df:bf:3e:0c:1a:72:6d:a2:a5: 57:3c:f2:66:bd:0c:2c:e6:3b:98:02:5f:18:c3:c5: e8:a2:32:28:6d:30:5c:77:41:12:da:28:2d:db:99: bc:13:8a:40:74:04:98:c2:d5:46:f9:90:06:16:34: e6:08:c2:2e:eb:22:04:18:bd:7a:47:f8:a6:e0:ec: 8f:06:cf:e0:76:d2:ea:e9:8f:17:b3:cc:28:8f:8e: fc:e7:3a:d0:74:f4:f3:ce:4d:04:f3:0a:3b:f1:cc: 05:da:d5:1f:e9:6c:b0:89:89:8e:a4:b0:bc:20:98: 1f:1a:63:d6:37:a9:33:40:0c:48:6a:e1:2d:14:78: 77:33:52:83:cf:1b:de:12:6b:16:dd:4a:ab:b3:4e: 24:38:d7:fd:82:c3:23:b6:f6:1c:53:52:49:0d:0f: bf:bd:f0:17:98:c5:e8:8c:e2:d2:64:66:ce:fd:25: 59:49:8b:8b:a9:f1:c1:32:a6:67:3c:00:0c:37:1a: 69:22:50:0f:74:78:c0:e1:3d:8e:e1:bf:f2:1a:6c: cc:15:d7:1d:05:ae:8b:47:a4:32:d4:95:bb:6b:bc: b0:cb:b5:8f:10:66:22:c6:b9:d0:fa:01:aa:94:5f: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1D:5D:A3:D5:24:06:3B:C3:B3:31:0B:AC:6B:F8:42:9B:2A:45:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:84:1b:5d:ac:51:79:3b:90:de:c9:4d:02:96:d0:f9:f4:af: ff:26:e3:72:1d:9b:f7:be:e1:6a:21:eb:51:c0:81:93:af:e2: 0c:88:a4:64:6c:c2:7b:c8:c3:a0:ce:3e:4c:ee:25:19:a0:c0: bc:b1:e3:20:8e:69:6e:cb:7c:99:fb:77:9c:75:e4:28:d7:a7: 05:7a:46:21:ce:31:3c:ac:3e:cb:ba:8c:1c:6a:f7:b5:84:4e: 92:6e:13:4c:fa:cf:d3:e9:87:35:05:58:85:e8:4b:88:2e:e4: 65:f9:0a:10:e5:0a:0b:a2:27:12:02:02:4b:26:76:ed:92:e1: bc:d7:b9:ce:02:a5:06:66:77:87:61:60:9f:f3:9a:39:89:cb: 18:9c:8c:f8:ab:26:79:9b:b9:65:e1:85:25:c6:4f:a1:2f:8a: b4:ea:70:d7:23:92:ac:83:6e:c6:e6:ca:ac:d0:73:06:8d:f5: 70:a8:39:79:a8:90:0f:11:06:da:6b:35:33:66:da:6a:bb:31: c3:61:49:9e:d1:e1:30:1b:71:4f:82:a0:7d:82:b7:bf:4d:d3: b7:32:21:de:21:cf:8d:ea:c0:5c:f0:8a:d7:30:8f:53:a6:ee: 58:9a:52:1c:aa:4c:40:1e:f0:1c:5a:da:5c:fd:1a:02:2e:dd: 48:02:b1:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VhtC7trkujm1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTFjMzJhYjMtNGRkZC00NmI5LTliYzYtMTY4NjI3OTE5YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAresuNTXH/hzdKHoHcs5/0vCl2Obfvz4MGnJt oqVXPPJmvQws5juYAl8Yw8XoojIobTBcd0ES2igt25m8E4pAdASYwtVG+ZAGFjTm CMIu6yIEGL16R/im4OyPBs/gdtLq6Y8Xs8woj4785zrQdPTzzk0E8wo78cwF2tUf 6WywiYmOpLC8IJgfGmPWN6kzQAxIauEtFHh3M1KDzxveEmsW3Uqrs04kONf9gsMj tvYcU1JJDQ+/vfAXmMXojOLSZGbO/SVZSYuLqfHBMqZnPAAMNxppIlAPdHjA4T2O 4b/yGmzMFdcdBa6LR6Qy1JW7a7ywy7WPEGYixrnQ+gGqlF/SVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEdXaPVJAY7w7MxC6xr+EKbKkVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU4Zjk1MmYtOGI5NS0z MTQxLTg3ZTktNDEwMjZlYzNiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAByEG12sUXk7kN7JTQKW0Pn0r/8m43Idm/e+4Woh61HAgZOv4gyI pGRswnvIw6DOPkzuJRmgwLyx4yCOaW7LfJn7d5x15CjXpwV6RiHOMTysPsu6jBxq 97WETpJuE0z6z9PphzUFWIXoS4gu5GX5ChDlCguiJxICAksmdu2S4bzXuc4CpQZm d4dhYJ/zmjmJyxicjPirJnmbuWXhhSXGT6EvirTqcNcjkqyDbsbmyqzQcwaN9XCo OXmokA8RBtprNTNm2mq7McNhSZ7R4TAbcU+CoH2Ct79N07cyId4hz43qwFzwitcw j1Om7liaUhyqTEAe8Bxa2lz9GgIu3UgCsQs= -----END CERTIFICATE-----Generated at Thu Oct 30 03:27:13 2025 by rpki-client