$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00cd6d55-2a80-39c3-bec8-212dde2f2267.roa File: 00cd6d55-2a80-39c3-bec8-212dde2f2267.roa (raw, json) Hash identifier: 1bQkxJz8g3RLzFNMafmyBgZgLM6p3nSCQ5esAR37ZX4= Subject key identifier: 6C:85:88:1F:87:AF:45:4D:DE:6F:49:58:E3:67:F1:F8:24:01:1B:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15EC15E6E48B441E87500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00cd6d55-2a80-39c3-bec8-212dde2f2267.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396552 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5e:c1:5e:6e:48:b4:41:e8:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=61dfa26b-a017-4c60-8602-b5f04cbc838f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ae:47:b8:2f:c8:03:00:6e:bc:f9:d4:e8:29: 25:72:8d:13:5e:71:53:fb:cc:03:2e:3f:2c:12:4c: 52:03:f1:4c:80:6b:ef:23:9b:72:d6:4e:9c:1a:d8: bd:e1:8d:f8:93:b2:9f:5f:ae:bc:8a:51:2c:00:9e: 27:1d:f5:be:7e:47:61:ab:0e:82:c8:39:7e:c8:95: 1f:79:37:3c:9e:c4:df:c7:1b:3a:51:15:90:aa:f2: 84:e9:73:50:45:82:66:a7:c5:d0:6f:d9:a1:e7:dc: 33:84:66:4d:da:b8:b6:cf:fe:ae:3d:74:ff:91:45: 03:fe:b8:3d:57:95:0a:12:6f:d3:e9:21:c4:3a:8a: 65:60:0d:af:31:86:94:22:92:5f:bb:a5:af:32:58: eb:68:1f:02:64:78:b7:3a:e0:fc:48:33:73:96:a1: 32:66:7b:ad:08:fd:63:4f:9f:78:7b:7d:bf:19:c2: 5d:65:bd:06:8c:b9:50:65:79:34:75:d4:10:5a:67: 69:22:43:a6:8a:18:0d:b8:f6:ce:b0:ec:f1:c7:17: 21:fc:2d:d7:0f:a4:ff:0d:61:c7:09:b8:f7:4a:7a: 80:f5:82:f4:12:c3:a4:19:fc:4e:9c:30:7a:cd:cc: 91:9d:ac:36:fd:75:d3:90:0e:33:53:8b:d3:86:24: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:85:88:1F:87:AF:45:4D:DE:6F:49:58:E3:67:F1:F8:24:01:1B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00cd6d55-2a80-39c3-bec8-212dde2f2267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d7:7f:0a:c8:6e:e2:e5:c1:74:da:66:bc:6c:84:65:17:3a: 41:3a:5e:c9:7d:66:5b:c6:ee:4c:6e:60:56:bd:db:8f:90:c9: 76:56:b6:72:cf:c2:13:b7:cc:99:d4:0e:b4:ab:78:70:4c:e9: 74:39:ef:39:74:b5:1c:fb:0e:4d:04:d9:88:4c:0d:36:00:50: 57:c1:bb:8f:b5:c0:c9:ac:4b:24:d1:83:34:a7:68:8b:f8:22: 2d:bc:f1:e6:f1:82:9a:f8:9f:50:25:d2:67:70:2d:f5:a5:4c: d5:00:2a:25:16:85:d0:99:23:cf:7c:ed:7b:e6:19:e0:5c:6c: 65:fc:79:bc:c0:39:45:0b:6f:95:a3:42:be:56:98:88:82:59: db:17:9e:ae:6e:5f:99:c4:24:6a:3f:cc:30:7e:a9:64:ac:8e: 02:81:65:e7:95:32:ae:d3:21:5d:c0:d8:7e:6b:ea:de:33:18: c0:a4:75:e1:5b:9e:af:8b:1e:88:de:3a:53:4c:2c:56:89:18: d8:df:31:f4:96:71:67:6b:00:3d:01:ed:93:50:65:6b:e0:15: a8:bc:4d:03:c6:6d:33:02:ac:09:57:c3:78:f3:48:77:c0:b7: ac:f1:af:44:c4:23:c2:9c:60:3d:d9:2d:14:d1:d1:6e:78:55: 50:3f:e3:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V7BXm5ItEHodQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NjFkZmEyNmItYTAxNy00YzYwLTg2MDItYjVmMDRjYmM4MzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja5HuC/IAwBuvPnU6Cklco0TXnFT+8wDLj8s EkxSA/FMgGvvI5ty1k6cGti94Y34k7KfX668ilEsAJ4nHfW+fkdhqw6CyDl+yJUf eTc8nsTfxxs6URWQqvKE6XNQRYJmp8XQb9mh59wzhGZN2ri2z/6uPXT/kUUD/rg9 V5UKEm/T6SHEOoplYA2vMYaUIpJfu6WvMljraB8CZHi3OuD8SDNzlqEyZnutCP1j T594e32/GcJdZb0GjLlQZXk0ddQQWmdpIkOmihgNuPbOsOzxxxch/C3XD6T/DWHH Cbj3SnqA9YL0EsOkGfxOnDB6zcyRnaw2/XXTkA4zU4vThiRC/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGyFiB+Hr0VN3m9JWONn8fgkARsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDBjZDZkNTUtMmE4MC0z OWMzLWJlYzgtMjEyZGRlMmYyMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAITXfwrIbuLlwXTaZrxshGUXOkE6Xsl9ZlvG7kxuYFa924+QyXZW tnLPwhO3zJnUDrSreHBM6XQ57zl0tRz7Dk0E2YhMDTYAUFfBu4+1wMmsSyTRgzSn aIv4Ii288ebxgpr4n1Al0mdwLfWlTNUAKiUWhdCZI8987XvmGeBcbGX8ebzAOUUL b5WjQr5WmIiCWdsXnq5uX5nEJGo/zDB+qWSsjgKBZeeVMq7TIV3A2H5r6t4zGMCk deFbnq+LHojeOlNMLFaJGNjfMfSWcWdrAD0B7ZNQZWvgFai8TQPGbTMCrAlXw3jz SHfAt6zxr0TEI8KcYD3ZLRTR0W54VVA/484= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:22 2025 by rpki-client