$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76af494d-901b-314f-9aef-7c6615d3042b.roa File: 76af494d-901b-314f-9aef-7c6615d3042b.roa (raw, json) Hash identifier: EnUo9rAKWH/KGSErhm4ucvgvAwJaDbvRmJhBE+7t1Y4= Subject key identifier: A0:89:05:98:91:31:DA:AE:9B:25:FF:6B:ED:3D:5F:04:F7:FF:E9:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD3A11D6A50E91AEA32D4FC44 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76af494d-901b-314f-9aef-7c6615d3042b.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1d:6a:50:e9:1a:ea:32:d4:fc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=9683c27c-0edf-4c46-9287-d421acf25809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:a7:16:f8:c1:01:02:d4:0f:7d:7b:22:a2: 2b:18:37:ca:f5:78:4e:65:f5:53:46:f1:a5:0a:c6: aa:ba:fd:05:69:3e:82:86:b3:89:f3:34:7e:62:4a: fd:8f:18:e8:b1:10:24:79:31:ca:8a:e8:b7:a8:8d: 83:29:48:ca:5b:f9:fd:76:a8:4f:f9:db:7c:0f:22: 2b:74:4e:db:48:a5:7f:79:e8:4e:61:13:f3:01:f2: fc:d6:0e:45:96:36:08:90:de:1b:ac:ef:a2:00:c4: 79:24:25:77:de:3d:85:6f:e9:96:78:78:31:91:2e: e4:d6:19:9c:e5:55:37:fd:1a:76:21:d8:c6:2e:c8: b2:a5:32:ad:ad:4d:21:68:71:88:d1:7a:42:7b:87: 15:cb:74:d8:37:3b:b7:94:b4:45:64:2c:64:9a:0f: 09:03:a1:ca:e3:92:e7:e7:42:24:d2:a4:e7:d0:75: f2:c8:a4:70:82:7c:75:29:5b:b7:6e:2b:aa:92:a6: b0:bf:8d:05:9e:45:af:58:3a:0d:51:2d:46:b8:11: cc:72:42:5d:48:ac:fc:2f:23:c6:98:fe:10:24:58: 81:05:c1:00:cd:cd:55:5f:66:cd:f6:11:b0:d4:3d: a1:ec:de:68:95:8b:f9:61:67:20:11:2f:9c:5a:26: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:89:05:98:91:31:DA:AE:9B:25:FF:6B:ED:3D:5F:04:F7:FF:E9:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76af494d-901b-314f-9aef-7c6615d3042b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:04:92:24:02:b4:40:ad:9f:a2:04:90:ac:45:ce:55:48:bb: 04:ba:df:de:32:32:a1:48:32:ad:79:c7:eb:90:31:82:f8:36: 30:72:f0:f0:fc:43:e8:51:0a:72:85:58:09:3d:1b:34:14:c3: b3:44:d3:8c:d2:57:0a:4d:d6:53:59:a3:1f:21:1a:11:1d:53: d7:43:4c:b9:53:6e:99:f0:b3:10:a3:6e:98:99:37:d5:75:fc: 87:04:47:3f:45:f2:71:eb:a5:e3:b3:71:c0:83:39:a9:a9:64: d4:cc:42:d2:a9:79:18:73:42:fd:09:b5:43:6a:06:1b:2b:36: 41:d2:b0:60:ca:bc:b2:fd:de:a0:87:bc:0d:6b:1d:5e:60:25: f0:ea:3b:5f:76:dc:2a:4e:07:5d:8f:6d:26:d2:d7:6b:22:5c: cf:19:7e:88:18:61:be:25:31:6a:73:06:1c:e2:c0:80:15:6e: 9b:e5:8b:ca:c1:e8:72:28:2d:06:8f:da:16:28:c8:46:62:33: d2:00:1a:32:aa:b4:25:4b:68:b2:20:5d:34:a7:66:22:27:eb: 08:a0:0d:5b:eb:b9:7c:74:2d:46:ac:bf:72:1c:4e:ba:90:be: a1:80:f9:a2:49:f2:39:01:64:48:8f:15:b8:28:22:8c:ee:dd: 8c:31:10:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToR1qUOka6jLU/EQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OTY4M2MyN2MtMGVkZi00YzQ2LTkyODctZDQyMWFjZjI1ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eGnFvjBAQLUD317IqIrGDfK9XhOZfVTRvGl Csaquv0FaT6ChrOJ8zR+Ykr9jxjosRAkeTHKiui3qI2DKUjKW/n9dqhP+dt8DyIr dE7bSKV/eehOYRPzAfL81g5FljYIkN4brO+iAMR5JCV33j2Fb+mWeHgxkS7k1hmc 5VU3/Rp2IdjGLsiypTKtrU0haHGI0XpCe4cVy3TYNzu3lLRFZCxkmg8JA6HK45Ln 50Ik0qTn0HXyyKRwgnx1KVu3biuqkqawv40FnkWvWDoNUS1GuBHMckJdSKz8LyPG mP4QJFiBBcEAzc1VX2bN9hGw1D2h7N5olYv5YWcgES+cWiYkawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKCJBZiRMdqumyX/a+09XwT3/+mMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzZhZjQ5NGQtOTAxYi0z MTRmLTlhZWYtN2M2NjE1ZDMwNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG4EkiQCtECtn6IEkKxFzlVIuwS6394yMqFIMq15x+uQMYL4NjBy 8PD8Q+hRCnKFWAk9GzQUw7NE04zSVwpN1lNZox8hGhEdU9dDTLlTbpnwsxCjbpiZ N9V1/IcERz9F8nHrpeOzccCDOampZNTMQtKpeRhzQv0JtUNqBhsrNkHSsGDKvLL9 3qCHvA1rHV5gJfDqO1923CpOB12PbSbS12siXM8ZfogYYb4lMWpzBhziwIAVbpvl i8rB6HIoLQaP2hYoyEZiM9IAGjKqtCVLaLIgXTSnZiIn6wigDVvruXx0LUasv3Ic TrqQvqGA+aJJ8jkBZEiPFbgoIozu3YwxEEo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:46 2025 by rpki-client