$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa File: 43e649a5-8c17-35bf-89e2-67bb6324e681.roa (raw, json) Hash identifier: S6fPCAV+qGX7AjJUrTcHE+XePvI75ZrnfDsU7lmJXmA= Subject key identifier: 85:5D:0F:48:AF:15:4E:2B:6C:68:BD:24:5E:D3:2B:2A:89:A7:7F:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F159F94FAB5B5FD5200B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 397194 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:f9:4f:ab:5b:5f:d5:20:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=d1b6ecb5-e9ce-4127-bfd9-46e510429ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:8f:6c:44:c9:cb:f3:48:ef:e3:9d:6b:7e: 07:3d:07:21:6d:b3:48:06:de:51:7b:30:00:8e:a2: 1c:0d:d7:a5:33:18:a3:7f:a9:40:8a:d3:d2:83:29: b1:2f:23:24:b8:e6:7c:8b:3d:cd:6d:04:e9:a0:e9: 1c:df:e4:f1:64:12:6b:58:cc:be:8c:88:a6:f5:f4: c3:08:63:22:37:b0:ad:d7:74:19:74:83:b4:eb:a7: 80:c6:77:17:5d:6a:f7:b3:01:35:08:ff:5f:b8:63: 0d:fb:e8:ef:3f:cd:78:49:d0:e2:b6:5f:f0:eb:b6: b3:47:13:a5:f6:5c:48:88:7e:a1:e3:5d:07:59:36: ca:76:8a:56:4b:2c:a0:2b:d8:b8:f9:82:c6:b6:7e: 35:f1:40:d5:c5:8d:b4:81:93:6b:47:0a:4a:09:d7: 84:1f:d4:0d:f8:64:15:13:e0:a7:48:b6:4a:c2:26: a4:25:67:96:55:1f:ed:f0:d1:96:d0:86:88:a8:20: 7d:cb:6a:8c:60:21:f8:8f:5a:44:a5:23:48:17:16: 1e:f7:a0:a3:58:e2:32:12:1e:d2:ab:ba:ef:42:21: f5:ef:38:d5:84:53:41:1a:38:9a:6e:46:f3:54:f8: e1:b5:e7:8e:44:e9:ea:aa:78:50:98:bd:a8:07:5b: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:0F:48:AF:15:4E:2B:6C:68:BD:24:5E:D3:2B:2A:89:A7:7F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:db:28:77:9f:1f:c6:54:06:3d:5d:71:06:0c:1b:0e:18:b4: 27:80:0f:d0:f1:e6:36:ff:d8:9f:38:cb:f9:55:35:9a:17:db: 79:c3:b5:2c:85:82:e8:d8:7a:05:d6:55:94:4b:60:c1:19:76: d6:94:9a:cf:0a:16:70:e5:fa:19:64:2c:6c:0f:8d:b5:bb:af: 21:7d:04:b3:c7:78:e6:34:a8:fa:eb:4d:23:f6:31:96:e5:bf: 70:3c:a1:24:91:a9:f1:a1:59:23:f4:95:46:57:2a:f8:e7:bb: 1e:7f:0f:15:25:33:f6:ea:84:48:ba:a6:15:38:ef:d8:91:d5: 0a:c8:a0:2f:b2:cb:7c:df:ba:f0:3e:9b:44:b0:b1:d5:7a:20: 6f:b2:c0:17:d1:36:9b:5f:08:16:e9:29:90:f0:65:ed:b7:3f: f3:7b:76:97:4a:8c:b9:96:18:27:a4:51:07:1c:0e:7a:cb:1e: 9f:c3:59:56:59:c5:50:1d:8f:9d:55:e8:70:72:0b:06:23:ba: d0:c9:2c:99:56:ec:c1:4b:c9:7c:c7:77:52:6a:dd:d9:94:eb: 20:8b:99:62:b0:dd:3d:26:dd:8c:a0:55:e8:35:86:ac:fa:e6: 13:56:c8:87:15:38:2d:ed:a4:b8:e5:40:1f:ed:7d:9c:6e:ce: f7:a5:9a:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8Vn5T6tbX9UgCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDFiNmVjYjUtZTljZS00MTI3LWJmZDktNDZlNTEwNDI5Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtiPbETJy/NI7+Oda34HPQchbbNIBt5RezAA jqIcDdelMxijf6lAitPSgymxLyMkuOZ8iz3NbQTpoOkc3+TxZBJrWMy+jIim9fTD CGMiN7Ct13QZdIO066eAxncXXWr3swE1CP9fuGMN++jvP814SdDitl/w67azRxOl 9lxIiH6h410HWTbKdopWSyygK9i4+YLGtn418UDVxY20gZNrRwpKCdeEH9QN+GQV E+CnSLZKwiakJWeWVR/t8NGW0IaIqCB9y2qMYCH4j1pEpSNIFxYe96CjWOIyEh7S q7rvQiH17zjVhFNBGjiabkbzVPjhteeOROnqqnhQmL2oB1sXTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVdD0ivFU4rbGi9JF7TKyqJp38jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNjQ5YTUtOGMxNy0z NWJmLTg5ZTItNjdiYjYzMjRlNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjbKHefH8ZUBj1dcQYMGw4YtCeAD9Dx5jb/2J84y/lVNZoX23nD tSyFgujYegXWVZRLYMEZdtaUms8KFnDl+hlkLGwPjbW7ryF9BLPHeOY0qPrrTSP2 MZblv3A8oSSRqfGhWSP0lUZXKvjnux5/DxUlM/bqhEi6phU479iR1QrIoC+yy3zf uvA+m0SwsdV6IG+ywBfRNptfCBbpKZDwZe23P/N7dpdKjLmWGCekUQccDnrLHp/D WVZZxVAdj51V6HByCwYjutDJLJlW7MFLyXzHd1Jq3dmU6yCLmWKw3T0m3YygVeg1 hqz65hNWyIcVOC3tpLjlQB/tfZxuzvelmkU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:05:51 2025 by rpki-client