$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa File: 58c7d010-56ad-3b1e-8476-fb1b0e916912.roa (raw, json) Hash identifier: 0PAwhuetN8fVQXUDsT0/P3xJXwdogHn4NCCP5RCUNJI= Subject key identifier: 00:73:24:F7:C6:4A:73:C5:49:69:86:CD:EB:49:A4:00:50:26:26:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF52159209408A2B8F6889900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 2620:74:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:59:20:94:08:a2:b8:f6:88:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=2d145e1b-5fcb-446a-86fe-5d02cdf6bc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:b0:28:28:8e:cf:ed:8d:53:d7:16:d1:f3: c9:db:b5:a2:d3:71:f2:7f:33:95:3a:14:75:d8:cf: 88:94:ae:d4:cf:70:90:81:53:26:9d:90:23:cf:b3: a7:f6:db:ec:61:5a:28:a8:06:ed:72:f6:b7:b0:7e: 7d:43:14:12:92:60:cf:0b:9f:8b:cd:4c:15:48:1e: 62:9d:93:07:7f:a2:ce:f1:bd:a3:fe:bd:39:3e:d0: 7d:31:85:55:c2:df:b5:61:f5:ae:47:9d:3a:e0:55: a6:ba:f4:06:56:f1:32:85:3f:29:8e:10:d5:67:db: f7:07:72:d6:a6:c6:87:38:3f:4a:c3:3f:b4:8a:c0: fc:d3:94:0c:f8:dd:9a:cb:56:2f:b4:5f:23:d8:ee: 33:f2:6d:41:6a:22:1a:95:e5:71:01:f8:74:e3:f3: 19:03:59:4e:15:98:1d:c9:1f:cf:b1:00:73:77:71: 04:9b:23:e3:7d:8e:de:70:65:c4:30:2c:4e:92:bb: 4a:77:0b:b7:a3:58:46:ba:0d:8d:11:b0:22:a5:be: a7:5b:d3:3d:67:de:7b:6b:ad:15:5a:e5:69:1f:af: 2a:08:bd:e9:b4:9a:db:c7:08:2e:ab:f6:eb:b2:1f: b9:0a:81:fb:c8:34:ee:1e:af:37:82:a7:84:db:ab: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:24:F7:C6:4A:73:C5:49:69:86:CD:EB:49:A4:00:50:26:26:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:11:36:78:f7:32:60:40:11:69:cd:41:eb:0d:b7:cc:4b:7c: 24:ca:ab:3d:29:e3:5c:0f:a4:fa:b6:e5:2d:d4:e9:76:a6:10: a8:90:ce:54:41:9e:f5:a2:3a:cf:53:e1:94:13:09:70:80:3a: c3:4a:0d:c5:bc:7e:0b:f8:0b:51:04:5e:df:ef:ad:bf:6f:43: aa:ec:01:a6:76:9b:04:00:c4:89:e4:1f:0b:81:6b:76:49:6d: ca:da:0b:19:4f:af:57:5b:23:6e:e2:78:0d:89:40:f3:d9:26: c3:cc:a2:d8:1a:f9:48:76:4e:04:47:50:94:a2:04:a5:5d:42: 9c:a4:3f:7b:b7:e0:99:41:41:cb:06:3d:9c:02:0d:dd:1e:ea: 8f:80:26:ef:b6:df:24:0a:27:3f:86:36:ff:f7:29:c9:c6:cd: 68:a6:71:83:a4:18:9c:1e:bb:71:4f:e5:a5:10:38:3d:9d:db: ad:04:02:5a:99:ec:80:13:d5:e9:89:ea:1a:de:35:da:b5:e5: 87:90:44:a1:f6:57:20:06:50:23:02:03:de:d8:80:5e:59:8c: 9d:8c:5f:ac:ff:50:83:58:2c:69:9e:8b:43:fa:f3:fe:97:e4: 3a:99:4a:43:56:be:14:43:2f:83:99:33:b6:e6:bb:85:11:bb: 45:b7:2b:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IVkglAiiuPaImQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmQxNDVlMWItNWZjYi00NDZhLTg2ZmUtNWQwMmNkZjZiYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQOwKCiOz+2NU9cW0fPJ27Wi03HyfzOVOhR1 2M+IlK7Uz3CQgVMmnZAjz7On9tvsYVooqAbtcva3sH59QxQSkmDPC5+LzUwVSB5i nZMHf6LO8b2j/r05PtB9MYVVwt+1YfWuR5064FWmuvQGVvEyhT8pjhDVZ9v3B3LW psaHOD9Kwz+0isD805QM+N2ay1YvtF8j2O4z8m1BaiIaleVxAfh04/MZA1lOFZgd yR/PsQBzd3EEmyPjfY7ecGXEMCxOkrtKdwu3o1hGug2NEbAipb6nW9M9Z957a60V WuVpH68qCL3ptJrbxwguq/brsh+5CoH7yDTuHq83gqeE26vFAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFABzJPfGSnPFSWmGzetJpABQJia4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNThjN2QwMTAtNTZhZC0z YjFlLTg0NzYtZmIxYjBlOTE2OTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIARNnj3MmBAEWnNQesNt8xLfCTKqz0p41wPpPq25S3U6XamEKiQ zlRBnvWiOs9T4ZQTCXCAOsNKDcW8fgv4C1EEXt/vrb9vQ6rsAaZ2mwQAxInkHwuB a3ZJbcraCxlPr1dbI27ieA2JQPPZJsPMotga+Uh2TgRHUJSiBKVdQpykP3u34JlB QcsGPZwCDd0e6o+AJu+23yQKJz+GNv/3KcnGzWimcYOkGJweu3FP5aUQOD2d260E AlqZ7IAT1emJ6hreNdq15YeQRKH2VyAGUCMCA97YgF5ZjJ2MX6z/UINYLGmei0P6 8/6X5DqZSkNWvhRDL4OZM7bmu4URu0W3Kzc= -----END CERTIFICATE-----Generated at Thu Oct 30 03:18:58 2025 by rpki-client