$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa File: 2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa (raw, json) Hash identifier: 2A8TZV6Rf9+1SXEZr38OE6uy+2Zwt98W25JYj4gByxg= Subject key identifier: A5:80:67:7B:5B:C9:78:0B:48:30:9B:BB:CA:95:41:30:87:DB:76:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ACE0BA8F17F7B360083DC3300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a8:f1:7f:7b:36:00:83:dc:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=04cc96d2-b625-4c92-9630-623cb0e48372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:94:48:bf:23:6b:7c:04:c9:2c:9a:4b:a8: 9a:f6:4f:42:f0:cc:d5:87:f3:e2:05:7f:8d:87:b3: c4:a3:31:9d:95:52:8c:6f:59:cc:34:c0:a6:de:0a: fc:3d:64:32:a6:f7:26:78:20:7d:4d:09:d0:b7:de: 5d:2a:81:38:0f:af:ba:aa:ad:2d:8c:71:5d:00:c0: 99:f4:90:79:5f:16:19:73:07:3a:25:de:84:cb:d8: 13:1f:f1:36:7c:4a:cf:7a:93:03:79:0f:5f:79:b9: 3e:c8:96:76:6f:d9:81:9c:b3:cb:7b:2d:7a:44:e4: d7:fc:a9:09:45:36:4e:96:da:15:52:98:cc:b9:49: 0c:5a:1a:da:5a:63:2b:a6:0c:48:df:d9:9c:e3:fa: 80:1a:1b:1a:0f:1b:e3:3b:1c:8f:ac:7f:dd:ef:36: c1:5e:7c:a3:b2:bc:b8:0b:d0:56:13:79:c1:34:40: 83:0b:1f:58:c6:02:50:50:ea:11:55:c2:09:4e:4a: 23:fe:e5:8f:55:17:2a:b5:f6:cc:7c:44:b7:41:93: 3a:a2:dc:59:9c:7f:ea:ac:8f:5f:d0:11:97:6b:96: 63:03:2e:ad:60:a5:73:c9:90:9e:e8:8a:0b:ae:ab: ff:0e:47:ec:1d:73:15:31:a9:c0:80:24:8e:28:21: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:67:7B:5B:C9:78:0B:48:30:9B:BB:CA:95:41:30:87:DB:76:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e2:6c:25:d2:42:78:0b:65:9c:a2:34:5e:55:b8:14:c6:e8: ed:1c:12:88:fa:7d:04:1b:48:7a:bc:3b:ad:54:97:f9:25:c5: ec:6c:06:c4:24:cd:f4:2a:96:54:54:1e:f6:1d:38:39:7b:7b: 03:55:54:78:11:84:16:30:ad:c7:10:2c:9f:5a:ab:8c:1e:11: 60:60:ea:75:f4:8a:fb:20:9d:a4:aa:9e:29:ca:a6:95:d5:a9: da:06:9e:9a:9d:0c:3d:5b:de:f1:36:c5:14:70:d6:e1:cf:d6: 9d:55:c1:e8:e9:41:29:a5:c9:cf:13:0b:14:54:06:9d:f1:48: ef:e7:b0:41:80:ba:86:b9:bb:b2:25:1d:ea:9a:fd:8d:9b:e6: 41:b1:d5:68:b4:3c:89:7a:7a:c9:2d:80:bd:aa:d9:c8:f7:2f: 4b:5d:8e:95:34:a9:72:21:18:d7:de:dd:04:ae:8d:f8:bf:ee: cd:8d:a8:93:46:55:76:85:aa:5f:7c:3d:29:65:28:13:2d:c0: 76:e8:82:5a:13:63:9f:09:91:a8:ab:4b:e9:42:79:07:66:0f: 71:82:53:2f:9c:a0:2f:c7:56:67:d7:d0:45:0b:a2:94:f4:44: e3:d8:c7:81:78:c1:82:d1:4c:41:75:db:f4:33:97:58:69:93: 13:fb:d8:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC6jxf3s2AIPcMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MDRjYzk2ZDItYjYyNS00YzkyLTk2MzAtNjIzY2IwZTQ4MzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPuUSL8ja3wEySyaS6ia9k9C8MzVh/PiBX+N h7PEozGdlVKMb1nMNMCm3gr8PWQypvcmeCB9TQnQt95dKoE4D6+6qq0tjHFdAMCZ 9JB5XxYZcwc6Jd6Ey9gTH/E2fErPepMDeQ9febk+yJZ2b9mBnLPLey16ROTX/KkJ RTZOltoVUpjMuUkMWhraWmMrpgxI39mc4/qAGhsaDxvjOxyPrH/d7zbBXnyjsry4 C9BWE3nBNECDCx9YxgJQUOoRVcIJTkoj/uWPVRcqtfbMfES3QZM6otxZnH/qrI9f 0BGXa5ZjAy6tYKVzyZCe6IoLrqv/DkfsHXMVManAgCSOKCEwfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWAZ3tbyXgLSDCbu8qVQTCH23aQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmIzNDFjM2EtN2UwOS0z YjRiLWJkMmUtZTllYTcwNzE4ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTibCXSQngLZZyiNF5VuBTG6O0cEoj6fQQbSHq8O61Ul/klxexs BsQkzfQqllRUHvYdODl7ewNVVHgRhBYwrccQLJ9aq4weEWBg6nX0ivsgnaSqninK ppXVqdoGnpqdDD1b3vE2xRRw1uHP1p1VwejpQSmlyc8TCxRUBp3xSO/nsEGAuoa5 u7IlHeqa/Y2b5kGx1Wi0PIl6esktgL2q2cj3L0tdjpU0qXIhGNfe3QSujfi/7s2N qJNGVXaFql98PSllKBMtwHbogloTY58JkairS+lCeQdmD3GCUy+coC/HVmfX0EUL opT0ROPYx4F4wYLRTEF12/Qzl1hpkxP72Jo= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:22 2025 by rpki-client