$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ca137e6-3557-3555-973a-862573fd4652.roa File: 0ca137e6-3557-3555-973a-862573fd4652.roa (raw, json) Hash identifier: Tq+WUN5MX87KrRxqBV06uA75O/BghGZ4KQlRjjcLdr4= Subject key identifier: 77:66:F5:99:57:4C:FC:1F:73:E4:4B:F0:40:8D:C3:32:BD:C9:8D:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F159B6AA4FE1DF748C7E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ca137e6-3557-3555-973a-862573fd4652.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 397203 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:b6:aa:4f:e1:df:74:8c:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=dd1eb33d-38da-4ead-a8f4-4412b3de7645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:3f:a2:06:ea:ad:7c:f1:9d:64:f6:05:23: 5b:bf:e9:19:8a:19:11:89:87:6f:29:3c:07:ec:82: c1:1a:c3:a5:f6:5b:75:96:0c:52:c6:33:1a:3e:74: 3b:c3:db:8c:a3:d2:23:0c:d0:8b:3a:6e:4c:6c:41: 50:88:db:43:f6:ed:76:3c:9e:25:9b:e2:17:a4:d5: 81:ac:bd:dc:b4:e3:47:6d:c8:12:95:3a:54:fd:86: 05:3f:40:45:6d:c2:38:77:0f:1b:49:b2:60:e5:93: 89:8e:cf:07:2a:9c:20:a6:a3:ff:c4:a7:7b:2d:cb: 51:d6:77:17:bb:02:d8:73:69:36:7c:b0:6a:28:a1: bb:52:31:fe:34:be:cb:b8:2d:40:ec:af:79:00:0e: 8b:e0:4a:ff:de:f5:6d:2d:09:90:6e:5f:77:ba:cf: 9a:93:f3:09:9e:6c:ae:0c:a4:cf:fc:f5:41:70:25: 5c:e9:07:24:b3:d4:95:a3:64:58:67:c7:a2:ea:0d: 18:1b:51:d6:82:40:12:03:b1:05:da:a3:20:8c:03: ee:94:18:11:6f:54:19:72:1b:4b:2f:c0:a3:52:99: 26:d4:01:60:d0:b3:aa:14:03:91:f6:21:27:20:87: 25:75:2c:19:23:3f:9e:f2:b0:4f:fb:8d:5b:c0:6d: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:F5:99:57:4C:FC:1F:73:E4:4B:F0:40:8D:C3:32:BD:C9:8D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ca137e6-3557-3555-973a-862573fd4652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c5:04:25:f9:51:85:7e:25:2a:6b:0e:a8:4e:b2:12:12:8c: 90:3d:c9:b2:c7:f4:3b:be:8b:9e:1d:02:77:cd:eb:36:06:93: 06:5c:f9:01:a9:1d:77:08:7d:68:3e:64:3c:e2:8b:8c:fa:c9: b1:39:e4:1c:26:c7:4a:03:5f:bb:cb:45:43:1d:5f:b8:51:76: fe:c4:0b:6c:bd:83:08:b0:d3:37:db:17:6e:1c:86:e9:2a:8a: 59:c4:71:c3:01:eb:de:c2:3f:7f:d2:d2:25:15:8e:62:68:dc: 1a:f7:36:dd:57:6e:d5:45:1d:5e:0a:c1:54:c2:58:8b:7f:ca: 21:f4:08:77:60:13:88:66:2d:74:bf:ed:5f:fd:10:df:51:55: f0:05:50:87:ba:66:bc:1e:b3:4b:a6:df:1e:02:cb:d8:54:6d: d4:99:d1:e2:50:17:60:cb:b7:3a:e8:c6:d8:3f:af:69:cc:2b: 9c:20:d7:4c:69:19:e5:63:7c:0e:59:cb:bb:d5:36:f0:f1:a3: 4a:f1:a3:76:17:92:58:d9:bb:91:d2:2a:72:5a:67:f6:4e:8f: 35:54:40:79:6b:cd:4f:48:1c:e0:ed:8f:63:27:74:54:a2:20: 2c:06:5b:17:b2:cc:45:1e:b3:36:0d:51:b6:aa:0c:85:80:68: 34:70:40:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8Vm2qk/h33SMfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGQxZWIzM2QtMzhkYS00ZWFkLWE4ZjQtNDQxMmIzZGU3NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpU/ogbqrXzxnWT2BSNbv+kZihkRiYdvKTwH 7ILBGsOl9lt1lgxSxjMaPnQ7w9uMo9IjDNCLOm5MbEFQiNtD9u12PJ4lm+IXpNWB rL3ctONHbcgSlTpU/YYFP0BFbcI4dw8bSbJg5ZOJjs8HKpwgpqP/xKd7LctR1ncX uwLYc2k2fLBqKKG7UjH+NL7LuC1A7K95AA6L4Er/3vVtLQmQbl93us+ak/MJnmyu DKTP/PVBcCVc6Qcks9SVo2RYZ8ei6g0YG1HWgkASA7EF2qMgjAPulBgRb1QZchtL L8CjUpkm1AFg0LOqFAOR9iEnIIcldSwZIz+e8rBP+41bwG28qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHdm9ZlXTPwfc+RL8ECNwzK9yY2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNhMTM3ZTYtMzU1Ny0z NTU1LTk3M2EtODYyNTczZmQ0NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArFBCX5UYV+JSprDqhOshISjJA9ybLH9Du+i54dAnfN6zYGkwZc +QGpHXcIfWg+ZDzii4z6ybE55Bwmx0oDX7vLRUMdX7hRdv7EC2y9gwiw0zfbF24c hukqilnEccMB697CP3/S0iUVjmJo3Br3Nt1XbtVFHV4KwVTCWIt/yiH0CHdgE4hm LXS/7V/9EN9RVfAFUIe6Zrwes0um3x4Cy9hUbdSZ0eJQF2DLtzroxtg/r2nMK5wg 10xpGeVjfA5Zy7vVNvDxo0rxo3YXkljZu5HSKnJaZ/ZOjzVUQHlrzU9IHODtj2Mn dFSiICwGWxeyzEUeszYNUbaqDIWAaDRwQJU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:27 2025 by rpki-client