$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa File: 66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa (raw, json) Hash identifier: /q+Yqocs1k7oXj0qV0WLGsWXmYQQ208JqnOmeZYSK+Q= Subject key identifier: D3:6B:FA:10:78:A2:60:15:86:6A:EF:98:D8:48:F2:BB:D5:3F:A7:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AFC1C14A84649E86C83501680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7342 IP address blocks: 2620:74:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:14:a8:46:49:e8:6c:83:50:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=f5b9efad-a3a4-49be-a6be-9cf1c20cba67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:02:52:f7:6d:b9:3b:d4:64:f0:4e:85:c7: 87:8b:a5:ca:c1:d8:79:59:4b:29:6e:24:64:46:43: 17:83:02:d1:3a:07:cb:c2:d5:28:92:a0:f5:93:77: 3f:c8:ba:25:6d:6d:cd:a7:cf:3c:04:83:e7:20:1e: e3:8f:a4:f7:98:4c:24:3b:64:41:df:50:18:53:97: 8d:00:19:b5:62:a6:70:2e:50:dd:65:c0:f1:e4:4e: 2b:89:41:0c:e7:73:e7:5e:af:60:ad:ed:7b:a5:29: c6:93:42:96:ed:d6:24:54:de:e2:b0:06:54:61:51: 8d:59:01:42:3b:86:6e:70:7a:00:7b:68:36:3b:70: fb:15:58:9a:29:21:a6:d0:36:89:24:6f:0d:f1:27: 06:93:b7:e3:53:2f:e2:75:0e:fa:a2:29:4d:4f:0e: 9f:d4:5b:31:8b:ee:97:ba:b3:bd:9e:1e:4f:e3:b0: 33:7a:45:11:98:08:2a:28:2a:71:05:5b:0e:3a:a7: 82:91:78:ea:59:3e:ed:6b:ff:7d:47:ad:9d:d1:4b: 50:aa:83:2e:7c:34:91:a4:b7:02:71:28:76:3e:e2: 37:ab:26:02:e6:b3:42:a4:ab:5e:a0:e3:c3:9b:af: 7c:8a:fb:43:1d:3d:6d:b1:2d:d6:66:ce:89:45:5d: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6B:FA:10:78:A2:60:15:86:6A:EF:98:D8:48:F2:BB:D5:3F:A7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:65::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:98:ee:03:e4:8f:91:61:bd:6a:70:da:a2:39:33:a0:c4:04: 0e:3b:96:ef:88:11:6f:07:06:cd:2e:c3:5c:83:9d:c9:d8:07: fa:e9:18:c2:a2:a4:fd:9b:db:f2:c1:34:62:ff:fd:b1:09:37: 00:f0:32:e1:77:bf:1a:d2:4e:40:7c:d8:2d:1b:14:31:30:71: e7:f5:4e:58:6d:bd:c1:06:df:45:59:cf:50:35:e4:c2:df:ce: 78:12:96:5e:13:53:79:9c:33:0b:8f:b4:11:94:e7:ef:95:a0: 9b:9f:cd:d8:46:3f:7f:69:2e:6b:2a:9b:d6:86:ff:3d:65:17: 02:a0:55:8a:a3:d4:e5:98:32:dd:a7:83:6c:86:8e:a0:55:1e: 48:80:1f:73:60:8b:75:41:39:c7:fe:95:90:fa:d1:16:8d:03: 02:90:f7:63:18:56:85:b6:5a:35:e4:5b:d8:32:ca:d6:63:67: d8:67:0b:2e:65:6b:07:b1:e3:41:f9:c5:64:a8:6f:00:32:42: 10:09:6f:97:86:fc:f1:a3:f0:9a:d7:f2:7a:b8:2f:65:dc:d5: 66:08:18:f1:f6:8a:ba:0c:e0:75:7a:6d:5d:7f:5e:a8:87:20: 93:fb:c3:78:1f:18:48:58:3b:f1:11:39:95:c1:fa:0f:10:6c: 8f:9a:07:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8HBSoRknobINQFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjViOWVmYWQtYTNhNC00OWJlLWE2YmUtOWNmMWMyMGNiYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dECUvdtuTvUZPBOhceHi6XKwdh5WUspbiRk RkMXgwLROgfLwtUokqD1k3c/yLolbW3Np888BIPnIB7jj6T3mEwkO2RB31AYU5eN ABm1YqZwLlDdZcDx5E4riUEM53PnXq9gre17pSnGk0KW7dYkVN7isAZUYVGNWQFC O4ZucHoAe2g2O3D7FViaKSGm0DaJJG8N8ScGk7fjUy/idQ76oilNTw6f1Fsxi+6X urO9nh5P47AzekURmAgqKCpxBVsOOqeCkXjqWT7ta/99R62d0UtQqoMufDSRpLcC cSh2PuI3qyYC5rNCpKteoOPDm698ivtDHT1tsS3WZs6JRV3o0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNr+hB4omAVhmrvmNhI8rvVP6cMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY4NjljZGYtZWEzZS0z ZDYwLTlkMDYtYTBmZjFlOTdhM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiY7gPkj5FhvWpw2qI5M6DEBA47lu+IEW8HBs0uw1yDncnYB/rp GMKipP2b2/LBNGL//bEJNwDwMuF3vxrSTkB82C0bFDEwcef1TlhtvcEG30VZz1A1 5MLfzngSll4TU3mcMwuPtBGU5++VoJufzdhGP39pLmsqm9aG/z1lFwKgVYqj1OWY Mt2ng2yGjqBVHkiAH3Ngi3VBOcf+lZD60RaNAwKQ92MYVoW2WjXkW9gyytZjZ9hn Cy5lawex40H5xWSobwAyQhAJb5eG/PGj8JrX8nq4L2Xc1WYIGPH2iroM4HV6bV1/ XqiHIJP7w3gfGEhYO/EROZXB+g8QbI+aB5w= -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:53 2025 by rpki-client