$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d92877a-7c20-3184-b1c8-05db6e9907a1.roa File: 5d92877a-7c20-3184-b1c8-05db6e9907a1.roa (raw, json) Hash identifier: lb7Y2nw/amnAZ8ksZXZ/h6s6pRWrPe/0A16oitt59OM= Subject key identifier: 5B:1F:5B:00:FC:EC:08:63:9E:B8:5D:BD:DB:A6:92:09:69:E7:CD:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15CD2768A62926EDB0000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d92877a-7c20-3184-b1c8-05db6e9907a1.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396606 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5c:d2:76:8a:62:92:6e:db:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=b5da7173-0847-4d56-8a69-056f23ea5d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:f9:87:72:60:e6:71:e2:12:84:b7:aa:48: 77:e4:f6:00:a3:e8:66:d3:64:5e:9e:c6:af:40:d3: 58:5e:b0:d6:11:6a:89:74:be:59:ea:35:7b:8b:9a: e8:3a:c6:d2:c1:10:41:52:b8:df:3b:30:8b:fa:18: c9:7c:9b:84:7e:32:e7:b0:78:30:8d:79:35:74:27: ad:3a:f8:3d:79:96:cd:db:05:5e:b6:22:ef:b2:31: 6f:66:64:66:2b:d8:bd:e9:38:b6:99:82:5f:63:c2: 21:1c:7e:25:c2:c3:87:48:5a:c7:d9:fb:d0:36:c6: 55:78:86:bf:2a:50:f0:a2:23:a8:59:f9:f1:96:47: 09:e9:9c:6c:f1:55:30:6f:90:e4:af:bb:99:59:42: d8:d6:58:ec:04:9e:23:15:30:7c:8c:2b:93:5a:53: 4d:03:92:27:51:5a:92:81:54:cb:48:b4:cc:c1:49: 0b:21:6a:b5:53:7a:26:78:77:cf:c6:3e:3f:1d:3d: d8:c5:60:2b:f2:27:88:94:20:27:be:5e:f0:35:da: 16:db:02:c1:1a:63:ac:1c:50:c1:c5:f4:85:7c:ea: 6b:ac:6a:09:b8:f5:d1:54:c3:46:ad:e7:2c:83:c8: 40:90:de:8f:8e:03:6a:e0:71:cc:aa:85:8a:e2:d1: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1F:5B:00:FC:EC:08:63:9E:B8:5D:BD:DB:A6:92:09:69:E7:CD:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d92877a-7c20-3184-b1c8-05db6e9907a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:70:d1:82:34:18:49:6b:35:51:25:7e:26:15:cf:4a:7e:55: 63:25:39:61:87:d9:94:e1:9e:4c:90:2a:21:64:84:d4:dd:be: f9:bd:55:9a:77:fa:5a:85:50:49:06:86:39:78:11:7c:87:77: 85:ff:f8:05:2f:70:78:4e:36:2d:e9:32:39:f7:24:bd:c3:45: 0a:2f:f9:a8:b8:c0:b5:41:84:f9:9b:46:d7:ba:07:49:5a:4b: 2c:3e:37:cc:fc:88:5c:86:62:84:31:a5:8e:79:18:b4:ef:d2: 38:47:16:fe:8e:72:f0:4e:08:f1:5e:9e:2b:c7:35:a8:60:af: 54:72:8e:35:72:b3:0a:05:64:3e:5f:b5:53:ec:ac:c4:58:3c: c0:86:a5:de:2b:dd:2e:94:91:89:02:de:04:a7:c6:8b:16:a2: 1e:9a:d6:f5:cd:70:e8:11:06:33:d4:95:c2:98:42:b4:83:19: e0:da:2d:73:2d:ae:3e:fd:f4:be:00:96:f5:ce:df:63:fa:0a: b1:53:4f:e2:14:2b:44:76:e2:15:b0:c6:36:d9:f1:08:f6:74: 3a:72:55:05:cc:94:13:cf:52:01:f5:d7:5f:6e:58:52:2b:20: ca:c5:ce:fb:f4:fa:85:69:3c:ad:15:5e:3e:6e:7e:20:8a:06: d5:09:fe:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VzSdopikm7bAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YjVkYTcxNzMtMDg0Ny00ZDU2LThhNjktMDU2ZjIzZWE1ZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFn5h3Jg5nHiEoS3qkh35PYAo+hm02Rensav QNNYXrDWEWqJdL5Z6jV7i5roOsbSwRBBUrjfOzCL+hjJfJuEfjLnsHgwjXk1dCet Ovg9eZbN2wVetiLvsjFvZmRmK9i96Ti2mYJfY8IhHH4lwsOHSFrH2fvQNsZVeIa/ KlDwoiOoWfnxlkcJ6Zxs8VUwb5Dkr7uZWULY1ljsBJ4jFTB8jCuTWlNNA5InUVqS gVTLSLTMwUkLIWq1U3omeHfPxj4/HT3YxWAr8ieIlCAnvl7wNdoW2wLBGmOsHFDB xfSFfOprrGoJuPXRVMNGrecsg8hAkN6PjgNq4HHMqoWK4tGPkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsfWwD87Ahjnrhdvdumkglp582qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQ5Mjg3N2EtN2MyMC0z MTg0LWIxYzgtMDVkYjZlOTkwN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtw0YI0GElrNVElfiYVz0p+VWMlOWGH2ZThnkyQKiFkhNTdvvm9 VZp3+lqFUEkGhjl4EXyHd4X/+AUvcHhONi3pMjn3JL3DRQov+ai4wLVBhPmbRte6 B0laSyw+N8z8iFyGYoQxpY55GLTv0jhHFv6OcvBOCPFenivHNahgr1RyjjVyswoF ZD5ftVPsrMRYPMCGpd4r3S6UkYkC3gSnxosWoh6a1vXNcOgRBjPUlcKYQrSDGeDa LXMtrj799L4AlvXO32P6CrFTT+IUK0R24hWwxjbZ8Qj2dDpyVQXMlBPPUgH1119u WFIrIMrFzvv0+oVpPK0VXj5ufiCKBtUJ/is= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:35 2025 by rpki-client