$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/811ca76c-2cf2-3080-8d93-949929db08bd.roa File: 811ca76c-2cf2-3080-8d93-949929db08bd.roa (raw, json) Hash identifier: sZwE0qQQzKESd5gUgVB9ucDMSlJwi1W5IRA4MQRZNVg= Subject key identifier: 35:E8:22:A2:AC:DC:87:73:8C:2D:EC:84:60:17:F5:BD:06:D0:99:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15C81AADFB49976636120 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/811ca76c-2cf2-3080-8d93-949929db08bd.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396587 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5c:81:aa:df:b4:99:76:63:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e0c33561-0261-49e6-8315-81df19408fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:db:83:c3:ba:ee:7f:a1:46:e8:0b:8c:02: f7:17:87:9d:90:da:35:21:b1:fb:bf:3b:ec:67:3e: 32:c8:af:fc:3a:ec:3b:a0:90:f1:22:4a:b1:db:cd: 82:72:00:76:f3:68:d4:c1:0c:a2:d6:d6:88:11:3d: 7b:04:94:24:bf:1b:e4:7e:4c:ff:e0:13:ee:80:53: dd:cf:29:81:b1:ca:75:86:91:3b:21:d6:2c:e6:1d: 2b:4b:96:b9:a8:15:99:9d:52:2b:e2:02:24:83:7b: 54:29:2c:65:cc:43:55:29:b8:69:94:57:60:c8:7d: fd:d2:3d:6e:3b:57:37:14:51:ac:ce:fe:8f:cd:69: 30:69:ef:37:6e:0b:ee:b3:62:15:cc:3f:77:09:8d: 9a:19:f2:a2:94:09:71:eb:c0:b0:ef:36:bc:99:a0: 5c:7c:58:98:c2:58:54:7f:5c:0b:48:8e:7e:48:8d: 0c:c2:ce:d8:4e:30:e1:a7:57:0b:19:6e:88:3c:81: c4:22:5b:c8:9d:56:07:c0:b1:d3:ab:7c:60:11:64: 84:8a:81:3e:c5:cb:e9:28:46:6a:59:e0:68:28:1f: 67:ea:f1:4a:0a:ad:51:51:45:24:60:b8:91:3e:f8: f8:cf:b7:ee:b6:7b:a6:b3:a1:c1:1a:ab:ea:ef:46: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:22:A2:AC:DC:87:73:8C:2D:EC:84:60:17:F5:BD:06:D0:99:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/811ca76c-2cf2-3080-8d93-949929db08bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bf:51:c6:13:fc:8f:21:50:1e:f2:e2:54:a5:70:c7:73:27: d0:86:9e:c5:2d:c2:02:82:59:0b:0f:1d:b0:ae:4e:32:86:43: 1b:4d:57:dc:77:af:eb:e0:6d:97:43:25:9c:7e:ad:1f:a4:aa: 8f:0a:ce:89:9a:c7:aa:ae:ab:f6:d7:d6:aa:f8:02:e6:bb:d4: 5a:74:60:75:c4:66:81:fa:02:ce:3d:31:78:28:68:a1:59:e4: 84:0c:95:8a:a9:0e:7c:7f:d0:05:06:f8:11:01:dc:67:7f:b7: 27:bf:16:22:b3:ce:bb:97:5c:99:77:66:67:4a:6c:58:c6:c8: 30:b9:81:61:f4:6b:cf:91:47:d1:39:cb:bd:15:00:da:37:28: 82:7b:0c:25:ba:d9:56:76:3f:9b:6b:e7:d0:67:8b:11:cd:c9: 12:3d:89:bb:24:3c:10:5f:5f:92:aa:14:d3:83:50:b6:ef:88: d0:72:ab:fe:df:d9:49:48:d9:8b:78:70:e3:2a:a8:6e:ec:24: 58:88:14:44:a5:25:71:4d:4f:3b:d5:d6:f6:25:b0:bd:cf:eb: c9:8c:42:f4:f8:d7:60:11:36:e8:24:11:4f:74:20:4d:ca:14: bc:06:1d:8e:56:ea:17:51:6e:95:4f:97:30:c1:4d:b6:8b:75: ff:89:83:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VyBqt+0mXZjYSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTBjMzM1NjEtMDI2MS00OWU2LTgzMTUtODFkZjE5NDA4ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrjbg8O67n+hRugLjAL3F4edkNo1IbH7vzvs Zz4yyK/8Ouw7oJDxIkqx282CcgB282jUwQyi1taIET17BJQkvxvkfkz/4BPugFPd zymBscp1hpE7IdYs5h0rS5a5qBWZnVIr4gIkg3tUKSxlzENVKbhplFdgyH390j1u O1c3FFGszv6PzWkwae83bgvus2IVzD93CY2aGfKilAlx68Cw7za8maBcfFiYwlhU f1wLSI5+SI0Mws7YTjDhp1cLGW6IPIHEIlvInVYHwLHTq3xgEWSEioE+xcvpKEZq WeBoKB9n6vFKCq1RUUUkYLiRPvj4z7futnums6HBGqvq70bBRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXoIqKs3IdzjC3shGAX9b0G0Jk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODExY2E3NmMtMmNmMi0z MDgwLThkOTMtOTQ5OTI5ZGIwOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAO/UcYT/I8hUB7y4lSlcMdzJ9CGnsUtwgKCWQsPHbCuTjKGQxtN V9x3r+vgbZdDJZx+rR+kqo8Kzomax6quq/bX1qr4Aua71Fp0YHXEZoH6As49MXgo aKFZ5IQMlYqpDnx/0AUG+BEB3Gd/tye/FiKzzruXXJl3ZmdKbFjGyDC5gWH0a8+R R9E5y70VANo3KIJ7DCW62VZ2P5tr59BnixHNyRI9ibskPBBfX5KqFNODULbviNBy q/7f2UlI2Yt4cOMqqG7sJFiIFESlJXFNTzvV1vYlsL3P68mMQvT412ARNugkEU90 IE3KFLwGHY5W6hdRbpVPlzDBTbaLdf+Jg+s= -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:44 2025 by rpki-client