$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa File: ec742843-d253-3a6b-9952-4646f89e3124.roa (raw, json) Hash identifier: vVUNMMZGCYqF2569WXhWGkeQaUj4x4FQvH26jZHQ2Gw= Subject key identifier: 30:6E:46:11:3C:93:76:66:4D:B0:28:2F:F0:C4:73:FB:48:A0:C6:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF521643ACCB7FB39998EDD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 7342 IP address blocks: 2620:74:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:64:3a:cc:b7:fb:39:99:8e:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=6000c492-fbc4-45cc-8ba1-5faeb9f2efbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1b:81:05:db:b6:81:65:a3:f3:18:8b:47:07: bb:f3:d0:e5:36:21:92:6e:09:78:2b:90:97:18:2a: 51:e9:e8:cc:04:2d:53:1d:75:1a:57:7b:2d:61:77: 73:f1:ae:9a:8b:af:28:39:c9:58:85:94:7a:ef:7b: 4e:2f:99:42:8b:8e:64:2d:48:a6:e6:85:1a:ee:ee: f3:96:52:56:26:56:68:6a:6a:c6:b7:78:37:59:38: 51:90:3e:f5:ad:b1:46:eb:c5:83:61:4d:53:a4:56: 2f:aa:b3:3d:dc:23:3c:41:46:d4:04:b8:29:c8:3b: 21:75:91:9f:5d:9a:e2:5e:de:47:5d:a7:56:82:30: 26:7a:df:d7:af:fd:78:d6:03:b7:77:38:f9:d3:c8: 79:f3:50:10:bb:8b:1b:0f:26:e6:cb:61:d2:df:12: 3a:d5:11:2f:7d:f6:12:82:45:7b:ca:a9:9e:97:23: 81:02:d9:ff:7a:72:60:30:17:dd:55:23:e9:d0:a1: 8b:49:69:4b:f0:ab:68:f2:0e:b1:83:5f:c6:43:06: a0:db:66:a6:f8:fb:60:cc:8a:9e:56:d4:7f:a4:aa: 4d:be:02:a1:7e:27:7b:10:9b:09:0e:67:1e:e2:a2: 54:12:90:58:ab:18:e7:8a:f9:4d:50:b0:97:b4:9d: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:46:11:3C:93:76:66:4D:B0:28:2F:F0:C4:73:FB:48:A0:C6:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:07:69:ae:48:39:e3:8b:d3:7f:af:f2:ad:07:66:7a:a7:97: 05:b6:3b:6b:2c:fe:fe:d9:02:b0:dc:57:f7:f3:37:f8:4c:68: ae:8b:28:b6:7f:9d:0d:9b:f4:ce:59:d3:f3:1d:25:2e:64:fc: 97:ac:4a:8e:87:9e:55:f1:cd:da:38:c5:1b:72:ee:e1:09:57: a0:25:f6:fe:f3:1c:7e:3c:e1:b2:8c:d6:0b:7d:e5:13:67:b1: b5:b7:35:fb:87:f1:ed:fd:08:86:67:35:9c:f1:c7:05:24:b4: 12:eb:a6:f7:bb:54:43:5c:00:07:00:75:09:42:04:47:a6:43: 29:76:3a:6b:2f:5a:55:16:cc:a5:8d:f9:c3:99:8d:7d:15:b0: 69:58:bb:47:99:86:eb:89:d9:a1:51:00:69:bc:e6:b6:b4:fb: 84:a5:70:4a:e7:5d:0b:66:c8:7d:51:a6:33:1a:70:74:21:71: 58:7f:7f:c2:1d:9d:72:2c:15:a5:88:5f:f9:44:b3:1d:ad:8e: d0:80:97:03:fe:3b:6d:d8:71:f5:7d:98:71:41:22:ca:45:dd: 56:95:18:9d:7a:a3:82:78:b2:1e:df:0b:ed:3a:0e:b2:be:ed: d1:6b:57:f3:fc:eb:44:56:a8:e5:d2:41:a8:30:72:1c:89:4b: 16:0f:cf:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IWQ6zLf7OZmO3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjAwMGM0OTItZmJjNC00NWNjLThiYTEtNWZhZWI5ZjJlZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixuBBdu2gWWj8xiLRwe789DlNiGSbgl4K5CX GCpR6ejMBC1THXUaV3stYXdz8a6ai68oOclYhZR673tOL5lCi45kLUim5oUa7u7z llJWJlZoamrGt3g3WThRkD71rbFG68WDYU1TpFYvqrM93CM8QUbUBLgpyDshdZGf XZriXt5HXadWgjAmet/Xr/141gO3dzj508h581AQu4sbDybmy2HS3xI61REvffYS gkV7yqmelyOBAtn/enJgMBfdVSPp0KGLSWlL8Kto8g6xg1/GQwag22am+PtgzIqe VtR/pKpNvgKhfid7EJsJDmce4qJUEpBYqxjnivlNULCXtJ3qJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDBuRhE8k3ZmTbAoL/DEc/tIoMaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM3NDI4NDMtZDI1My0z YTZiLTk5NTItNDY0NmY4OWUzMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMHaa5IOeOL03+v8q0HZnqnlwW2O2ss/v7ZArDcV/fzN/hMaK6L KLZ/nQ2b9M5Z0/MdJS5k/JesSo6HnlXxzdo4xRty7uEJV6Al9v7zHH484bKM1gt9 5RNnsbW3NfuH8e39CIZnNZzxxwUktBLrpve7VENcAAcAdQlCBEemQyl2OmsvWlUW zKWN+cOZjX0VsGlYu0eZhuuJ2aFRAGm85ra0+4SlcErnXQtmyH1RpjMacHQhcVh/ f8IdnXIsFaWIX/lEsx2tjtCAlwP+O23YcfV9mHFBIspF3VaVGJ16o4J4sh7fC+06 DrK+7dFrV/P860RWqOXSQagwchyJSxYPz4w= -----END CERTIFICATE-----Generated at Wed Sep 10 22:45:14 2025 by rpki-client