$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3f1735-f9a4-37b5-aa82-01460025de92.roa File: 4c3f1735-f9a4-37b5-aa82-01460025de92.roa (raw, json) Hash identifier: o/gJhUh6Jj8U0QuhDyLEk6TuTz8yz4cluDMiyGB4T7Y= Subject key identifier: BC:A9:6D:04:E1:78:30:DD:9B:8D:6E:7C:8F:06:F0:82:FD:F4:BC:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15E6999141F3E95C6AD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3f1735-f9a4-37b5-aa82-01460025de92.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396577 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5e:69:99:14:1f:3e:95:c6:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=1626391d-bcd1-46e3-a803-edb4d9d6ee4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:98:6d:84:99:9a:61:77:c6:0e:8b:62:10: 3a:5e:ab:7a:d7:c1:c2:1a:e4:b0:0d:ea:79:d3:dc: 7f:33:2c:34:a0:b1:9a:81:80:a8:f6:15:25:72:3d: 3d:3d:4b:49:2f:df:c4:e2:69:99:a5:c2:8a:27:60: 5b:b9:34:28:f1:19:cd:f3:be:c2:04:c8:63:e1:29: 9c:a9:a7:26:58:2c:9d:74:d5:33:2b:59:f3:68:4e: 8e:ea:5d:ca:80:79:af:07:a4:52:3d:79:b1:cd:b3: 51:91:37:85:24:83:68:e6:00:fb:5f:e3:94:25:ee: e9:6b:74:e3:28:ce:cf:49:ff:5d:ef:a2:56:ab:12: e9:b8:47:7d:f9:d2:04:12:5a:1d:b0:b1:16:85:fb: f8:dd:cc:ec:48:93:86:f3:d8:92:c1:be:e8:57:6f: 8e:17:83:b3:3f:29:cc:2f:f5:c1:c0:6a:c7:73:c8: 75:63:8e:db:86:93:7b:a6:6b:45:4b:2a:95:a3:7c: 66:67:11:38:8f:14:6c:7e:ee:42:10:25:79:e1:9d: c0:80:b6:98:98:79:e6:15:59:52:0a:7b:b5:46:70: 13:41:5d:29:72:09:5b:45:ba:2f:7e:3e:fd:62:20: 75:41:05:93:c2:6f:8d:f4:d5:4a:74:5e:41:85:6e: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A9:6D:04:E1:78:30:DD:9B:8D:6E:7C:8F:06:F0:82:FD:F4:BC:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3f1735-f9a4-37b5-aa82-01460025de92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c4:1b:45:67:4f:fd:b3:7c:1e:f7:bb:2e:21:f6:48:84:90: be:fe:49:fe:45:80:15:57:5d:a6:ff:a7:9a:53:1f:14:65:02: 9a:69:55:b1:61:4f:45:c0:71:22:d1:44:8f:ac:67:3e:38:6f: 55:4e:dd:b3:33:d1:bb:f9:2b:f3:ee:86:fa:1e:7e:f4:eb:35: 25:92:16:64:85:ce:b7:85:51:65:47:a7:73:1d:61:ad:c4:7b: d0:b0:1d:ff:f9:c6:bc:37:37:ec:6b:0c:7f:bb:7d:6b:57:76: 36:4a:41:b8:8b:d2:db:9b:60:a7:2b:cc:4c:d2:35:48:b0:b7: 81:95:ee:45:99:6e:55:34:fe:5c:92:d1:46:0e:3b:90:01:39: ed:35:d7:6b:20:84:5a:85:dc:4d:40:d3:6f:7a:1a:ad:8f:ca: 5f:a0:da:d7:a4:c4:65:4a:c8:a9:fd:f2:e4:87:03:ff:0b:ed: 71:ce:49:d3:6d:36:ae:23:89:4a:1c:d8:d8:21:be:66:2d:08: 5d:54:97:47:66:c5:2a:60:2b:fa:db:e0:a8:8e:86:32:a4:d3: 28:4c:bb:2a:22:7b:9d:eb:06:ca:37:c0:a7:c7:a0:3a:e4:2f: 04:f0:ab:d1:6f:d0:2e:40:e5:93:bf:c4:fa:3f:be:e8:2a:2e: 4f:75:4f:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V5pmRQfPpXGrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MTYyNjM5MWQtYmNkMS00NmUzLWE4MDMtZWRiNGQ5ZDZlZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN6YbYSZmmF3xg6LYhA6Xqt618HCGuSwDep5 09x/Myw0oLGagYCo9hUlcj09PUtJL9/E4mmZpcKKJ2BbuTQo8RnN877CBMhj4Smc qacmWCyddNUzK1nzaE6O6l3KgHmvB6RSPXmxzbNRkTeFJINo5gD7X+OUJe7pa3Tj KM7PSf9d76JWqxLpuEd9+dIEElodsLEWhfv43czsSJOG89iSwb7oV2+OF4OzPynM L/XBwGrHc8h1Y47bhpN7pmtFSyqVo3xmZxE4jxRsfu5CECV54Z3AgLaYmHnmFVlS Cnu1RnATQV0pcglbRbovfj79YiB1QQWTwm+N9NVKdF5BhW4h1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLypbQTheDDdm41ufI8G8IL99LybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMzZjE3MzUtZjlhNC0z N2I1LWFhODItMDE0NjAwMjVkZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILEG0VnT/2zfB73uy4h9kiEkL7+Sf5FgBVXXab/p5pTHxRlAppp VbFhT0XAcSLRRI+sZz44b1VO3bMz0bv5K/PuhvoefvTrNSWSFmSFzreFUWVHp3Md Ya3Ee9CwHf/5xrw3N+xrDH+7fWtXdjZKQbiL0tubYKcrzEzSNUiwt4GV7kWZblU0 /lyS0UYOO5ABOe0112sghFqF3E1A0296Gq2Pyl+g2tekxGVKyKn98uSHA/8L7XHO SdNtNq4jiUoc2NghvmYtCF1Ul0dmxSpgK/rb4KiOhjKk0yhMuyoie53rBso3wKfH oDrkLwTwq9Fv0C5A5ZO/xPo/vugqLk91T2A= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:39 2025 by rpki-client