$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa File: a5061038-0bb9-3802-a5a4-f801e56e57be.roa (raw, json) Hash identifier: KHshSx7M/VkhAUno5ZTADUyEhS17awTGld/4OYv+bdQ= Subject key identifier: CA:BE:96:F6:7C:29:3C:2A:01:41:14:B8:7C:C5:15:BB:23:BB:D2:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AADF12CE613D36EE702161380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:2c:e6:13:d3:6e:e7:02:16:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=fbc02a51-05b7-472d-8541-a4045702a2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:48:d4:70:be:ac:7f:9e:47:df:8b:03:8e: a7:c3:db:e7:7f:59:4b:5d:94:28:40:71:e9:2e:f8: 8a:98:c2:5f:45:43:47:6c:f3:b0:f0:a8:26:5b:1c: a7:34:c0:6a:48:7e:71:f3:2b:fe:54:80:c0:82:2d: b2:cd:80:4c:06:c0:74:10:80:a4:a1:08:11:53:f1: de:61:73:2b:9f:5d:28:22:f8:0c:1c:9f:cf:db:1c: 5f:df:d1:db:78:65:5d:ac:88:91:f2:e1:62:c9:49: 31:5e:e7:6c:37:ec:ee:b5:b2:ff:a2:fc:75:d5:29: 21:d9:27:ca:c8:de:cf:e5:7c:6b:84:19:b9:6d:cb: d0:9b:c7:a4:31:28:a2:79:22:e7:4b:a2:c5:a6:77: 64:db:36:e8:af:1f:bd:32:20:82:49:42:e3:25:11: 3c:63:16:8b:69:63:c1:21:c9:a1:eb:86:29:bf:c5: fa:00:59:88:43:a2:a9:5a:83:11:cd:56:74:85:67: 43:ef:cc:36:7c:28:e2:cf:87:75:5c:09:2c:5a:fe: 81:7c:e5:23:21:11:d9:bf:9e:21:85:d2:61:e2:a1: 4e:05:04:c1:8e:ec:5b:c0:66:96:f3:21:a3:c8:36: e5:98:5d:22:f4:ec:74:bd:2d:b1:94:b6:b8:b1:4a: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BE:96:F6:7C:29:3C:2A:01:41:14:B8:7C:C5:15:BB:23:BB:D2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:df:59:5f:6c:f9:c2:9e:a9:be:14:83:a2:8b:fa:2d:07:cf: f5:1a:04:f1:f3:1d:08:7d:21:ab:ad:be:29:45:ea:86:21:dd: 0f:70:02:8f:57:a3:28:28:c8:d7:f9:ad:b0:88:66:81:39:11: e6:0a:1e:83:5a:9e:00:08:6c:ac:6b:fe:2c:3e:d3:e1:25:20: 52:04:d2:42:82:74:6b:c2:fb:c0:b1:20:28:64:1b:3c:c1:67: 1f:7d:62:b3:b1:8d:c6:31:9f:b8:22:6f:d3:f3:94:39:3a:41: c4:63:ba:58:a5:62:b1:51:2b:3d:6a:56:1d:d3:fd:59:a5:b8: 80:2f:f3:a9:85:d5:38:9b:b1:11:e5:3b:76:f6:f8:de:2b:bc: a5:e7:5d:90:9f:c7:56:71:a6:c2:d6:2b:60:d6:28:9a:4b:38: 1c:7d:3c:9c:6c:d4:5d:55:75:d8:ff:d8:4e:1e:e4:ba:e0:ea: 33:2f:9f:4b:9c:d3:96:1b:53:d7:f5:5a:15:25:a7:5f:2a:cb: c6:19:3a:20:fe:b5:5e:1e:00:11:d2:41:77:9b:9f:0e:61:be: cd:fe:05:0c:59:c2:8d:e5:3b:e8:5f:97:a9:69:cc:79:f1:f9: 97:ac:bc:3e:e1:ea:7d:ba:4c:6a:3c:23:a8:e4:36:84:c7:eb: 0f:bd:9d:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8SzmE9Nu5wIWE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZmJjMDJhNTEtMDViNy00NzJkLTg1NDEtYTQwNDU3MDJhMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GlI1HC+rH+eR9+LA46nw9vnf1lLXZQoQHHp LviKmMJfRUNHbPOw8KgmWxynNMBqSH5x8yv+VIDAgi2yzYBMBsB0EICkoQgRU/He YXMrn10oIvgMHJ/P2xxf39HbeGVdrIiR8uFiyUkxXudsN+zutbL/ovx11Skh2SfK yN7P5XxrhBm5bcvQm8ekMSiieSLnS6LFpndk2zborx+9MiCCSULjJRE8YxaLaWPB Icmh64Ypv8X6AFmIQ6KpWoMRzVZ0hWdD78w2fCjiz4d1XAksWv6BfOUjIRHZv54h hdJh4qFOBQTBjuxbwGaW8yGjyDblmF0i9Ox0vS2xlLa4sUrHOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMq+lvZ8KTwqAUEUuHzFFbsju9K/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUwNjEwMzgtMGJiOS0z ODAyLWE1YTQtZjgwMWU1NmU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIffWV9s+cKeqb4Ug6KL+i0Hz/UaBPHzHQh9IautvilF6oYh3Q9w Ao9XoygoyNf5rbCIZoE5EeYKHoNangAIbKxr/iw+0+ElIFIE0kKCdGvC+8CxIChk GzzBZx99YrOxjcYxn7gib9PzlDk6QcRjulilYrFRKz1qVh3T/VmluIAv86mF1Tib sRHlO3b2+N4rvKXnXZCfx1ZxpsLWK2DWKJpLOBx9PJxs1F1Vddj/2E4e5Lrg6jMv n0uc05YbU9f1WhUlp18qy8YZOiD+tV4eABHSQXebnw5hvs3+BQxZwo3lO+hfl6lp zHnx+ZesvD7h6n26TGo8I6jkNoTH6w+9ndU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:18 2025 by rpki-client