$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa File: 4ad182e9-358b-30a8-9be5-a8e305941580.roa (raw, json) Hash identifier: 18erZtaRRUb/jbYA0utYnS9xO7yERkDFp0QQbIIEgvY= Subject key identifier: FE:1D:C9:C9:F4:F0:B9:02:25:C5:63:13:81:97:29:64:73:D5:68:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AC73544CA8688B625D1E65080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa Signing time: Thu 07 Aug 2025 14:13:57 +0000 ROA not before: Thu 07 Aug 2025 14:13:57 +0000 ROA not after: Wed 05 Nov 2025 15:13:57 +0000 asID: 7342 IP address blocks: 2620:74:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:35:44:ca:86:88:b6:25:d1:e6:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 14:13:57 2025 GMT Not After : Nov 5 15:13:57 2025 GMT Subject: CN=ce7e9e1d-4015-43b8-80ce-433b79b03183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:a4:ee:a7:c2:f4:70:3b:31:ca:3c:13:e6: c6:70:57:ee:a1:b4:93:db:2a:bb:c4:46:63:a3:d4: 42:96:2f:2b:ef:72:dd:4c:79:bc:ae:51:53:5b:af: 06:50:00:62:6e:d9:f3:06:89:cd:ed:41:ed:23:e2: 0b:9c:ee:af:84:82:62:80:f3:10:53:a5:a8:cd:16: da:bb:ee:d4:64:54:05:b1:c2:07:5f:bc:7a:c3:97: 90:9c:9c:51:67:48:93:57:e0:27:c7:87:c6:1e:c5: a3:8b:b7:e7:c3:57:5b:a4:7c:de:82:11:48:9e:9e: 1d:69:8d:ab:31:55:69:d8:b3:16:cf:54:a1:97:5d: a5:17:ba:9d:03:d8:8f:9b:31:35:71:3e:8e:7c:94: 72:63:48:4a:49:8d:76:64:04:02:79:9e:e4:91:91: 1d:1c:d6:07:00:87:9a:cb:f1:30:68:89:bc:ee:db: 5b:3f:ae:e6:ab:27:54:cb:a5:32:1d:6d:af:16:9a: df:e2:dd:31:c3:7b:f0:15:1b:b4:bb:ee:b5:7d:db: 80:14:57:22:2e:b3:3f:56:58:7d:f2:db:12:8d:3b: 6c:39:60:f7:48:4e:0a:12:8b:31:5f:fc:f6:84:15: 6b:8c:c6:ed:b3:a7:0c:6f:6f:d5:a1:5f:88:16:6e: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:C9:C9:F4:F0:B9:02:25:C5:63:13:81:97:29:64:73:D5:68:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:48::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:46:64:06:88:a2:ed:1f:88:45:fb:7a:dc:06:99:b5:0c:6e: 5b:8e:f6:da:2b:2f:37:a5:2a:ea:59:7b:0e:34:52:76:72:52: a8:ae:d2:bf:15:cc:7d:6d:88:68:84:8f:0c:da:c7:e8:3e:07: 85:a5:46:dc:89:86:09:cd:c5:5d:45:7b:60:b5:82:22:09:e4: 97:7b:9b:2c:03:5c:96:b1:6c:a7:20:cb:51:95:7e:08:c3:f5: ee:cc:85:43:7d:c8:80:55:2e:e1:5c:8a:5c:50:2b:4e:d2:83: 5f:1a:20:4d:fb:c0:8c:fa:b9:cd:21:1a:31:4a:92:17:0e:e9: 30:75:d0:b1:b7:0c:cf:9e:b0:17:c8:bc:98:52:55:fd:a5:35: d6:c2:60:20:01:5b:5c:4e:b0:d6:9c:84:70:6a:4f:9a:88:b3: 7f:c3:fe:cc:e1:20:24:34:53:30:6c:4c:ac:34:38:9c:8f:12: 43:b0:3e:77:2a:fa:bf:6e:10:ca:ab:50:1a:89:32:9c:14:b0: 4e:3c:28:e6:de:ed:93:dc:77:7e:17:f1:a1:1a:64:65:4d:06: d0:12:e9:21:25:91:f6:82:86:65:bd:1a:81:a1:2b:d2:70:2c: b2:2e:31:d4:b7:90:c2:c3:31:2b:97:ce:7e:28:4e:52:63:b0: a9:6f:1f:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErHNUTKhoi2JdHmUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwNzE0MTM1N1oXDTI1MTEwNTE1MTM1N1owLzEtMCsGA1UEAxMk Y2U3ZTllMWQtNDAxNS00M2I4LTgwY2UtNDMzYjc5YjAzMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYKk7qfC9HA7Mco8E+bGcFfuobST2yq7xEZj o9RCli8r73LdTHm8rlFTW68GUABibtnzBonN7UHtI+ILnO6vhIJigPMQU6WozRba u+7UZFQFscIHX7x6w5eQnJxRZ0iTV+Anx4fGHsWji7fnw1dbpHzeghFInp4daY2r MVVp2LMWz1Shl12lF7qdA9iPmzE1cT6OfJRyY0hKSY12ZAQCeZ7kkZEdHNYHAIea y/EwaIm87ttbP67mqydUy6UyHW2vFprf4t0xw3vwFRu0u+61fduAFFciLrM/Vlh9 8tsSjTtsOWD3SE4KEosxX/z2hBVrjMbts6cMb2/VoV+IFm5JhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP4dycn08LkCJcVjE4GXKWRz1WgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFkMTgyZTktMzU4Yi0z MGE4LTliZTUtYThlMzA1OTQxNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABBGZAaIou0fiEX7etwGmbUMbluO9torLzelKupZew40UnZyUqiu 0r8VzH1tiGiEjwzax+g+B4WlRtyJhgnNxV1Fe2C1giIJ5Jd7mywDXJaxbKcgy1GV fgjD9e7MhUN9yIBVLuFcilxQK07Sg18aIE37wIz6uc0hGjFKkhcO6TB10LG3DM+e sBfIvJhSVf2lNdbCYCABW1xOsNachHBqT5qIs3/D/szhICQ0UzBsTKw0OJyPEkOw Pncq+r9uEMqrUBqJMpwUsE48KObe7ZPcd34X8aEaZGVNBtAS6SElkfaChmW9GoGh K9JwLLIuMdS3kMLDMSuXzn4oTlJjsKlvH2c= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:10 2025 by rpki-client