$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07a5174c-90b0-3b1e-be47-84795f6ed775.roa File: 07a5174c-90b0-3b1e-be47-84795f6ed775.roa (raw, json) Hash identifier: KaSn3HYj+BaXqz18ZOZdPX0VnA+vnTsiKrrrmosXPLs= Subject key identifier: 3C:37:50:98:0B:4B:3D:08:F1:AC:05:AB:9F:F6:57:EB:FB:F4:C0:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15A87E2CABFD1670CAA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07a5174c-90b0-3b1e-be47-84795f6ed775.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396543 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5a:87:e2:ca:bf:d1:67:0c:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=b529bd17-50b7-41fd-812c-c7a9dfceae9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:7d:b3:14:02:98:86:72:a8:00:1f:1e:af: b2:89:4f:ef:62:8e:b9:fd:bb:5b:46:19:52:a3:5b: 0e:c9:47:cd:9c:cf:72:65:e6:dd:ee:54:a3:57:aa: 7a:12:f4:ba:40:61:fc:23:97:1c:79:72:2d:31:df: 07:13:09:3e:91:d1:4d:ef:60:98:25:d6:d1:de:f7: a2:b4:1d:50:d3:c9:ff:67:12:ec:6a:a4:9f:30:26: f9:38:03:36:2b:77:4b:7e:56:2b:ff:d2:24:ef:f8: ec:f1:ce:2e:00:93:45:b3:91:28:16:d9:cd:72:f7: 5a:97:c9:a6:ff:39:ec:c2:55:f0:d1:e4:1e:d0:af: b0:53:22:97:45:1d:ad:9f:12:e4:17:e1:b5:ac:b2: b0:26:20:e1:3d:ee:15:5e:0f:f9:23:f5:32:1e:2f: 01:f9:7c:37:ec:84:4d:ec:25:c6:9c:8c:3c:0c:20: b7:5b:34:c8:eb:36:a9:c4:c6:88:fb:a0:c2:7d:22: 50:76:79:7e:02:ac:4d:59:60:54:63:ab:34:3b:82: 44:ec:d5:3e:c5:0a:63:41:9e:0a:18:e7:40:2c:5e: 1f:58:bf:02:9d:59:a8:fb:66:28:57:49:63:fc:5b: c9:93:27:7c:56:0e:ce:7f:84:8e:c5:9f:05:76:8a: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:37:50:98:0B:4B:3D:08:F1:AC:05:AB:9F:F6:57:EB:FB:F4:C0:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07a5174c-90b0-3b1e-be47-84795f6ed775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:82:e6:11:09:09:a1:a4:e2:88:86:e5:5d:30:7a:e0:8b:80: 7d:f6:d2:f0:91:96:3a:ae:b1:05:07:29:28:b5:a3:ef:13:1e: e2:a2:df:8a:1f:e7:f3:39:39:5c:a3:51:8b:53:67:ce:95:e8: 71:4c:e3:c3:53:5d:c2:d8:95:5e:ab:07:bf:59:a5:31:7e:67: d6:7e:7b:02:31:1d:86:eb:89:25:36:4b:5e:ad:27:d2:a5:50: 11:1f:c0:c6:e9:64:4d:2f:3b:58:01:0f:10:5a:af:56:2d:52: 84:7d:56:ee:c0:b1:ed:93:ad:07:24:10:03:30:bd:05:01:71: a8:48:13:63:24:dc:3c:2a:49:41:af:21:09:7f:ce:46:86:c1: 9e:94:4a:ca:6c:1a:d0:1a:7a:93:85:68:1b:55:79:0f:0c:e4: 7f:e3:ff:66:56:fb:91:e7:50:b5:68:cb:fe:a3:64:7d:32:ec: af:e7:10:9e:76:13:c3:e6:b3:73:38:4a:59:76:7c:a1:fc:22: 66:04:fd:46:de:2b:5d:01:3f:67:1c:8e:9e:36:3b:aa:78:81: 2d:5e:ed:8f:d8:e0:ec:c2:83:7d:ec:4b:64:dc:a5:d7:7c:88: 37:68:eb:4b:db:a5:cd:6d:02:d6:81:6f:9f:57:01:b8:b0:1e: 45:0e:02:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VqH4sq/0WcMqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YjUyOWJkMTctNTBiNy00MWZkLTgxMmMtYzdhOWRmY2VhZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Z9sxQCmIZyqAAfHq+yiU/vYo65/btbRhlS o1sOyUfNnM9yZebd7lSjV6p6EvS6QGH8I5cceXItMd8HEwk+kdFN72CYJdbR3vei tB1Q08n/ZxLsaqSfMCb5OAM2K3dLflYr/9Ik7/js8c4uAJNFs5EoFtnNcvdal8mm /znswlXw0eQe0K+wUyKXRR2tnxLkF+G1rLKwJiDhPe4VXg/5I/UyHi8B+Xw37IRN 7CXGnIw8DCC3WzTI6zapxMaI+6DCfSJQdnl+AqxNWWBUY6s0O4JE7NU+xQpjQZ4K GOdALF4fWL8CnVmo+2YoV0lj/FvJkyd8Vg7Of4SOxZ8FdopFVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDw3UJgLSz0I8awFq5/2V+v79MDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDdhNTE3NGMtOTBiMC0z YjFlLWJlNDctODQ3OTVmNmVkNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWC5hEJCaGk4oiG5V0weuCLgH320vCRljqusQUHKSi1o+8THuKi 34of5/M5OVyjUYtTZ86V6HFM48NTXcLYlV6rB79ZpTF+Z9Z+ewIxHYbriSU2S16t J9KlUBEfwMbpZE0vO1gBDxBar1YtUoR9Vu7Ase2TrQckEAMwvQUBcahIE2Mk3Dwq SUGvIQl/zkaGwZ6USspsGtAaepOFaBtVeQ8M5H/j/2ZW+5HnULVoy/6jZH0y7K/n EJ52E8Pms3M4Sll2fKH8ImYE/UbeK10BP2ccjp42O6p4gS1e7Y/Y4OzCg33sS2Tc pdd8iDdo60vbpc1tAtaBb59XAbiwHkUOArE= -----END CERTIFICATE-----Generated at Sat Aug 23 20:55:26 2025 by rpki-client