$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ba1d956-f68f-3af1-88ad-304f049f02c4.roa File: 9ba1d956-f68f-3af1-88ad-304f049f02c4.roa (raw, json) Hash identifier: ZlO2rQgppb8FF1A0JWsG1K5iWyE71CwDGE9rg7u+Vmw= Subject key identifier: B2:CC:52:90:06:47:D7:86:50:7F:3E:65:C7:F2:1D:2A:6A:88:35:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF5216E6686A08A9A96CF5280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ba1d956-f68f-3af1-88ad-304f049f02c4.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 7342 IP address blocks: 2620:74:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6e:66:86:a0:8a:9a:96:cf:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=54c72f43-6212-4566-9735-0228d18db808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:da:8e:eb:e0:ce:8b:2c:88:38:ed:02:8d: e0:01:a7:19:ef:67:ee:db:86:8f:8e:3a:c1:ef:64: a8:9c:b6:8f:b9:35:be:69:05:5b:11:69:52:c3:58: 7b:2b:77:c4:84:5a:af:7f:19:fc:cf:8a:73:83:11: 2c:86:30:cc:49:f3:2f:e2:33:4f:64:5b:91:b6:dd: 08:11:28:08:0e:18:12:fa:7a:60:5d:8f:c2:9a:6a: 73:20:1a:06:fb:b3:99:31:9f:31:6c:09:e6:f0:f5: 91:e5:c4:8e:5f:22:1c:2c:6a:08:58:43:0c:3a:82: 0b:67:35:aa:8a:ae:45:86:cf:6c:23:4c:89:3c:22: ac:72:68:28:6e:51:21:63:58:60:e3:a9:57:52:a9: 6b:da:57:83:27:67:cd:ff:f2:45:70:17:b7:d7:8b: 41:c4:fa:0d:b0:ac:75:d6:5c:2b:5d:81:51:00:e2: 59:2b:a8:04:2d:78:91:dc:e8:b5:3d:3e:0c:3f:3e: 02:12:cf:c1:3a:74:45:3b:3b:ef:05:bd:20:25:64: da:af:8e:4a:27:78:7c:51:d8:10:e1:e6:89:81:ae: 35:fa:a1:4e:80:7d:66:a7:47:4b:07:a6:bb:85:dc: dc:5a:0b:ee:7c:3f:8d:5d:b8:d4:01:10:48:3f:a2: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:52:90:06:47:D7:86:50:7F:3E:65:C7:F2:1D:2A:6A:88:35:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ba1d956-f68f-3af1-88ad-304f049f02c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f3:16:2d:f1:69:a8:68:c0:d5:2f:1d:bb:84:54:83:f9:a1: 94:b9:e0:c5:72:53:0c:92:30:04:dd:0e:c5:8a:56:1b:92:a0: e5:18:60:b3:22:97:85:69:be:02:62:fe:97:19:21:fe:e0:69: 9a:a5:5b:cb:48:b9:cb:5a:99:05:cb:78:5a:81:5d:42:06:ef: d4:5b:4a:2c:de:2f:35:29:94:10:55:62:d2:02:24:9d:eb:b1: 36:f5:36:59:70:c6:e8:ba:f9:ba:0d:ad:63:49:40:b7:0e:6d: b0:89:e5:84:22:db:c3:8c:4b:ac:50:f8:43:d5:61:62:9f:ba: dd:b8:ba:33:e5:2c:41:4e:19:76:02:30:20:d5:8f:29:7a:eb: 74:a3:5d:40:49:bf:64:7c:55:e3:67:1c:73:14:72:a0:81:d0: af:33:c8:74:a7:0f:8e:a7:7b:21:87:51:ae:01:51:0c:8e:f8: 2e:ba:9d:76:2c:77:71:71:56:30:e3:7f:96:18:bb:a0:00:3f: 8a:c2:be:3b:8c:35:cc:9b:e7:d2:ea:17:25:0c:91:90:c2:aa: 8b:21:c7:17:3b:2a:54:7f:08:5c:ac:8c:a3:da:de:d9:c3:22: a8:12:b8:ce:06:50:77:04:9c:89:79:17:d7:7d:51:dd:64:8a: e2:b4:4d:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IW5mhqCKmpbPUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTRjNzJmNDMtNjIxMi00NTY2LTk3MzUtMDIyOGQxOGRiODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO3ajuvgzossiDjtAo3gAacZ72fu24aPjjrB 72SonLaPuTW+aQVbEWlSw1h7K3fEhFqvfxn8z4pzgxEshjDMSfMv4jNPZFuRtt0I ESgIDhgS+npgXY/CmmpzIBoG+7OZMZ8xbAnm8PWR5cSOXyIcLGoIWEMMOoILZzWq iq5Fhs9sI0yJPCKscmgoblEhY1hg46lXUqlr2leDJ2fN//JFcBe314tBxPoNsKx1 1lwrXYFRAOJZK6gELXiR3Oi1PT4MPz4CEs/BOnRFOzvvBb0gJWTar45KJ3h8UdgQ 4eaJga41+qFOgH1mp0dLB6a7hdzcWgvufD+NXbjUARBIP6J2DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLMUpAGR9eGUH8+ZcfyHSpqiDWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWJhMWQ5NTYtZjY4Zi0z YWYxLTg4YWQtMzA0ZjA0OWYwMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILzFi3xaahowNUvHbuEVIP5oZS54MVyUwySMATdDsWKVhuSoOUY YLMil4VpvgJi/pcZIf7gaZqlW8tIuctamQXLeFqBXUIG79RbSizeLzUplBBVYtIC JJ3rsTb1Nllwxui6+boNrWNJQLcObbCJ5YQi28OMS6xQ+EPVYWKfut24ujPlLEFO GXYCMCDVjyl663SjXUBJv2R8VeNnHHMUcqCB0K8zyHSnD46neyGHUa4BUQyO+C66 nXYsd3FxVjDjf5YYu6AAP4rCvjuMNcyb59LqFyUMkZDCqoshxxc7KlR/CFysjKPa 3tnDIqgSuM4GUHcEnIl5F9d9Ud1kiuK0TTg= -----END CERTIFICATE-----Generated at Wed Sep 10 22:41:26 2025 by rpki-client