$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa File: db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa (raw, json) Hash identifier: 33no++8tlWGqFEHZ9eNHJ5jRdwXfckWpyx2HIYdf6q4= Subject key identifier: 4A:45:CF:CA:E0:9C:CE:FC:16:67:F9:DB:5B:6A:01:01:14:52:7B:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15BDB407B24C39BADA000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396573 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5b:db:40:7b:24:c3:9b:ad:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=cc7a68f2-0b52-4040-a2d6-5f5c80ca2086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:12:4b:cb:a2:39:8f:69:ef:33:7e:0c:99: d2:d9:ba:cf:8f:34:25:8b:ea:61:0b:a5:06:49:05: cd:bb:8f:bc:cd:74:48:b7:10:8f:01:ae:b9:70:9a: e4:aa:8e:28:96:2f:0a:39:61:ee:9e:27:63:5a:85: 50:f3:7e:64:42:5c:fd:66:e3:22:73:e6:07:10:07: 9a:7e:13:75:02:0f:6b:37:61:13:b4:6a:f1:20:51: eb:0a:3a:e9:12:7d:58:48:25:49:ad:86:56:04:bb: 06:b0:13:bc:7d:aa:e4:52:8b:30:dd:de:dc:b0:72: 53:46:2f:d6:1d:ac:f1:26:39:27:06:36:96:c1:41: da:56:46:05:ba:17:c5:a4:cd:43:11:93:0e:31:d5: 86:13:7a:fc:f6:f7:e3:df:39:d5:02:1d:a4:56:43: 64:ff:97:ee:14:0b:48:e6:2f:22:12:8e:e2:9f:ad: e6:c9:c3:23:6b:74:20:c1:5e:26:3d:6a:57:20:a1: 71:cf:59:98:c7:b0:fb:17:c6:d9:a2:b4:74:e2:3e: a6:98:f1:54:c0:8d:91:9c:11:b2:77:68:8b:bc:f8: 6a:b1:7c:c1:82:83:a0:68:5e:f8:ef:e8:6a:68:77: 1e:f7:fa:3a:c6:4b:59:ca:de:37:98:6b:80:b6:77: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:45:CF:CA:E0:9C:CE:FC:16:67:F9:DB:5B:6A:01:01:14:52:7B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:41:d6:d1:7a:7d:f6:a3:3c:0c:b9:d4:92:03:ed:3c:b9:6b: 44:c3:13:ef:20:1e:72:79:d2:62:25:8b:b5:02:89:f5:e4:07: 18:e2:a5:c2:5d:5d:c6:78:95:34:0e:7e:be:88:6a:89:d8:56: 4d:13:cb:9b:4e:d3:31:78:8a:52:ab:4e:eb:66:09:4d:be:99: 6f:38:29:b4:85:44:39:46:ea:95:dd:3a:fa:4c:06:7f:55:4b: 5c:c8:25:d3:8e:13:37:79:fe:56:60:15:ed:6f:ea:5e:e4:8a: 1c:22:c6:59:da:45:87:6d:54:d4:af:ca:68:35:a2:1e:c9:f8: 19:e2:e4:d7:d6:2d:cd:24:47:15:6d:3b:e4:62:4c:c9:ba:f7: b8:38:8b:f7:58:fd:4f:2a:bd:be:e0:97:28:6a:6c:54:c8:f7: 0b:a9:f2:91:04:0e:4d:6c:d0:d7:ed:75:b7:38:3b:f8:1e:d1: 6b:bf:b7:a7:0b:fd:a9:bc:1e:38:b0:a7:aa:1a:75:f7:56:08: 45:de:08:59:1c:91:3a:b7:7c:48:4f:a4:21:e8:ca:f9:63:d4: 83:17:42:b7:dd:8b:41:03:7b:9b:9c:6f:3d:cb:c0:f7:69:3b: cb:18:44:d7:0f:5c:a9:d4:28:45:aa:2d:7b:d7:71:a2:04:1f: 61:7a:9f:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VvbQHskw5utoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk Y2M3YTY4ZjItMGI1Mi00MDQwLWEyZDYtNWY1YzgwY2EyMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVwSS8uiOY9p7zN+DJnS2brPjzQli+phC6UG SQXNu4+8zXRItxCPAa65cJrkqo4oli8KOWHunidjWoVQ835kQlz9ZuMic+YHEAea fhN1Ag9rN2ETtGrxIFHrCjrpEn1YSCVJrYZWBLsGsBO8farkUosw3d7csHJTRi/W HazxJjknBjaWwUHaVkYFuhfFpM1DEZMOMdWGE3r89vfj3znVAh2kVkNk/5fuFAtI 5i8iEo7in63mycMja3QgwV4mPWpXIKFxz1mYx7D7F8bZorR04j6mmPFUwI2RnBGy d2iLvPhqsXzBgoOgaF747+hqaHce9/o6xktZyt43mGuAtndH9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEpFz8rgnM78Fmf521tqAQEUUnsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGIyZjJlYzMtNjdmMi0z NWI1LWI1ZmQtMTlmZDgxZWE4Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFlB1tF6ffajPAy51JID7Ty5a0TDE+8gHnJ50mIli7UCifXkBxji pcJdXcZ4lTQOfr6IaonYVk0Ty5tO0zF4ilKrTutmCU2+mW84KbSFRDlG6pXdOvpM Bn9VS1zIJdOOEzd5/lZgFe1v6l7kihwixlnaRYdtVNSvymg1oh7J+Bni5NfWLc0k RxVtO+RiTMm697g4i/dY/U8qvb7glyhqbFTI9wup8pEEDk1s0Nftdbc4O/ge0Wu/ t6cL/am8Hjiwp6oadfdWCEXeCFkckTq3fEhPpCHoyvlj1IMXQrfdi0EDe5ucbz3L wPdpO8sYRNcPXKnUKEWqLXvXcaIEH2F6nwM= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:50 2025 by rpki-client