$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa File: 5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa (raw, json) Hash identifier: wkO+hHsnYp43skLedcX1qlafUAh+UCuKnjE8Y0PzpfQ= Subject key identifier: 0D:05:5F:AA:AD:67:78:0B:60:69:56:AC:C5:45:77:D8:68:74:15:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15E00F78E980A55D6F700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396616 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5e:00:f7:8e:98:0a:55:d6:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=aa316ee5-951c-49b7-8df7-ce583c9f7828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:64:f8:da:dd:34:6a:f7:09:7a:54:bf:4a: f8:53:53:a2:36:39:9a:f7:03:19:58:35:a1:74:ba: 35:f3:06:65:40:a4:51:0d:24:53:c9:eb:ff:20:e8: ee:92:60:a5:41:54:9f:01:92:da:a6:ca:dc:94:a9: ef:f4:61:99:e0:07:9c:e5:6b:57:b3:89:27:f0:1b: f2:91:67:36:56:6b:8f:07:8b:0c:92:12:25:40:15: f4:f0:2c:05:ef:c2:2b:59:85:f7:89:9d:1a:11:6e: f8:d7:a0:d0:3b:b3:91:60:56:5c:a9:b4:39:56:13: 7d:7f:05:53:e4:d3:c6:ae:ca:e9:04:d8:99:02:31: 32:0c:d3:58:31:7a:dc:26:76:fa:11:f5:1a:2d:09: f6:44:76:fc:66:c5:e0:44:87:a8:f0:ac:a6:63:26: c4:8e:77:38:68:37:1f:bc:d1:1f:dd:74:c3:41:af: 1b:1c:ed:58:1f:bc:42:bc:d3:cc:50:97:38:7d:d1: 15:dc:a5:41:bf:14:ad:13:78:39:06:5a:a1:d7:dc: c4:60:2a:37:92:ed:fe:fa:58:a8:b8:51:ed:12:fe: 23:7c:c4:ae:50:f3:59:da:c4:58:ce:4f:bb:f2:f2: a6:81:a3:8d:29:0d:39:78:4c:53:c4:af:ef:ac:c5: 00:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:05:5F:AA:AD:67:78:0B:60:69:56:AC:C5:45:77:D8:68:74:15:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9d:b1:04:cc:60:ba:2f:a1:81:f4:f9:db:9c:34:ff:a1:3c: 3d:56:6c:b9:fb:c9:84:12:ae:2c:00:06:dd:85:15:49:dd:fa: d3:56:bf:51:b5:76:e9:82:87:5a:49:23:72:a2:78:98:f5:1b: 3c:57:5f:c1:7b:16:20:f5:dd:be:d6:1b:10:d6:9e:45:b4:2f: 69:cb:16:d8:79:4a:53:d4:df:c9:8c:e8:48:02:26:15:60:82: d1:13:85:ef:ba:47:06:cb:69:d1:43:9a:db:53:9a:c0:97:bd: 70:c1:f2:c6:bc:f0:73:31:e4:6f:95:24:d4:1c:6f:47:c6:01: d3:f4:9c:bf:35:92:08:a3:5e:63:23:3d:f9:f5:06:2a:29:fb: 8f:34:54:1e:60:5d:d6:45:db:50:bf:72:5b:be:6b:4c:1c:74: f5:77:aa:d5:84:43:3a:5a:d9:e5:30:0d:3d:be:74:85:02:42: 46:f4:e9:a3:af:b6:b1:e9:29:71:a2:cf:4b:01:d4:c5:74:f3: ab:c3:de:77:13:0f:73:32:9b:01:1a:ea:93:e8:b9:97:db:da: 1a:2c:7e:93:28:28:87:e0:b9:7e:e6:8d:9b:d2:18:e7:54:cf: fa:80:63:6f:e5:0a:70:c6:fe:cb:bb:22:fb:48:6d:a5:63:cd: ef:50:01:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V4A946YClXW9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YWEzMTZlZTUtOTUxYy00OWI3LThkZjctY2U1ODNjOWY3ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWdk+NrdNGr3CXpUv0r4U1OiNjma9wMZWDWh dLo18wZlQKRRDSRTyev/IOjukmClQVSfAZLapsrclKnv9GGZ4Aec5WtXs4kn8Bvy kWc2VmuPB4sMkhIlQBX08CwF78IrWYX3iZ0aEW7416DQO7ORYFZcqbQ5VhN9fwVT 5NPGrsrpBNiZAjEyDNNYMXrcJnb6EfUaLQn2RHb8ZsXgRIeo8KymYybEjnc4aDcf vNEf3XTDQa8bHO1YH7xCvNPMUJc4fdEV3KVBvxStE3g5Blqh19zEYCo3ku3++lio uFHtEv4jfMSuUPNZ2sRYzk+78vKmgaONKQ05eExTxK/vrMUAzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA0FX6qtZ3gLYGlWrMVFd9hodBURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQ5N2Q4NDktZDllNC0z OGUzLTljMWMtMmNjNGE5OWM0NWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECdsQTMYLovoYH0+ducNP+hPD1WbLn7yYQSriwABt2FFUnd+tNW v1G1dumCh1pJI3KieJj1GzxXX8F7FiD13b7WGxDWnkW0L2nLFth5SlPU38mM6EgC JhVggtEThe+6RwbLadFDmttTmsCXvXDB8sa88HMx5G+VJNQcb0fGAdP0nL81kgij XmMjPfn1Biop+480VB5gXdZF21C/clu+a0wcdPV3qtWEQzpa2eUwDT2+dIUCQkb0 6aOvtrHpKXGiz0sB1MV086vD3ncTD3MymwEa6pPouZfb2hosfpMoKIfguX7mjZvS GOdUz/qAY2/lCnDG/su7IvtIbaVjze9QAfY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:56:06 2025 by rpki-client