$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa File: cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa (raw, json) Hash identifier: LvFc+gtccOrGgmQsad8zHisUYpujx7oNmLCr5F4MdXg= Subject key identifier: 02:BC:DA:CA:10:F1:1B:8D:2D:A6:2E:3E:AF:23:BF:1B:63:58:5E:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15A568D2A63DCF77D79E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396593 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5a:56:8d:2a:63:dc:f7:7d:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=827abd4c-3117-4ce1-a005-805ffbe95901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:86:97:88:38:2a:69:83:68:c8:55:b3:17: a6:f4:79:95:bb:5a:d6:06:cc:eb:9a:b9:31:c9:e7: 14:80:0a:a3:47:2a:d6:93:23:1a:a1:05:68:aa:85: 93:e6:c3:cb:99:40:03:6f:a7:7f:d5:77:90:08:da: b5:f3:51:f8:53:4d:fb:13:d7:f3:f2:61:a5:8c:ca: 26:cc:09:00:54:89:ab:1b:59:64:5a:63:82:23:3d: 67:16:cc:b0:4a:3c:9c:0a:3b:44:a6:3c:9c:29:70: b8:f0:7d:01:46:c7:09:81:5d:72:17:8c:f1:b3:11: b6:6e:ee:d9:f9:56:39:52:aa:31:2b:25:8c:44:e1: 04:74:78:8d:d1:c6:c6:ea:49:28:ea:bb:ec:77:da: 24:4c:da:de:f0:af:28:09:29:d9:f3:a2:1e:03:e8: be:a0:48:80:69:57:df:4e:16:8a:50:3b:98:ec:41: d3:2d:b7:4d:db:25:6e:29:b8:fa:23:77:fd:91:ad: 0f:f8:d1:8b:ea:18:65:b6:a9:9d:0c:1f:12:36:5b: 5d:e7:4d:a4:d5:ed:8c:69:55:07:24:cc:1c:e9:6f: 6a:f8:15:8f:67:61:0f:40:1d:81:24:20:98:35:a2: 54:a1:27:bb:41:a0:8e:af:cc:fc:f4:38:b4:54:0d: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:DA:CA:10:F1:1B:8D:2D:A6:2E:3E:AF:23:BF:1B:63:58:5E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:29:65:61:01:e8:d0:8b:c5:e6:c3:8d:dc:b1:c6:7d:d1:69: af:60:14:96:03:e9:e5:a6:54:8e:db:51:5a:4d:da:80:61:98: 3e:91:30:2d:d0:b7:1f:0f:99:92:7f:af:b3:62:3a:70:50:9c: 2e:8e:6f:b7:35:17:e4:1d:2a:2e:bf:eb:10:ff:e6:d8:c3:9b: 27:d4:23:ff:4c:b7:34:ce:77:41:0b:2a:c7:e8:6b:d2:ea:48: 8d:2f:60:7b:92:7f:d3:a9:61:cc:c9:e2:7f:a8:63:4e:fd:42: 93:65:2e:e6:46:33:1c:98:be:27:8a:72:a0:79:fa:29:80:7e: 0b:7a:4e:6a:d7:b8:45:52:ae:3f:11:2d:d5:40:2a:51:e8:e4: af:cc:03:c9:2a:ca:54:2e:bf:3b:e7:00:92:ba:06:aa:c9:6c: b7:cb:64:30:ef:72:53:68:fc:67:e7:e3:c5:8f:0a:22:b0:34: d3:80:84:3a:49:af:a1:35:7b:ff:2f:9f:4b:0a:47:cb:4a:fe: 97:87:79:6e:88:ac:11:c0:bf:16:1d:3d:1d:e3:28:ac:d2:a2: a3:c3:62:8a:97:08:df:c4:f0:d6:71:ba:60:dd:b3:12:bc:8a: d0:c6:ff:36:42:c4:4b:12:71:ff:70:f9:0d:85:1e:b4:67:6d: 7a:39:a6:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VpWjSpj3Pd9eeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ODI3YWJkNGMtMzExNy00Y2UxLWEwMDUtODA1ZmZiZTk1OTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNmGl4g4KmmDaMhVsxem9HmVu1rWBszrmrkx yecUgAqjRyrWkyMaoQVoqoWT5sPLmUADb6d/1XeQCNq181H4U037E9fz8mGljMom zAkAVImrG1lkWmOCIz1nFsywSjycCjtEpjycKXC48H0BRscJgV1yF4zxsxG2bu7Z +VY5UqoxKyWMROEEdHiN0cbG6kko6rvsd9okTNre8K8oCSnZ86IeA+i+oEiAaVff ThaKUDuY7EHTLbdN2yVuKbj6I3f9ka0P+NGL6hhltqmdDB8SNltd502k1e2MaVUH JMwc6W9q+BWPZ2EPQB2BJCCYNaJUoSe7QaCOr8z89Di0VA344wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAK82soQ8RuNLaYuPq8jvxtjWF49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M0YTYyYzEtMzgzMy0z OWYwLWEwYTUtMjdiZTRkYjVmNmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYpZWEB6NCLxebDjdyxxn3Raa9gFJYD6eWmVI7bUVpN2oBhmD6R MC3Qtx8PmZJ/r7NiOnBQnC6Ob7c1F+QdKi6/6xD/5tjDmyfUI/9MtzTOd0ELKsfo a9LqSI0vYHuSf9OpYczJ4n+oY079QpNlLuZGMxyYvieKcqB5+imAfgt6TmrXuEVS rj8RLdVAKlHo5K/MA8kqylQuvzvnAJK6BqrJbLfLZDDvclNo/Gfn48WPCiKwNNOA hDpJr6E1e/8vn0sKR8tK/peHeW6IrBHAvxYdPR3jKKzSoqPDYoqXCN/E8NZxumDd sxK8itDG/zZCxEsScf9w+Q2FHrRnbXo5pos= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:13 2025 by rpki-client