$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa File: 43e3ea64-26d8-3cc3-afce-3d6761763a84.roa (raw, json) Hash identifier: QN7+247jNL58gbfrhOJtlKoXI9ju3kRHrEy5QQCE+bw= Subject key identifier: 5E:D4:81:BA:A7:F7:47:FF:AF:FE:6D:6E:E0:35:61:0E:55:5B:39:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15D9487896F9406628040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396562 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:94:87:89:6f:94:06:62:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=bbc7b683-43de-4037-81f3-7278ae3c82b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4b:48:08:ef:4b:2e:95:bd:02:ab:43:ad:f9: 20:ee:68:5b:24:ab:f1:5c:db:58:df:22:71:cf:37: 91:1f:01:5d:d6:2f:7d:19:3d:97:3d:f0:75:e6:ff: 2f:eb:34:6a:e0:24:65:58:85:9c:94:9f:7d:b7:bf: 75:81:37:80:0f:88:18:99:4b:e7:7a:8f:6f:aa:2b: 68:73:81:86:ce:06:aa:02:5c:23:0d:12:d0:41:e3: 63:a8:a6:3e:f4:15:32:dd:cd:15:df:3a:fe:b9:4f: 86:8f:9c:53:16:6b:a8:4a:c6:88:f2:27:1f:ce:51: 09:ac:65:1b:22:ce:ca:fa:45:69:6d:34:81:31:92: a6:50:03:3e:74:ab:80:cf:07:d2:02:ee:60:35:3c: 29:ac:97:6a:33:54:01:15:66:8b:f5:ad:bf:80:0e: 72:79:f3:20:5d:57:67:cd:db:71:32:b7:b2:93:59: 23:e6:88:7f:b6:27:dd:d7:40:f1:ed:5a:a3:e4:e5: fa:a0:bc:ee:0e:53:17:44:9b:9a:16:fe:a5:e0:7e: 35:e6:d1:0a:04:7d:8d:19:9f:42:f5:59:a0:7d:3b: c2:e1:79:02:5f:52:01:c2:f6:53:46:70:26:fd:43: 6b:c3:43:70:69:04:ee:d6:7d:3c:4a:23:5c:73:31: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D4:81:BA:A7:F7:47:FF:AF:FE:6D:6E:E0:35:61:0E:55:5B:39:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4b:f6:6d:98:ee:54:47:2a:42:70:df:4d:61:fc:a2:02:0d: 8e:7b:7b:af:53:06:40:86:14:13:90:f3:f9:86:16:0e:1b:8e: 81:86:8f:b1:34:21:8b:3b:a2:b8:62:a4:c7:85:6c:14:cb:91: 77:93:62:12:78:ec:67:3d:34:f4:ef:40:14:67:b8:83:31:9f: 56:98:08:72:67:6e:a8:c7:98:0f:df:06:de:3f:41:e0:17:78: 3f:fe:10:3c:7e:2b:0f:5c:b8:75:6b:1f:60:ad:c3:dc:c6:ed: d3:9a:87:05:3f:53:ea:ec:82:73:20:e2:39:aa:48:d5:e1:fc: b3:72:d6:bb:11:cc:18:5f:86:5f:be:83:52:b3:99:ed:b5:65: 8a:ce:9d:7d:55:68:a3:28:6f:65:dc:1d:ac:8e:ea:c2:17:a3: 90:39:da:60:62:fe:af:ec:60:26:f2:4c:72:34:f0:09:01:0b: ec:88:d1:9b:9b:0f:10:4f:89:f4:3b:0f:39:f8:33:7a:80:d4: 31:d8:9b:6d:95:a6:e7:f9:ff:74:d3:a4:59:fc:c1:6e:cd:43: f6:43:62:71:c2:e8:92:e2:ec:72:65:1f:a9:dc:eb:12:67:c6: 30:6d:9e:5c:4b:90:4e:47:0a:5a:07:de:18:da:24:56:97:91: 4e:58:51:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V2Uh4lvlAZigEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YmJjN2I2ODMtNDNkZS00MDM3LTgxZjMtNzI3OGFlM2M4MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEtICO9LLpW9AqtDrfkg7mhbJKvxXNtY3yJx zzeRHwFd1i99GT2XPfB15v8v6zRq4CRlWIWclJ99t791gTeAD4gYmUvneo9vqito c4GGzgaqAlwjDRLQQeNjqKY+9BUy3c0V3zr+uU+Gj5xTFmuoSsaI8icfzlEJrGUb Is7K+kVpbTSBMZKmUAM+dKuAzwfSAu5gNTwprJdqM1QBFWaL9a2/gA5yefMgXVdn zdtxMreyk1kj5oh/tifd10Dx7Vqj5OX6oLzuDlMXRJuaFv6l4H415tEKBH2NGZ9C 9VmgfTvC4XkCX1IBwvZTRnAm/UNrw0NwaQTu1n08SiNcczHC3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7Ugbqn90f/r/5tbuA1YQ5VWzllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlM2VhNjQtMjZkOC0z Y2MzLWFmY2UtM2Q2NzYxNzYzYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZL9m2Y7lRHKkJw301h/KICDY57e69TBkCGFBOQ8/mGFg4bjoGG j7E0IYs7orhipMeFbBTLkXeTYhJ47Gc9NPTvQBRnuIMxn1aYCHJnbqjHmA/fBt4/ QeAXeD/+EDx+Kw9cuHVrH2Ctw9zG7dOahwU/U+rsgnMg4jmqSNXh/LNy1rsRzBhf hl++g1Kzme21ZYrOnX1VaKMob2XcHayO6sIXo5A52mBi/q/sYCbyTHI08AkBC+yI 0ZubDxBPifQ7Dzn4M3qA1DHYm22Vpuf5/3TTpFn8wW7NQ/ZDYnHC6JLi7HJlH6nc 6xJnxjBtnlxLkE5HCloH3hjaJFaXkU5YUT0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:44:11 2025 by rpki-client