$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa File: 8e437137-ec80-38e3-a86e-89ab811d658e.roa (raw, json) Hash identifier: kUilbiWOQ0TNhvL6P5InFIWtJZTz0DsDMfwZSStcfSk= Subject key identifier: D1:0B:01:5B:D2:FA:85:D3:22:8B:F2:FE:22:FD:35:E3:07:F5:86:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE8913A59745062AC4CEC6680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3a:59:74:50:62:ac:4c:ec:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=6a778576-71bc-4266-8cc1-0c161beacb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:88:e6:a7:a3:94:cf:6e:7a:b6:2e:61:a1:bf: 3f:79:f7:bc:68:24:ff:ee:d0:a2:ce:9a:15:42:95: a9:fa:07:e3:bc:56:aa:6c:dd:11:f0:35:90:fd:89: 59:73:91:05:a3:6a:52:67:1a:d3:5d:11:94:34:ef: 2b:42:12:59:3e:7b:ea:6c:bc:ea:82:1e:8d:6c:30: 6f:d7:7e:5d:7e:17:a8:98:69:1a:c6:77:66:9f:10: 57:bc:05:93:6b:2e:fd:03:7f:a8:00:e5:82:75:f9: 90:b0:2e:d1:b2:af:c6:dd:e8:3b:0c:d5:04:ff:5c: 14:93:62:a0:cd:1c:0b:c9:3b:6a:09:a2:c1:bb:40: a8:b6:66:a0:3f:fd:86:3f:ae:9e:bc:d9:18:60:56: e9:61:c0:2c:26:44:fc:04:17:1e:cd:77:ea:4d:01: 47:bc:e7:c7:95:14:70:6c:14:dc:27:c8:d3:04:c8: 2e:f6:4c:fd:00:cd:df:bf:65:82:cd:ed:ee:a0:ff: 3a:5b:8c:72:31:49:10:7a:ae:ef:76:4b:7e:b4:fe: f1:8c:cc:8b:0d:7b:f8:55:4a:d5:5a:3a:bb:9c:00: 86:32:e2:de:5b:54:4c:42:41:47:f8:bd:33:67:9e: 36:2d:a7:0e:66:a1:52:7d:68:c2:5e:82:ba:a2:f5: 66:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:01:5B:D2:FA:85:D3:22:8B:F2:FE:22:FD:35:E3:07:F5:86:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:85::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e8:01:ed:9f:34:77:95:26:31:bc:a5:c8:9f:83:7a:df:f4: 69:ec:99:58:c4:37:57:27:58:a2:81:76:dd:5b:6c:b0:a9:00: a3:46:96:ff:92:e2:d6:67:d7:0f:f8:0d:f7:ee:fb:07:dd:fe: 20:0f:7c:b0:cc:44:29:b2:10:2a:d5:93:5c:bc:09:5e:c3:66: bd:33:89:9f:94:fc:2a:f3:f8:44:6c:bf:a4:92:d5:22:83:21: 5d:45:3b:c6:af:3b:93:3a:09:c5:a6:c9:6a:47:92:b0:99:7b: da:62:83:3c:7f:18:3c:52:63:be:16:ab:37:e5:4c:89:df:ad: da:e1:f0:50:d1:a2:b3:9f:0e:c7:c6:ac:f9:17:ae:d5:da:29: 4a:14:3a:59:1a:26:71:57:41:9e:66:a2:20:a9:cb:93:8f:e7: a0:46:0e:36:0e:2a:e8:7c:52:88:7a:a1:cf:73:5a:13:bd:1f: 58:07:51:b5:61:15:29:28:fd:fc:82:7e:40:6e:d3:92:56:1e: 83:a4:b9:73:a5:e0:04:c0:0c:31:1d:13:0c:67:72:dd:d5:fb: 23:6a:b2:92:e5:90:e7:34:35:58:e6:62:39:25:e3:66:aa:fc: 7e:b0:ed:45:08:08:2d:11:a0:b5:53:ed:cd:93:e1:2b:a7:14: c7:95:26:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErokTpZdFBirEzsZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NmE3Nzg1NzYtNzFiYy00MjY2LThjYzEtMGMxNjFiZWFjYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjojmp6OUz256ti5hob8/efe8aCT/7tCizpoV QpWp+gfjvFaqbN0R8DWQ/YlZc5EFo2pSZxrTXRGUNO8rQhJZPnvqbLzqgh6NbDBv 135dfheomGkaxndmnxBXvAWTay79A3+oAOWCdfmQsC7Rsq/G3eg7DNUE/1wUk2Kg zRwLyTtqCaLBu0CotmagP/2GP66evNkYYFbpYcAsJkT8BBcezXfqTQFHvOfHlRRw bBTcJ8jTBMgu9kz9AM3fv2WCze3uoP86W4xyMUkQeq7vdkt+tP7xjMyLDXv4VUrV Wjq7nACGMuLeW1RMQkFH+L0zZ542LacOZqFSfWjCXoK6ovVmIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNELAVvS+oXTIovy/iL9NeMH9Ya6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MzcxMzctZWM4MC0z OGUzLWE4NmUtODlhYjgxMWQ2NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPoAe2fNHeVJjG8pcifg3rf9GnsmVjEN1cnWKKBdt1bbLCpAKNG lv+S4tZn1w/4Dffu+wfd/iAPfLDMRCmyECrVk1y8CV7DZr0ziZ+U/Crz+ERsv6SS 1SKDIV1FO8avO5M6CcWmyWpHkrCZe9pigzx/GDxSY74WqzflTInfrdrh8FDRorOf DsfGrPkXrtXaKUoUOlkaJnFXQZ5moiCpy5OP56BGDjYOKuh8Uoh6oc9zWhO9H1gH UbVhFSko/fyCfkBu05JWHoOkuXOl4ATADDEdEwxnct3V+yNqspLlkOc0NVjmYjkl 42aq/H6w7UUICC0RoLVT7c2T4SunFMeVJk4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:33 2025 by rpki-client