$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc1e411-9d4c-35bb-8353-042d39e10802.roa File: 3dc1e411-9d4c-35bb-8353-042d39e10802.roa (raw, json) Hash identifier: PHYYPqCc6FZGIPSzfjw+MQVG63R3yHlNa/ctRm7jdpg= Subject key identifier: 41:82:7D:A2:3F:A2:4E:BE:14:F3:FB:79:04:EE:C2:67:6E:F5:39:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE89139117E8839FAFDA60D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc1e411-9d4c-35bb-8353-042d39e10802.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:39:11:7e:88:39:fa:fd:a6:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=f3748db0-9dc8-4d8a-be96-a31b3e4e9067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:5b:28:ca:b9:21:1e:e9:7d:ba:3b:ad:e9: 1f:2e:d3:59:af:4f:29:52:7d:d5:1c:1c:17:df:3e: 65:85:a2:da:a9:b8:1f:97:71:41:45:9d:3a:ce:35: df:47:1a:1d:f9:10:5c:ac:f5:dd:8f:42:00:a0:c7: 03:cd:e5:76:2b:38:07:22:82:7c:14:7d:40:c4:8f: 0a:75:c6:90:18:95:b1:c6:da:42:3a:2a:ce:d2:53: 2a:1c:ec:9f:08:df:d4:1a:98:93:92:3e:96:10:d9: be:a8:ce:bf:e9:1d:fc:27:37:1b:fa:36:8f:68:b3: 4f:47:79:dc:d3:87:79:32:2e:c4:4d:f0:78:da:e8: e8:a9:6e:6b:e9:32:17:08:29:f2:8e:2d:2c:4e:02: 94:6f:ce:ef:06:3e:0f:7a:13:7a:a7:0a:5a:f5:a1: d2:f8:76:47:34:5e:dd:ee:f3:aa:44:b1:85:1a:a4: 59:12:db:83:c7:d5:c6:93:14:d2:29:8b:ad:22:c1: f8:dc:e7:c4:69:c3:57:d2:28:92:6a:cd:26:58:68: 4f:73:e2:0d:4d:36:06:5e:b9:66:a5:db:7a:ff:60: e3:0c:9c:9a:1d:f2:38:98:fc:ca:6e:4c:d2:c7:15: 29:62:f1:a0:e8:ec:72:49:00:05:e2:ef:e9:ff:38: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:82:7D:A2:3F:A2:4E:BE:14:F3:FB:79:04:EE:C2:67:6E:F5:39:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc1e411-9d4c-35bb-8353-042d39e10802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3d:b2:be:68:c6:5c:d8:99:d5:7f:c2:90:d0:7e:95:e2:57: fb:0d:ed:bd:e6:84:58:85:f2:c8:2f:ee:b2:fe:a8:83:7a:6a: 75:25:da:f2:25:83:18:98:c5:02:e7:f3:19:fe:92:22:69:43: b3:cf:a1:92:36:3d:76:be:5c:3a:6e:c2:59:b1:c7:78:7e:3c: 2d:8b:8d:29:c7:ce:ab:21:7b:ce:d6:95:e6:6b:c3:f3:14:77: 98:f4:df:dd:5a:8a:80:f6:ef:f9:10:af:1d:8d:c5:b3:07:ea: 1d:4d:6f:1a:62:a1:68:75:69:c9:8a:9c:aa:3e:8d:a4:72:7c: 55:6f:28:c3:56:de:a8:6e:61:54:70:03:89:40:29:fe:75:1c: d0:de:70:5e:16:74:94:68:bf:fa:7d:b9:09:3b:d9:b5:15:ea: 6e:b8:a6:a9:e6:46:0c:61:bb:b0:1c:87:5d:0e:3f:c0:b2:d6: b6:9c:87:8b:cd:ff:29:66:b7:dc:52:81:2e:26:84:bd:93:40: ca:fc:08:8f:96:88:16:db:74:b4:dd:7a:61:b6:c5:87:69:a1: 82:3a:9a:c5:08:01:1d:cc:bc:66:64:9d:e1:09:d2:4e:d9:21: 28:1c:c6:bf:4c:15:04:ed:37:10:4b:68:47:81:83:86:4b:a7: c3:a9:6c:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErokTkRfog5+v2mDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZjM3NDhkYjAtOWRjOC00ZDhhLWJlOTYtYTMxYjNlNGU5MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjVbKMq5IR7pfbo7rekfLtNZr08pUn3VHBwX 3z5lhaLaqbgfl3FBRZ06zjXfRxod+RBcrPXdj0IAoMcDzeV2KzgHIoJ8FH1AxI8K dcaQGJWxxtpCOirO0lMqHOyfCN/UGpiTkj6WENm+qM6/6R38Jzcb+jaPaLNPR3nc 04d5Mi7ETfB42ujoqW5r6TIXCCnyji0sTgKUb87vBj4PehN6pwpa9aHS+HZHNF7d 7vOqRLGFGqRZEtuDx9XGkxTSKYutIsH43OfEacNX0iiSas0mWGhPc+INTTYGXrlm pdt6/2DjDJyaHfI4mPzKbkzSxxUpYvGg6OxySQAF4u/p/ziAiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGCfaI/ok6+FPP7eQTuwmdu9TkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RjMWU0MTEtOWQ0Yy0z NWJiLTgzNTMtMDQyZDM5ZTEwODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB89sr5oxlzYmdV/wpDQfpXiV/sN7b3mhFiF8sgv7rL+qIN6anUl 2vIlgxiYxQLn8xn+kiJpQ7PPoZI2PXa+XDpuwlmxx3h+PC2LjSnHzqshe87WleZr w/MUd5j0391aioD27/kQrx2NxbMH6h1NbxpioWh1acmKnKo+jaRyfFVvKMNW3qhu YVRwA4lAKf51HNDecF4WdJRov/p9uQk72bUV6m64pqnmRgxhu7Ach10OP8Cy1rac h4vN/ylmt9xSgS4mhL2TQMr8CI+WiBbbdLTdemG2xYdpoYI6msUIAR3MvGZkneEJ 0k7ZISgcxr9MFQTtNxBLaEeBg4ZLp8OpbIY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:44 2025 by rpki-client