$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa File: 89e103cc-8b9a-3365-af39-2f05d98c2b26.roa (raw, json) Hash identifier: cejVEkv6Mmb6KSvL/DiQgyHUzO+3j5N3jodk0VLUQRk= Subject key identifier: 50:9C:73:CC:9F:C8:7D:67:38:DA:5F:AF:D6:E0:75:1D:C5:15:EE:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15808351593A9C50B78A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 10515 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:08:35:15:93:a9:c5:0b:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=d6cf56d7-0790-46b7-ad95-67b9e50d0eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:82:2f:7c:52:80:d9:95:11:6a:66:39:6e: 5b:74:0e:b9:97:da:ea:2c:03:6e:5e:da:e9:ea:d3: 61:3d:d8:26:d2:d7:91:c5:8b:f0:ef:16:3d:47:7b: 69:1b:73:4d:5b:ce:bb:8c:3b:aa:97:99:ea:d6:76: d3:5c:61:17:cf:c5:d1:ca:e0:a6:41:bc:53:0d:3d: 68:11:31:cc:2d:9b:38:f7:6a:ab:76:69:f4:a6:e3: 85:72:a2:b9:cf:3a:2c:50:29:b8:50:c8:9f:3d:e9: c2:50:41:6d:04:29:d3:c7:52:cc:6a:bf:d2:fd:b2: 75:a4:84:9e:32:e9:03:22:6c:f4:6e:a0:d5:42:27: dc:4f:7d:9b:93:d4:0d:75:cc:92:21:62:b3:8c:17: 94:83:a6:a5:32:0e:c4:c6:0b:13:2c:3f:bd:94:4f: 58:f0:d6:f7:5f:02:20:61:f3:2c:b6:97:5d:45:1b: 92:15:be:6d:0c:d8:ec:8c:4b:52:f6:97:fa:5b:d0: b8:d8:5a:1a:90:a3:46:d6:45:d1:04:49:8d:72:97: bc:1d:a4:fe:6e:6a:8a:d0:ba:be:e1:d6:fe:6d:dc: 7b:57:e7:af:0e:47:d8:16:3b:20:c3:f5:a5:fb:e7: e7:8b:88:bb:34:ef:9b:df:4f:9f:10:a8:a6:96:22: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9C:73:CC:9F:C8:7D:67:38:DA:5F:AF:D6:E0:75:1D:C5:15:EE:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ef:a5:93:98:58:52:d9:41:04:2c:cf:3e:60:1a:14:2b:67: d5:61:a9:64:f0:d8:69:b1:ab:10:24:a7:69:cb:aa:e9:e2:b1: 9b:a5:3c:d6:8f:00:7a:0b:d0:48:9d:ca:31:dd:9a:9e:3f:48: e7:62:f0:3b:cf:5e:c2:9c:a1:c4:b0:fa:d1:7c:1d:d0:d1:24: 38:72:d5:a7:cf:f3:c8:70:ef:dd:a8:4c:a2:22:0c:d9:34:27: dd:b3:62:73:53:59:ff:88:ef:a6:32:89:86:03:2c:54:ce:2c: d7:1a:fa:98:6c:ea:1c:06:a0:f0:e4:eb:f8:bb:ee:1e:bd:78: 8f:57:86:71:8e:13:d2:40:b1:11:11:09:11:2f:8b:ff:cb:6f: 53:8f:fb:e6:b8:14:2e:bf:4c:3d:e3:f7:ee:1c:05:59:cd:06: e6:be:63:e6:72:64:e3:0d:92:5e:dc:07:4c:ba:07:4a:f9:b6: 50:a2:e5:a2:16:49:b2:16:09:28:a5:c2:8c:e6:73:aa:7b:e0: 1d:3e:27:ac:8e:da:ef:65:90:a7:cb:ef:34:13:6c:4e:11:70: 2e:05:9b:7c:8b:de:46:5d:37:e9:c6:3b:93:a2:b6:63:8a:34: 30:6f:a1:15:12:38:38:61:48:21:22:5d:c3:34:f8:dd:fe:91: 44:a5:d1:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VgINRWTqcULeKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDZjZjU2ZDctMDc5MC00NmI3LWFkOTUtNjdiOWU1MGQwZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKiCL3xSgNmVEWpmOW5bdA65l9rqLANuXtrp 6tNhPdgm0teRxYvw7xY9R3tpG3NNW867jDuql5nq1nbTXGEXz8XRyuCmQbxTDT1o ETHMLZs492qrdmn0puOFcqK5zzosUCm4UMifPenCUEFtBCnTx1LMar/S/bJ1pISe MukDImz0bqDVQifcT32bk9QNdcySIWKzjBeUg6alMg7ExgsTLD+9lE9Y8Nb3XwIg YfMstpddRRuSFb5tDNjsjEtS9pf6W9C42FoakKNG1kXRBEmNcpe8HaT+bmqK0Lq+ 4db+bdx7V+evDkfYFjsgw/Wl++fni4i7NO+b30+fEKimliKH+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFCcc8yfyH1nONpfr9bgdR3FFe6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODllMTAzY2MtOGI5YS0z MzY1LWFmMzktMmYwNWQ5OGMyYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHvpZOYWFLZQQQszz5gGhQrZ9VhqWTw2GmxqxAkp2nLqunisZul PNaPAHoL0EidyjHdmp4/SOdi8DvPXsKcocSw+tF8HdDRJDhy1afP88hw792oTKIi DNk0J92zYnNTWf+I76YyiYYDLFTOLNca+phs6hwGoPDk6/i77h69eI9XhnGOE9JA sRERCREvi//Lb1OP++a4FC6/TD3j9+4cBVnNBua+Y+ZyZOMNkl7cB0y6B0r5tlCi 5aIWSbIWCSilwozmc6p74B0+J6yO2u9lkKfL7zQTbE4RcC4Fm3yL3kZdN+nGO5Oi tmOKNDBvoRUSODhhSCEiXcM0+N3+kUSl0Xo= -----END CERTIFICATE-----Generated at Sat Aug 23 16:00:12 2025 by rpki-client