$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa File: 3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa (raw, json) Hash identifier: kiUT4ApF+BI2HgXLB1Kmii7wN4fDZX+yk/OOHY68GIY= Subject key identifier: 2A:DC:9E:6F:57:B1:82:24:21:9C:3B:E0:ED:6F:5E:C6:4F:60:B7:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15999E4026C8B96A3EC15 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 27544 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:99:e4:02:6c:8b:96:a3:ec:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=3c94cea1-584a-4239-a32e-24189e6e88ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:6d:57:3e:1d:c4:68:ba:b5:a9:b1:9d:69: 6d:51:44:e7:6d:88:27:66:d7:c8:fa:4d:a7:95:68: 52:2a:fa:f7:4a:74:9b:c4:28:04:d3:d7:fc:f0:10: fb:8d:0f:8b:f4:17:8c:c9:74:a6:f0:83:0f:c7:cb: 92:37:b4:39:3c:56:fb:2a:f1:eb:ca:c6:d0:d6:c9: da:7d:36:27:3a:67:93:5e:ec:68:7d:67:4f:e9:06: d4:3d:e5:ec:fe:e8:9f:58:1e:72:c0:d8:98:45:dc: 4a:5b:7b:43:db:35:db:35:0a:4f:15:1d:23:50:45: b2:ba:e1:5b:98:4d:a7:bc:de:25:ed:2e:b6:ce:72: c6:12:35:d7:3a:1c:d9:7b:07:a2:32:6a:b8:65:4a: fa:31:af:15:ce:8e:3a:3e:b0:6c:53:46:27:36:74: b2:0c:60:e1:09:5e:76:90:18:19:de:dd:d5:92:90: b9:7a:82:c1:9e:f5:d1:9a:04:40:6b:5d:cc:dc:a0: 53:77:ea:ac:47:33:44:a4:c6:70:b8:b8:b7:4c:3a: a1:c6:b1:80:6d:7a:4b:54:d0:3c:46:c0:2c:40:7a: b5:78:35:4a:7f:b7:ba:27:2a:63:a1:b0:cd:cb:4d: ce:7b:f3:f2:ab:9c:7d:05:5e:a4:3c:84:78:1e:65: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:9E:6F:57:B1:82:24:21:9C:3B:E0:ED:6F:5E:C6:4F:60:B7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6c:99:f3:c8:79:1b:a7:f3:ad:7f:40:e4:a1:75:08:16:9a: 7b:35:fb:05:d8:1a:18:c9:a8:38:a8:e3:86:53:96:b7:86:b0: 0a:03:68:66:50:72:66:d8:04:10:f4:7c:eb:58:6d:8b:99:37: 9d:80:1d:56:b0:28:b5:79:a8:a8:cb:57:33:79:1b:22:e1:21: 24:a4:15:73:fd:65:49:51:2b:2c:f6:6b:23:1d:28:4a:aa:27: 99:9e:b7:6d:6e:4c:60:1e:fd:d6:02:81:75:08:a5:02:20:c6: 15:91:36:62:fb:e5:8c:7c:d1:a4:e7:4b:82:4a:df:04:49:d0: fa:32:ae:a7:55:0a:93:96:8f:a8:2f:ea:18:0f:d1:24:29:24: d4:2b:c3:34:2a:32:86:a0:57:d1:0b:18:6c:b0:67:0b:db:42: 19:d4:6e:2f:ca:33:31:da:e7:1c:81:a3:54:c0:45:cd:74:6a: 14:ba:9b:a2:75:63:b2:fd:ee:7b:63:ff:7d:ff:01:6c:27:a9: 99:17:72:b3:67:97:a9:50:e6:9b:90:be:e0:c0:3a:e7:7e:23: 1a:0c:bf:fa:36:65:f4:d7:ab:87:3e:75:8d:f7:aa:37:56:f3: c4:4c:37:d9:02:24:42:20:38:db:bd:60:a7:c3:54:66:47:ad: b5:66:0e:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VmZ5AJsi5aj7BUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk M2M5NGNlYTEtNTg0YS00MjM5LWEzMmUtMjQxODllNmU4OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozNtVz4dxGi6tamxnWltUUTnbYgnZtfI+k2n lWhSKvr3SnSbxCgE09f88BD7jQ+L9BeMyXSm8IMPx8uSN7Q5PFb7KvHrysbQ1sna fTYnOmeTXuxofWdP6QbUPeXs/uifWB5ywNiYRdxKW3tD2zXbNQpPFR0jUEWyuuFb mE2nvN4l7S62znLGEjXXOhzZeweiMmq4ZUr6Ma8Vzo46PrBsU0YnNnSyDGDhCV52 kBgZ3t3VkpC5eoLBnvXRmgRAa13M3KBTd+qsRzNEpMZwuLi3TDqhxrGAbXpLVNA8 RsAsQHq1eDVKf7e6JypjobDNy03Oe/Pyq5x9BV6kPIR4HmXMdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCrcnm9XsYIkIZw74O1vXsZPYLerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Q3ZDViZWQtMzE4My0z ZjllLTgyYWYtZWU0ZTg2M2IxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdsmfPIeRun861/QOShdQgWmns1+wXYGhjJqDio44ZTlreGsAoD aGZQcmbYBBD0fOtYbYuZN52AHVawKLV5qKjLVzN5GyLhISSkFXP9ZUlRKyz2ayMd KEqqJ5met21uTGAe/dYCgXUIpQIgxhWRNmL75Yx80aTnS4JK3wRJ0PoyrqdVCpOW j6gv6hgP0SQpJNQrwzQqMoagV9ELGGywZwvbQhnUbi/KMzHa5xyBo1TARc10ahS6 m6J1Y7L97ntj/33/AWwnqZkXcrNnl6lQ5puQvuDAOud+IxoMv/o2ZfTXq4c+dY33 qjdW88RMN9kCJEIgONu9YKfDVGZHrbVmDsA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:15 2025 by rpki-client