$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa File: 4234488f-8886-3a8d-961e-e0228ef7f6a0.roa (raw, json) Hash identifier: FMNJlw8JdHt3SYNzq2PBHpRhpLd2xMCQoiBcMxjwsjA= Subject key identifier: 30:46:64:C9:65:7A:0F:57:5C:07:CD:D1:69:9A:53:EE:A9:1A:FD:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF5216EE787DAA228756CC940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 7342 IP address blocks: 2620:74:7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6e:e7:87:da:a2:28:75:6c:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=4db51220-02d9-4650-a248-d8883c84e474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:f0:e8:3b:b6:dc:cd:37:ec:80:75:07:e6: 21:32:20:20:23:59:a7:d3:65:53:19:a3:f4:26:47: 21:e5:32:91:9c:8c:05:21:cf:77:4a:79:38:bf:7e: fa:cf:9a:c4:61:2c:24:ba:71:4e:d3:d8:55:32:11: 65:76:39:9e:82:3c:d8:f3:9e:f0:b2:c1:f3:71:18: ea:bb:4f:4c:42:2a:b8:b0:8b:5b:b3:fd:5a:92:d5: 53:77:72:2d:d1:a6:bb:cd:2d:d8:f2:76:b3:bb:39: ce:ed:d3:11:3a:c7:fd:6b:f1:a0:10:7b:aa:bc:9f: f0:9d:cd:c7:98:14:f9:af:85:82:58:18:e5:e1:32: b0:02:11:9d:7d:da:d5:b8:e2:25:87:49:c6:9d:f1: d0:26:dd:de:b1:fa:5f:d2:e4:80:a1:88:78:cc:51: 24:2b:0f:a9:89:ca:1b:be:b9:79:06:58:f7:5c:36: af:4b:8e:db:55:f9:21:83:68:eb:d0:bd:65:9a:f2: b6:fe:f5:05:de:69:05:e8:a8:37:31:17:a4:8e:cd: d1:13:bf:3f:93:f5:6c:54:e9:01:09:7a:11:fd:8e: 3e:b1:13:79:2b:3d:73:67:ff:6a:d3:7b:0b:da:4a: 9e:06:a6:67:4f:e3:ec:d8:f4:cb:8b:06:07:60:66: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:46:64:C9:65:7A:0F:57:5C:07:CD:D1:69:9A:53:EE:A9:1A:FD:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9a:14:41:51:5c:d0:39:39:a3:10:a5:0a:f2:5b:92:35:02: 28:dc:cb:57:10:ee:7c:49:db:63:ac:5a:26:47:41:b1:40:70: 09:1f:dc:47:cc:96:86:b5:aa:54:01:49:be:0a:c9:05:b4:7b: 87:dd:31:56:ce:e7:ec:96:fd:79:c6:d3:9b:8d:cf:6a:4b:4f: fb:1d:ad:db:5c:b1:ff:86:6a:08:b9:e9:9c:e7:8d:07:5d:ad: 29:fe:ac:4c:c9:c8:71:ae:1b:94:56:90:5c:81:3a:3e:27:56: 63:0b:10:36:51:14:73:33:04:85:6f:7c:17:c8:83:f0:d9:ab: f0:de:25:dd:19:0b:de:18:27:5c:e8:f8:97:cc:e5:86:38:b7: 29:b0:a4:ec:5b:25:ed:34:03:18:38:e0:83:66:33:35:c4:3e: 32:7d:5b:cc:55:29:c4:08:06:ca:22:5e:ac:c5:79:e4:73:a2: 18:97:ad:2b:37:8b:95:fe:02:de:1a:e5:82:8d:f8:f8:a8:3b: 42:f4:37:b9:14:24:81:c9:2b:b3:71:c7:a5:8f:e2:3e:85:c9: bd:ae:99:28:43:c9:52:8f:3e:d0:a4:84:f3:24:63:b6:22:7a: 1f:16:5f:76:31:89:35:dc:48:5c:0e:5a:af:42:90:fb:d2:9d: 3e:b0:b7:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IW7nh9qiKHVsyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGRiNTEyMjAtMDJkOS00NjUwLWEyNDgtZDg4ODNjODRlNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Dw6Du23M037IB1B+YhMiAgI1mn02VTGaP0 Jkch5TKRnIwFIc93Snk4v376z5rEYSwkunFO09hVMhFldjmegjzY857wssHzcRjq u09MQiq4sItbs/1aktVTd3It0aa7zS3Y8nazuznO7dMROsf9a/GgEHuqvJ/wnc3H mBT5r4WCWBjl4TKwAhGdfdrVuOIlh0nGnfHQJt3esfpf0uSAoYh4zFEkKw+picob vrl5Blj3XDavS47bVfkhg2jr0L1lmvK2/vUF3mkF6Kg3MRekjs3RE78/k/VsVOkB CXoR/Y4+sRN5Kz1zZ/9q03sL2kqeBqZnT+Ps2PTLiwYHYGaBIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDBGZMlleg9XXAfN0WmaU+6pGv1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDIzNDQ4OGYtODg4Ni0z YThkLTk2MWUtZTAyMjhlZjdmNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIaaFEFRXNA5OaMQpQryW5I1Aijcy1cQ7nxJ22OsWiZHQbFAcAkf 3EfMloa1qlQBSb4KyQW0e4fdMVbO5+yW/XnG05uNz2pLT/sdrdtcsf+Gagi56Zzn jQddrSn+rEzJyHGuG5RWkFyBOj4nVmMLEDZRFHMzBIVvfBfIg/DZq/DeJd0ZC94Y J1zo+JfM5YY4tymwpOxbJe00Axg44INmMzXEPjJ9W8xVKcQIBsoiXqzFeeRzohiX rSs3i5X+At4a5YKN+PioO0L0N7kUJIHJK7Nxx6WP4j6Fyb2umShDyVKPPtCkhPMk Y7Yieh8WX3YxiTXcSFwOWq9CkPvSnT6wt3k= -----END CERTIFICATE-----Generated at Wed Sep 10 22:51:53 2025 by rpki-client