$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fd556ff-f3a7-3728-b7a4-03830d3b6701.roa File: 6fd556ff-f3a7-3728-b7a4-03830d3b6701.roa (raw, json) Hash identifier: QdpGvHcfmCn/nfXzt8s9vkWcaUMsHJ2f8vWIU8evk8c= Subject key identifier: 44:10:E7:B5:F9:04:9B:9C:A1:8C:9D:F1:AF:42:92:39:CC:51:88:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD3A11D139558CCDB7FB26AA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fd556ff-f3a7-3728-b7a4-03830d3b6701.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1d:13:95:58:cc:db:7f:b2:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=0c38a0ef-a8ee-4cf6-b041-b26282de5e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:7c:01:d9:72:5d:e0:42:f0:93:45:b1:36: fa:84:c2:e0:de:63:e2:d7:ab:06:2d:00:63:7c:e5: c3:f6:12:f9:38:9a:77:b3:0f:43:73:84:58:d4:1b: ec:70:10:70:47:a3:8a:b2:94:12:76:f4:f6:d5:ca: 68:52:33:9c:b7:81:22:9f:4c:a2:0d:99:ac:a9:76: 98:17:ff:c6:dd:56:d5:84:09:cb:c9:26:67:13:4f: 98:58:48:01:ce:8d:5d:73:e8:f5:e2:fb:a2:2a:a0: 91:cf:ac:f9:9b:16:11:fe:5d:6c:07:c7:db:8d:5c: 1a:fa:4a:17:20:45:5b:6c:99:81:c6:a1:0f:2d:55: fb:de:b9:37:1f:95:1a:dd:83:84:ec:00:80:80:b5: 37:de:41:e0:95:82:53:a2:68:be:09:b0:22:54:7b: 6b:cf:8c:f7:de:f2:86:46:dc:7b:7c:8a:4d:ad:fb: 76:34:b0:97:ee:d0:99:38:6e:08:6d:80:0c:78:69: 5a:5f:33:62:e4:dc:37:68:a0:9c:b9:01:5f:8d:53: ef:3a:6e:3d:79:fe:a7:99:3c:cb:fe:77:0b:9b:10: 06:7a:9a:27:a2:c7:32:0d:f0:d8:74:3c:3c:8f:48: d0:f9:6e:42:c1:e6:3a:ee:c8:04:54:57:68:be:c4: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:10:E7:B5:F9:04:9B:9C:A1:8C:9D:F1:AF:42:92:39:CC:51:88:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fd556ff-f3a7-3728-b7a4-03830d3b6701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ad::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6e:1f:3d:19:d1:e3:4d:84:f0:93:c7:d4:08:f5:af:95:b6: 43:ad:b9:76:54:27:12:8c:b1:3e:6b:cf:fe:89:64:82:6b:c5: e7:99:47:90:74:38:87:c0:b3:d8:8d:b9:26:ce:d0:80:a2:14: 9f:33:ed:b9:8a:dc:25:a0:e8:f7:83:b1:97:4b:a7:48:5c:95: fa:27:8d:42:b1:32:ec:f2:f4:08:9d:02:0a:bd:e9:d2:f5:41: 73:32:54:48:ba:00:39:b9:b7:1a:5b:01:00:9d:5c:5c:2c:e9: 61:a8:ea:c5:57:2e:ad:0d:5c:f2:ed:ba:c3:05:d2:a5:6c:53: a0:a1:0d:fb:15:ff:bf:3a:fd:23:09:0f:20:7d:09:56:4d:47: c5:16:e6:63:eb:8d:4d:bd:54:3e:00:03:25:11:a1:2d:85:23: f5:43:46:6f:1e:52:62:e0:4a:c2:44:03:70:09:73:2b:b7:05: 84:7d:b7:50:0a:14:75:ae:ad:3b:fa:f4:fb:49:ac:06:35:cf: c1:34:22:10:ef:7d:3f:fe:e3:9c:95:38:5c:fa:e2:8d:56:b9: f7:4e:91:e5:94:58:2b:67:11:aa:90:2b:ba:58:ab:10:95:fc: 33:56:12:4a:1f:59:eb:32:f3:ce:b2:00:9b:bb:46:b4:73:5f: ae:37:5f:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToR0TlVjM23+yaqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MGMzOGEwZWYtYThlZS00Y2Y2LWIwNDEtYjI2MjgyZGU1ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrx8AdlyXeBC8JNFsTb6hMLg3mPi16sGLQBj fOXD9hL5OJp3sw9Dc4RY1BvscBBwR6OKspQSdvT21cpoUjOct4Ein0yiDZmsqXaY F//G3VbVhAnLySZnE0+YWEgBzo1dc+j14vuiKqCRz6z5mxYR/l1sB8fbjVwa+koX IEVbbJmBxqEPLVX73rk3H5Ua3YOE7ACAgLU33kHglYJTomi+CbAiVHtrz4z33vKG Rtx7fIpNrft2NLCX7tCZOG4IbYAMeGlaXzNi5Nw3aKCcuQFfjVPvOm49ef6nmTzL /ncLmxAGeponoscyDfDYdDw8j0jQ+W5CweY67sgEVFdovsShzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEQQ57X5BJucoYyd8a9CkjnMUYh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmZkNTU2ZmYtZjNhNy0z NzI4LWI3YTQtMDM4MzBkM2I2NzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtuHz0Z0eNNhPCTx9QI9a+VtkOtuXZUJxKMsT5rz/6JZIJrxeeZ R5B0OIfAs9iNuSbO0ICiFJ8z7bmK3CWg6PeDsZdLp0hclfonjUKxMuzy9AidAgq9 6dL1QXMyVEi6ADm5txpbAQCdXFws6WGo6sVXLq0NXPLtusMF0qVsU6ChDfsV/786 /SMJDyB9CVZNR8UW5mPrjU29VD4AAyURoS2FI/VDRm8eUmLgSsJEA3AJcyu3BYR9 t1AKFHWurTv69PtJrAY1z8E0IhDvfT/+45yVOFz64o1WufdOkeWUWCtnEaqQK7pY qxCV/DNWEkofWesy886yAJu7RrRzX643XxQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:12:53 2025 by rpki-client