$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f4169ba-7ab2-39bc-94eb-881eef47dd20.roa File: 6f4169ba-7ab2-39bc-94eb-881eef47dd20.roa (raw, json) Hash identifier: DGJUey6IvpumqoncRDDXzyZA/VqDTXhJyiH02XISZGs= Subject key identifier: 7F:73:89:3A:8D:B7:AC:98:DD:0D:9F:F5:16:50:58:0F:A0:E5:90:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15D281D4C535E4C565280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f4169ba-7ab2-39bc-94eb-881eef47dd20.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36621 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:28:1d:4c:53:5e:4c:56:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e337f090-fee4-41a0-9fca-64f8219eb8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:46:0c:57:d1:e7:e4:0b:be:1c:d4:d0:49: e7:99:51:6a:3b:eb:fb:d6:80:aa:ef:4f:05:b7:2e: b6:75:75:94:e9:a0:79:4e:f6:22:d0:17:f6:08:52: 55:9c:64:66:e8:96:1a:ca:26:14:1b:e5:25:fe:ec: bc:23:c4:77:87:d5:70:aa:33:e1:5c:f7:33:2e:04: d1:cd:41:d6:0a:23:e4:48:e0:6d:16:5b:39:c2:81: ca:47:76:ff:63:12:0d:8e:b9:39:a9:1d:71:e7:0b: f5:3d:14:72:5e:fa:bb:ba:00:ee:ea:ff:95:93:f3: 1a:db:cf:fe:3a:5c:bc:d0:ba:a3:2e:e2:3a:b4:8e: 7f:ba:6a:6a:19:b9:2b:fe:a6:11:5d:1e:5f:dd:8d: bf:3d:05:4a:62:c5:10:c7:6f:dc:92:79:72:07:3a: 1a:e1:de:ea:ee:ac:40:7c:fd:4e:1c:6d:56:22:94: c9:f9:8e:7f:fc:05:c5:57:95:74:be:55:35:56:42: d6:ac:92:cd:c1:58:ef:c2:44:5e:0c:b8:ad:62:14: 28:b6:d0:39:fb:bc:ff:de:b8:be:a6:95:6e:f0:cf: a5:21:2c:e2:93:00:65:d8:a0:1a:af:df:2b:0a:0d: 83:e1:d6:e9:ff:57:4f:1b:18:8c:3c:40:21:35:50: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:89:3A:8D:B7:AC:98:DD:0D:9F:F5:16:50:58:0F:A0:E5:90:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f4169ba-7ab2-39bc-94eb-881eef47dd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:28:96:c9:4e:65:fa:23:42:f5:0f:cd:a6:27:7e:93:fa:90: a9:5a:2c:c5:d3:9d:7e:ee:03:47:96:95:85:8b:87:2d:d3:fb: 4d:0e:78:1b:2a:50:74:86:d3:7a:6c:ff:68:3a:58:97:7f:4f: 6d:5c:2b:6a:e7:4b:a3:e8:fe:ca:39:a6:32:8d:21:08:82:61: 72:21:e7:9b:c9:55:b3:b2:4a:c0:98:f2:39:3e:e2:b9:8d:46: fa:95:63:48:3e:51:58:b7:2b:31:b7:b4:f3:8f:2d:0e:d6:8d: 0d:31:5a:ab:56:04:c9:f0:ea:ba:ea:ea:24:b8:8c:47:46:49: e9:0e:9a:9b:9c:75:35:d1:14:ac:31:9e:ae:f5:bf:ad:90:08: 31:4f:4a:b0:e1:ef:e6:9a:c7:09:bd:7f:0a:29:3e:86:69:55: fe:68:5c:4e:37:a1:82:ad:d6:a9:dd:da:4d:be:5c:c8:64:55: e3:8a:0a:81:82:7a:de:11:6b:42:a9:18:b1:36:b4:12:10:a0: 93:a9:ff:50:fe:5c:a2:c4:7f:3e:1c:b6:14:51:3b:90:8a:5e: 46:34:3f:8d:63:c2:52:84:a5:70:7e:a7:c5:b2:e2:be:f6:14: 83:42:51:08:61:8f:13:db:64:60:b4:2e:aa:2c:b9:5f:41:3c: 0c:f5:98:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V0oHUxTXkxWUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTMzN2YwOTAtZmVlNC00MWEwLTlmY2EtNjRmODIxOWViOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdpGDFfR5+QLvhzU0EnnmVFqO+v71oCq708F ty62dXWU6aB5TvYi0Bf2CFJVnGRm6JYayiYUG+Ul/uy8I8R3h9VwqjPhXPczLgTR zUHWCiPkSOBtFls5woHKR3b/YxINjrk5qR1x5wv1PRRyXvq7ugDu6v+Vk/Ma28/+ Oly80LqjLuI6tI5/umpqGbkr/qYRXR5f3Y2/PQVKYsUQx2/cknlyBzoa4d7q7qxA fP1OHG1WIpTJ+Y5//AXFV5V0vlU1VkLWrJLNwVjvwkReDLitYhQottA5+7z/3ri+ ppVu8M+lISzikwBl2KAar98rCg2D4dbp/1dPGxiMPEAhNVCLLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH9ziTqNt6yY3Q2f9RZQWA+g5ZCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmY0MTY5YmEtN2FiMi0z OWJjLTk0ZWItODgxZWVmNDdkZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEolslOZfojQvUPzaYnfpP6kKlaLMXTnX7uA0eWlYWLhy3T+00O eBsqUHSG03ps/2g6WJd/T21cK2rnS6Po/so5pjKNIQiCYXIh55vJVbOySsCY8jk+ 4rmNRvqVY0g+UVi3KzG3tPOPLQ7WjQ0xWqtWBMnw6rrq6iS4jEdGSekOmpucdTXR FKwxnq71v62QCDFPSrDh7+aaxwm9fwopPoZpVf5oXE43oYKt1qnd2k2+XMhkVeOK CoGCet4Ra0KpGLE2tBIQoJOp/1D+XKLEfz4cthRRO5CKXkY0P41jwlKEpXB+p8Wy 4r72FINCUQhhjxPbZGC0LqosuV9BPAz1mEI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:18 2025 by rpki-client