$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa File: 0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa (raw, json) Hash identifier: wM/BhJlihdNxA+hxVbVNCcwd+OT7D3w0Y0XJUdvA4HE= Subject key identifier: 27:88:02:8D:13:7F:E0:76:14:C3:41:F1:57:D2:BF:B9:B3:14:2E:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15B4B0F3C454B91D56E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36628 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5b:4b:0f:3c:45:4b:91:d5:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=1bdfcf8e-2e36-49b2-8d8d-bb526e385c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:90:95:10:f4:50:29:b8:4e:36:92:b3:82: 9b:70:a4:d0:6e:19:2a:15:1f:b5:46:aa:11:3d:a2: f0:67:8f:bf:63:1c:e8:10:07:c2:84:41:05:f0:11: b2:91:9e:ac:33:86:00:96:eb:3c:23:0b:5a:ee:6f: 96:dd:13:d3:48:97:6b:c1:8a:cb:01:2a:0c:d3:b3: 4a:f4:a7:f4:27:f9:66:2a:e3:1a:b9:d0:2f:81:b0: 61:58:9e:e1:27:79:e6:15:33:85:16:77:0c:c2:72: a4:43:51:db:5f:24:6f:ce:98:df:ad:fe:d5:8c:4c: fc:c1:3d:37:0d:ce:85:8f:64:16:4d:cf:10:a7:cd: 91:79:da:74:86:19:e0:53:c4:c7:af:3a:aa:94:3b: 0f:4f:e5:6e:12:bb:1b:6c:95:cb:e4:d3:6a:99:53: d9:4d:2c:34:04:18:4e:b9:6c:61:55:c9:24:13:ef: a5:6a:59:08:f1:bd:ee:7c:40:8e:3b:9f:4a:36:f4: 16:5d:34:4d:f9:6c:63:8d:ff:00:c6:0a:83:2f:ff: c9:69:5d:f3:55:7d:13:4f:6b:60:22:76:ce:a3:9b: d9:36:df:39:de:b5:4c:10:f5:d9:32:86:99:af:a4: 4d:51:cc:e1:8d:20:f6:ca:f2:82:96:72:0b:83:c9: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:88:02:8D:13:7F:E0:76:14:C3:41:F1:57:D2:BF:B9:B3:14:2E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ae:8c:70:b8:9e:67:2a:9f:fc:3b:b0:fc:20:35:be:5f:eb: 1b:cf:b9:d0:47:7e:f8:25:76:18:91:83:c6:4d:8f:45:25:1c: c5:a5:29:43:e8:46:ac:67:8a:af:b4:3a:20:bf:5c:cb:cd:a2: 08:6d:df:60:68:27:07:23:b5:08:b5:e2:af:ee:d0:1a:34:17: 9d:13:88:47:ec:a1:8f:ba:39:f4:1d:2a:2d:d4:22:a6:ca:f9: f6:0d:71:7d:05:ae:9b:90:ef:ec:e8:4d:ea:6f:8b:06:44:da: fa:a9:97:fe:95:fd:c8:f2:d7:ad:78:c9:bb:8a:29:90:68:7a: 75:98:f0:1e:ea:63:20:fa:b6:5a:ce:1d:3c:59:e5:7c:c3:ce: 70:c7:e4:27:f0:d2:29:63:9d:0c:2a:8e:18:3a:e4:0a:34:7e: ba:7e:aa:8f:87:3f:0a:18:24:69:8f:6e:5a:33:d2:a5:7f:5f: e9:bd:d9:d0:39:9e:c3:b9:ad:33:05:34:09:77:f7:cd:e9:c6: 20:5e:a2:51:a8:0a:6d:ad:26:04:1d:3a:79:34:55:dd:04:33: 3e:5e:e3:c0:be:74:1f:e4:8f:64:4d:fb:da:c1:e7:55:35:2f: 5b:26:fa:04:5e:6f:a1:1d:8c:30:33:6f:8a:8c:cc:ba:7c:df: b8:a0:3e:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VtLDzxFS5HVboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MWJkZmNmOGUtMmUzNi00OWIyLThkOGQtYmI1MjZlMzg1YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSOQlRD0UCm4TjaSs4KbcKTQbhkqFR+1RqoR PaLwZ4+/YxzoEAfChEEF8BGykZ6sM4YAlus8Iwta7m+W3RPTSJdrwYrLASoM07NK 9Kf0J/lmKuMaudAvgbBhWJ7hJ3nmFTOFFncMwnKkQ1HbXyRvzpjfrf7VjEz8wT03 Dc6Fj2QWTc8Qp82Redp0hhngU8THrzqqlDsPT+VuErsbbJXL5NNqmVPZTSw0BBhO uWxhVckkE++lalkI8b3ufECOO59KNvQWXTRN+Wxjjf8AxgqDL//JaV3zVX0TT2tg InbOo5vZNt853rVMEPXZMoaZr6RNUczhjSD2yvKClnILg8kV0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCeIAo0Tf+B2FMNB8VfSv7mzFC7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGM3NjkwZjctYzAyMS0z OTQwLTg3YjctMGUyY2M3YzZlOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABKujHC4nmcqn/w7sPwgNb5f6xvPudBHfvgldhiRg8ZNj0UlHMWl KUPoRqxniq+0OiC/XMvNoght32BoJwcjtQi14q/u0Bo0F50TiEfsoY+6OfQdKi3U IqbK+fYNcX0FrpuQ7+zoTepviwZE2vqpl/6V/cjy1614ybuKKZBoenWY8B7qYyD6 tlrOHTxZ5XzDznDH5Cfw0iljnQwqjhg65Ao0frp+qo+HPwoYJGmPbloz0qV/X+m9 2dA5nsO5rTMFNAl3983pxiBeolGoCm2tJgQdOnk0Vd0EMz5e48C+dB/kj2RN+9rB 51U1L1sm+gReb6EdjDAzb4qMzLp837igPoI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:54:21 2025 by rpki-client