$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa File: 0ce43444-5445-3b38-9dde-0ea04e7b3145.roa (raw, json) Hash identifier: lB7m7QkPRtXr/ul6+Qj6u3foGAL/M2lFOwHqsmSkDr4= Subject key identifier: 0C:BA:D1:3A:EC:5C:EF:05:18:C2:A8:BA:93:A7:94:5B:C4:E1:D3:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15CC687C1C74420483040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396578 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5c:c6:87:c1:c7:44:20:48:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=33797e10-c646-4fc6-979b-8c14cb3b1996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:4b:16:a2:fa:07:74:33:68:a5:4f:68:b8: 5e:d4:8c:04:9a:54:27:99:19:76:a5:39:a1:c6:99: 65:04:47:41:cd:8e:bd:f9:f3:d6:46:d8:15:d1:81: d0:07:25:7a:ba:37:09:b5:ff:aa:a3:e8:d0:d3:46: ea:73:b5:b8:96:1c:c9:80:30:ae:41:20:ff:0c:45: 75:05:e6:fd:62:d1:e4:fc:5d:5a:67:2c:93:62:fd: 15:4f:7f:87:ec:e2:be:b7:90:34:0d:b0:0b:23:0e: 7a:c9:76:9c:a5:c1:64:44:0c:f0:3d:35:02:a6:97: d2:12:a7:1c:02:84:71:a4:27:3e:b9:d8:bc:85:43: a3:2c:2f:f6:86:d8:ef:45:07:5d:a1:58:4a:92:9c: 4e:3b:d9:5e:d1:c9:fb:5b:c0:af:b7:0e:f8:e3:18: 3e:96:41:f1:68:02:cf:36:4c:ef:f8:46:5d:cb:b4: 97:60:60:a8:61:e5:80:c0:8c:83:63:82:fc:a5:22: 61:50:d1:17:5c:b9:7b:fa:b5:15:ca:90:f1:2e:f2: 52:65:59:2f:d8:51:af:42:33:d7:db:8f:9b:e2:7b: c8:d9:7c:25:0e:93:c5:f2:ff:b9:a7:0b:72:6e:c7: 80:5d:9f:35:28:06:41:8b:91:e5:1e:63:e3:15:f2: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:D1:3A:EC:5C:EF:05:18:C2:A8:BA:93:A7:94:5B:C4:E1:D3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:49:6f:0a:a5:15:ef:28:6b:9c:92:e8:f5:bd:10:4c:5c:2b: 79:18:f3:2d:d5:fa:7e:c1:a0:01:18:00:0f:47:a8:be:c6:37: d2:04:f9:4b:38:c3:95:c5:c5:fc:30:e2:a3:0f:02:7f:d5:a3: f4:71:d6:7e:08:7a:b0:33:75:56:9a:c8:f4:e4:6e:3f:61:83: 79:b7:45:ec:a0:e8:74:1c:d2:82:8d:fe:f8:91:28:d4:f5:85: cf:90:f1:4f:c8:55:ed:b8:a0:f8:1f:81:f6:53:46:d6:06:63: d7:b9:3c:af:d3:6b:c1:54:82:35:b9:0e:54:59:b0:fb:c8:a5: 59:49:72:ea:52:87:32:2d:0d:28:24:39:19:4d:48:9f:af:0b: 4b:26:ef:2d:50:9d:76:03:aa:81:1b:12:69:6b:76:33:b3:22: 75:71:8b:90:83:b1:ce:07:7f:6c:51:c1:de:4a:4a:a2:c1:77: 01:f4:ea:ea:07:9b:85:64:05:3b:dc:66:92:66:8b:1c:9f:f2: b4:51:ce:19:8b:eb:25:3c:cf:e5:54:db:e6:f7:5e:99:ca:ca: 76:ff:32:92:c1:2b:3b:2e:dd:3b:c9:0f:be:d5:21:35:4f:57: 66:c8:f1:d7:0a:41:4b:41:1e:e6:1c:c2:49:2f:9d:a5:17:18: 93:05:3b:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VzGh8HHRCBIMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MzM3OTdlMTAtYzY0Ni00ZmM2LTk3OWItOGMxNGNiM2IxOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmhLFqL6B3QzaKVPaLhe1IwEmlQnmRl2pTmh xpllBEdBzY69+fPWRtgV0YHQByV6ujcJtf+qo+jQ00bqc7W4lhzJgDCuQSD/DEV1 Beb9YtHk/F1aZyyTYv0VT3+H7OK+t5A0DbALIw56yXacpcFkRAzwPTUCppfSEqcc AoRxpCc+udi8hUOjLC/2htjvRQddoVhKkpxOO9le0cn7W8Cvtw744xg+lkHxaALP Nkzv+EZdy7SXYGCoYeWAwIyDY4L8pSJhUNEXXLl7+rUVypDxLvJSZVkv2FGvQjPX 24+b4nvI2XwlDpPF8v+5pwtybseAXZ81KAZBi5HlHmPjFfJRHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAy60TrsXO8FGMKoupOnlFvE4dNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNlNDM0NDQtNTQ0NS0z YjM4LTlkZGUtMGVhMDRlN2IzMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1JbwqlFe8oa5yS6PW9EExcK3kY8y3V+n7BoAEYAA9HqL7GN9IE +Us4w5XFxfww4qMPAn/Vo/Rx1n4IerAzdVaayPTkbj9hg3m3Reyg6HQc0oKN/viR KNT1hc+Q8U/IVe24oPgfgfZTRtYGY9e5PK/Ta8FUgjW5DlRZsPvIpVlJcupShzIt DSgkORlNSJ+vC0sm7y1QnXYDqoEbEmlrdjOzInVxi5CDsc4Hf2xRwd5KSqLBdwH0 6uoHm4VkBTvcZpJmixyf8rRRzhmL6yU8z+VU2+b3XpnKynb/MpLBKzsu3TvJD77V ITVPV2bI8dcKQUtBHuYcwkkvnaUXGJMFO9c= -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:11 2025 by rpki-client