$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/624cff09-124b-34a2-b04f-9ed49000da48.roa File: 624cff09-124b-34a2-b04f-9ed49000da48.roa (raw, json) Hash identifier: l/F2dHnF/GP6HwgLvVoeotwTeDscFaAYO2rWwpDs9yg= Subject key identifier: E3:40:C8:18:E8:CA:1F:B8:5D:BB:16:E7:11:CD:A2:4E:CF:C2:31:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD3A123229087BD2F1A68E580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/624cff09-124b-34a2-b04f-9ed49000da48.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:67::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:23:22:90:87:bd:2f:1a:68:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=d1e48b0d-f388-4a85-9dd7-f0df945e2257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:43:b3:cb:8c:d3:f0:83:8a:6f:b5:2e:ce: 18:4c:8b:03:73:71:72:85:46:36:df:7c:60:15:f0: db:8b:c8:32:78:f7:a1:b0:eb:89:ff:ac:57:f0:c8: 97:2a:7f:f6:64:9e:10:76:4e:3a:0b:d3:15:92:50: 0b:6d:49:9b:c5:e2:f7:1a:05:93:9f:36:ec:6a:c0: 76:c1:5b:16:d6:07:6f:cc:12:08:b7:51:f7:a2:21: 31:f4:c0:e6:d9:84:28:73:48:3e:a2:42:8a:6e:52: c7:85:9b:1b:75:82:86:06:9d:8d:ce:68:53:24:53: 8d:b6:1e:e5:d6:99:3d:3f:56:87:9b:49:3e:d3:72: af:ef:13:83:80:10:aa:fd:c6:6c:3d:f9:ea:c9:38: cb:69:00:3f:de:63:0f:00:bb:26:2c:28:fb:25:5e: 92:21:f3:40:b9:ce:3d:31:72:e1:82:2f:b7:6f:0f: fd:33:36:66:e7:7b:04:8b:bb:17:35:14:27:10:bf: a4:cd:66:41:c1:f1:23:f1:35:bf:c5:3e:e6:47:52: 52:e7:ee:9f:c1:2b:90:51:d3:19:79:48:69:8b:69: 2a:ee:72:8f:c6:bb:3f:b3:ce:ef:53:87:67:80:82: d4:a4:ef:7f:26:b1:27:19:9e:4d:a2:b5:75:ad:50: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:40:C8:18:E8:CA:1F:B8:5D:BB:16:E7:11:CD:A2:4E:CF:C2:31:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/624cff09-124b-34a2-b04f-9ed49000da48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:67::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:72:05:3d:9c:ae:3d:ac:24:2c:e7:8f:01:a5:ce:48:e7:2f: 1b:f1:61:2c:8b:45:9a:33:96:f8:22:68:2c:2a:55:e0:a5:0a: a2:59:3d:90:ca:dd:a5:04:be:da:36:26:c7:87:10:56:df:eb: c4:99:ff:6d:65:7b:64:15:06:67:32:52:d6:05:f7:fb:c8:95: 4a:6f:e1:22:11:63:0b:aa:22:e8:61:4b:1b:51:aa:6d:f0:a2: 31:45:24:16:84:b4:0a:1b:87:0a:ac:55:09:99:a2:6b:f0:72: b6:55:b0:fa:08:79:dd:77:1c:ec:c9:ce:2d:bb:03:95:92:70: ae:55:0f:49:ed:1e:ab:94:32:45:b3:d0:99:43:44:13:ed:83: 75:76:1b:92:e8:8c:9d:14:3b:c1:5a:6f:13:96:dd:68:f6:28: 7d:34:e0:be:a6:6d:6f:2e:97:2a:8f:79:31:ad:03:00:0f:90: 6f:3b:88:1c:78:3f:ca:e6:7a:11:c4:e5:3e:8e:3b:80:75:e9: e7:a7:c4:78:50:f3:c3:13:55:a0:47:2a:c0:64:0c:67:56:f2: ee:4d:f3:6b:ca:84:af:8b:13:16:5d:3d:fe:84:9a:80:9b:4e: 84:ee:95:e8:78:96:b9:fd:53:14:70:0e:1a:02:9d:a5:b7:2f: 65:99:c9:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToSMikIe9Lxpo5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDFlNDhiMGQtZjM4OC00YTg1LTlkZDctZjBkZjk0NWUyMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstxDs8uM0/CDim+1Ls4YTIsDc3FyhUY233xg FfDbi8gyePehsOuJ/6xX8MiXKn/2ZJ4Qdk46C9MVklALbUmbxeL3GgWTnzbsasB2 wVsW1gdvzBIIt1H3oiEx9MDm2YQoc0g+okKKblLHhZsbdYKGBp2NzmhTJFONth7l 1pk9P1aHm0k+03Kv7xODgBCq/cZsPfnqyTjLaQA/3mMPALsmLCj7JV6SIfNAuc49 MXLhgi+3bw/9MzZm53sEi7sXNRQnEL+kzWZBwfEj8TW/xT7mR1JS5+6fwSuQUdMZ eUhpi2kq7nKPxrs/s87vU4dngILUpO9/JrEnGZ5NorV1rVAZCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFONAyBjoyh+4XbsW5xHNok7PwjEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI0Y2ZmMDktMTI0Yi0z NGEyLWIwNGYtOWVkNDkwMDBkYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZyBT2crj2sJCznjwGlzkjnLxvxYSyLRZozlvgiaCwqVeClCqJZ PZDK3aUEvto2JseHEFbf68SZ/21le2QVBmcyUtYF9/vIlUpv4SIRYwuqIuhhSxtR qm3wojFFJBaEtAobhwqsVQmZomvwcrZVsPoIed13HOzJzi27A5WScK5VD0ntHquU MkWz0JlDRBPtg3V2G5LojJ0UO8FabxOW3Wj2KH004L6mbW8ulyqPeTGtAwAPkG87 iBx4P8rmehHE5T6OO4B16eenxHhQ88MTVaBHKsBkDGdW8u5N82vKhK+LExZdPf6E moCbToTuleh4lrn9UxRwDhoCnaW3L2WZyc0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:25 2025 by rpki-client