$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa File: 9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa (raw, json) Hash identifier: dyM8ox/CSffFsL+/cuWGDkvOxKhUQAGTDyFe8OWnw3I= Subject key identifier: 5E:D5:64:94:64:89:04:96:32:90:E5:9D:54:81:3A:16:4A:9B:59:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F158AFBF009F1C760C9700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 397198 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:af:bf:00:9f:1c:76:0c:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=a20e26bc-98fd-47b3-8125-328c25d5b21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:30:f1:a3:f0:f1:cd:39:e4:3f:fd:72:e1: 52:17:a3:d7:5e:4c:04:12:da:cb:42:d8:2c:b4:b8: 3d:fa:74:4e:87:f6:47:ee:8a:66:28:5b:69:fa:3d: fd:38:d6:77:93:9d:4c:6e:5c:54:9d:98:19:2b:da: 65:6e:9a:bc:28:0a:d3:d0:14:1a:96:d7:d2:1c:6e: 43:7b:3c:76:5d:55:6c:8c:2d:57:25:9c:61:f2:95: d0:4b:a7:13:a5:1d:8e:25:de:3e:6a:b4:b1:8c:96: b3:5b:ee:b4:6e:b0:2d:95:64:25:9a:f5:95:ff:e6: 65:ac:59:52:b6:17:45:21:86:81:de:ee:03:c6:1b: 2a:f6:34:ee:7f:61:88:41:21:67:6d:7c:e4:a9:16: bb:a6:64:9a:5c:80:43:44:38:1c:27:22:46:bc:77: 53:fc:9d:cc:df:4a:b9:41:0b:9a:81:e2:9d:08:f9: 20:f2:cf:69:17:5a:d5:d6:49:aa:d5:c2:6b:63:b9: 05:c0:4b:19:6e:86:b5:64:8b:24:97:e0:a0:47:6b: 76:da:2e:51:18:aa:71:c0:59:b0:3f:39:fc:d2:42: cd:09:73:56:a5:09:35:ef:ba:0f:de:98:2c:8d:5b: 01:c6:6d:7e:f1:eb:64:c8:ae:7a:a4:10:2b:c2:be: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D5:64:94:64:89:04:96:32:90:E5:9D:54:81:3A:16:4A:9B:59:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c0:20:c9:5e:00:74:bc:9a:14:92:6c:c4:27:95:05:fb:3d: 59:9e:ad:4b:e3:65:3f:cc:f5:4d:d4:45:b5:2c:60:07:e6:93: e2:f9:87:52:1b:68:6a:28:1a:31:f7:d6:94:e0:b5:e5:98:8f: 03:9b:b9:66:cb:35:1e:57:c8:2f:4d:9d:13:49:7e:e7:e8:ee: 93:ab:a4:4e:fc:89:ae:99:70:90:42:10:0e:7d:8c:d5:02:59: 31:94:e6:88:a1:e2:27:38:cb:b7:fc:5b:45:d5:82:29:4a:af: 17:90:e7:87:e1:d6:89:09:d6:ef:fd:3f:ff:1b:d4:af:7f:b5: cd:3f:c7:a7:d6:9f:76:ba:18:87:20:a2:45:01:a4:65:73:38: cf:f8:7a:0b:3d:5d:35:f5:f3:c3:e5:27:3c:b8:0c:38:f1:c7: f7:8c:33:a9:27:5a:50:f2:77:4e:24:d5:9d:63:48:7d:39:13: cc:d0:94:1e:66:65:61:49:1f:6f:c0:fe:86:51:40:9d:bf:10: 86:70:2f:16:6f:04:9a:73:ea:ff:18:a7:0d:c9:b1:08:f7:4f: 62:cd:bb:c2:a6:60:3f:89:f9:0a:96:02:53:bc:64:9f:24:26: b4:6f:31:04:47:b4:1e:fb:1d:ee:95:33:41:1e:48:f3:94:61: 15:32:c1:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VivvwCfHHYMlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YTIwZTI2YmMtOThmZC00N2IzLTgxMjUtMzI4YzI1ZDViMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1gw8aPw8c055D/9cuFSF6PXXkwEEtrLQtgs tLg9+nROh/ZH7opmKFtp+j39ONZ3k51MblxUnZgZK9plbpq8KArT0BQaltfSHG5D ezx2XVVsjC1XJZxh8pXQS6cTpR2OJd4+arSxjJazW+60brAtlWQlmvWV/+ZlrFlS thdFIYaB3u4Dxhsq9jTuf2GIQSFnbXzkqRa7pmSaXIBDRDgcJyJGvHdT/J3M30q5 QQuageKdCPkg8s9pF1rV1kmq1cJrY7kFwEsZboa1ZIskl+CgR2t22i5RGKpxwFmw Pzn80kLNCXNWpQk177oP3pgsjVsBxm1+8etkyK56pBArwr7DhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7VZJRkiQSWMpDlnVSBOhZKm1l2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWVlN2Q3MTEtYjFlNi0z M2RmLWI5ZmYtODQ5NWE2Yjc4ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIjAIMleAHS8mhSSbMQnlQX7PVmerUvjZT/M9U3URbUsYAfmk+L5 h1IbaGooGjH31pTgteWYjwObuWbLNR5XyC9NnRNJfufo7pOrpE78ia6ZcJBCEA59 jNUCWTGU5oih4ic4y7f8W0XVgilKrxeQ54fh1okJ1u/9P/8b1K9/tc0/x6fWn3a6 GIcgokUBpGVzOM/4egs9XTX188PlJzy4DDjxx/eMM6knWlDyd04k1Z1jSH05E8zQ lB5mZWFJH2/A/oZRQJ2/EIZwLxZvBJpz6v8Ypw3JsQj3T2LNu8KmYD+J+QqWAlO8 ZJ8kJrRvMQRHtB77He6VM0EeSPOUYRUywTU= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:12 2025 by rpki-client