$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa File: d5ac50c2-a63c-3075-a528-1119e3ffee83.roa (raw, json) Hash identifier: 4ZYc6QP3/jw53gF1gK65/tvsyZMTyU2bKIpFq9K7RLE= Subject key identifier: D8:CC:5B:7E:4F:01:4E:42:29:44:F5:69:22:62:2C:98:DA:94:9B:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15B25A80D7AB56AD9AC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396595 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5b:25:a8:0d:7a:b5:6a:d9:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=944db8f2-d222-433b-a756-0beb73cb2929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:b7:f5:0f:59:2b:8b:f9:a4:62:b2:1a:b6: 0c:ae:97:c6:91:38:a5:d7:e6:ef:76:c9:09:7c:c5: 1f:79:1f:fd:6f:3f:c1:0c:63:ad:44:cb:55:fd:70: 0d:c4:33:7d:67:d5:61:4f:a2:7b:18:e4:cf:9b:4a: 44:cc:5d:bb:5e:cc:28:3f:90:24:50:7c:18:d9:c2: 3d:48:e0:db:21:4e:0e:54:0f:78:5c:6e:82:1b:e0: a8:03:6e:7d:e5:db:e7:50:84:96:4f:e3:3b:c0:80: 10:27:6e:6b:89:39:89:ab:0a:c1:e8:fd:28:73:d9: 43:48:c0:06:b2:0f:a6:1d:25:d2:de:40:89:6d:ca: e4:a7:d0:57:2e:d1:1f:1a:bc:06:d1:55:aa:94:be: 54:7a:11:99:61:0c:b2:da:ab:c5:4c:bf:00:b0:59: 61:64:6f:ae:c4:c3:03:3e:72:60:fe:c1:48:78:9c: 85:22:ac:29:bb:de:e8:c9:72:58:16:df:16:a6:3a: d6:b8:ef:f4:44:f0:2e:8d:6b:79:e0:0b:b8:8f:12: 2f:2d:e8:70:9f:69:e8:63:3b:e1:c6:43:de:1b:d3: b4:2c:f8:40:d6:bc:1e:99:a8:cb:7b:4c:82:fb:d8: f3:d5:b6:a9:c8:97:a8:ed:67:14:47:8e:e1:71:db: 9b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CC:5B:7E:4F:01:4E:42:29:44:F5:69:22:62:2C:98:DA:94:9B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5c:2a:ba:23:39:79:1b:c0:a2:45:44:75:4c:98:a2:b4:c4: b4:9a:fe:34:c2:74:e0:97:17:ca:69:f0:aa:0f:c7:3f:d0:c6: d0:f9:0b:14:a3:58:46:11:59:a4:cb:89:a4:fa:cb:b7:d0:87: 3e:5e:81:f5:e3:76:06:ea:67:a8:df:38:a6:cf:2f:25:99:ee: 09:a1:8c:71:70:db:5e:e2:c0:89:49:d1:d0:0e:be:1f:e3:6f: 94:a5:e7:0b:0d:0a:28:86:a3:7d:d4:a9:9f:41:47:27:95:66: 2c:3a:46:09:88:fa:f2:0a:b4:15:22:23:86:bf:bd:89:9e:e4: f4:04:01:31:66:75:d9:2e:60:d6:d6:a9:37:45:81:15:ff:f2: 4b:7c:d1:8b:25:62:a7:db:83:9f:36:22:c4:fa:8c:bc:97:72: b2:28:7d:62:a9:e8:8a:a2:5a:7b:10:95:56:eb:d8:26:3e:eb: 69:b8:8b:fe:16:19:0d:3a:1f:f8:ea:0e:f0:44:5e:b0:48:22: 63:92:ac:12:5d:71:ef:78:6d:01:76:5e:80:d3:2e:63:88:78: 16:95:57:1a:d5:84:31:d4:0b:de:12:e0:25:e9:fd:90:ab:a7: b4:89:da:9f:7e:15:37:4f:d6:22:d2:a3:2a:9b:84:ae:7c:df: e7:60:5e:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VslqA16tWrZrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OTQ0ZGI4ZjItZDIyMi00MzNiLWE3NTYtMGJlYjczY2IyOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoW39Q9ZK4v5pGKyGrYMrpfGkTil1+bvdskJ fMUfeR/9bz/BDGOtRMtV/XANxDN9Z9VhT6J7GOTPm0pEzF27XswoP5AkUHwY2cI9 SODbIU4OVA94XG6CG+CoA2595dvnUISWT+M7wIAQJ25riTmJqwrB6P0oc9lDSMAG sg+mHSXS3kCJbcrkp9BXLtEfGrwG0VWqlL5UehGZYQyy2qvFTL8AsFlhZG+uxMMD PnJg/sFIeJyFIqwpu97oyXJYFt8WpjrWuO/0RPAujWt54Au4jxIvLehwn2noYzvh xkPeG9O0LPhA1rwemajLe0yC+9jz1bapyJeo7WcUR47hcdub6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjMW35PAU5CKUT1aSJiLJjalJs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDVhYzUwYzItYTYzYy0z MDc1LWE1MjgtMTExOWUzZmZlZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVcKrojOXkbwKJFRHVMmKK0xLSa/jTCdOCXF8pp8KoPxz/QxtD5 CxSjWEYRWaTLiaT6y7fQhz5egfXjdgbqZ6jfOKbPLyWZ7gmhjHFw217iwIlJ0dAO vh/jb5Sl5wsNCiiGo33UqZ9BRyeVZiw6RgmI+vIKtBUiI4a/vYme5PQEATFmddku YNbWqTdFgRX/8kt80YslYqfbg582IsT6jLyXcrIofWKp6IqiWnsQlVbr2CY+62m4 i/4WGQ06H/jqDvBEXrBIImOSrBJdce94bQF2XoDTLmOIeBaVVxrVhDHUC94S4CXp /ZCrp7SJ2p9+FTdP1iLSoyqbhK583+dgXho= -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:33 2025 by rpki-client