$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f69b105-e943-33e2-9278-59079d5bc6bf.roa File: 8f69b105-e943-33e2-9278-59079d5bc6bf.roa (raw, json) Hash identifier: rEYy1TArL6ZJIWpiKE8VpW2H8HJ4ezsgfqtkl5eY2A0= Subject key identifier: 87:3E:A9:E7:54:6F:EC:F0:C7:60:03:67:84:1B:7E:11:B3:11:3F:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15E34755D356A7FDF2D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f69b105-e943-33e2-9278-59079d5bc6bf.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 397199 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5e:34:75:5d:35:6a:7f:df:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=24f9e03d-d4bb-42c2-acc3-63d3f474bead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:be:14:99:29:5c:77:8c:87:e3:69:7f:03: 0f:07:84:12:0e:cd:e2:16:b1:09:8b:0f:0c:a7:b8: 44:44:49:87:83:66:1a:03:a6:44:42:e9:1b:0b:6c: 1f:4c:ba:39:ad:f2:71:79:9e:40:e0:63:44:69:a3: 01:fd:8c:0e:b7:49:10:bf:09:1a:f3:eb:64:c9:23: 6a:91:d8:0f:19:59:fe:79:03:4c:8c:cc:fb:14:00: 70:f8:63:6c:c1:a2:6c:a5:51:75:a6:c6:55:41:a2: 93:17:f6:65:c7:1a:76:de:b9:c7:e0:96:e8:7f:8d: f0:8b:d7:7d:26:ea:7b:1f:00:64:20:49:5f:b2:b4: 9b:3e:1b:01:73:d8:3c:7c:d6:93:7c:d8:94:1a:26: 02:78:2e:4b:cd:3d:b0:b2:eb:91:5a:b0:2a:67:fc: 39:87:14:85:a5:f0:97:c6:3b:d0:23:db:02:87:f7: 28:aa:5d:1a:8c:e1:e2:90:3c:bb:cc:b2:31:e3:2c: 4b:69:e1:6f:3f:ac:84:f7:19:7e:ea:33:05:da:0c: 0d:bb:22:cb:9b:dd:ed:05:dc:32:37:e1:01:0e:7c: 44:9e:99:3a:0b:1c:e4:93:6c:56:5d:c1:fd:f1:5f: 67:5d:df:b9:7f:ea:14:4c:f8:5c:76:a5:17:43:11: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:A9:E7:54:6F:EC:F0:C7:60:03:67:84:1B:7E:11:B3:11:3F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f69b105-e943-33e2-9278-59079d5bc6bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b9:28:75:4a:d7:c5:a7:16:61:7f:9a:f8:05:40:6f:34:b6: b9:6c:54:76:54:1f:0a:73:fd:3b:9b:c1:1e:61:9e:9a:98:96: 7c:5a:86:0d:67:33:10:11:c4:fe:b4:70:a3:cf:9b:43:dc:48: 16:4c:3a:f9:36:4b:d0:4e:84:12:7b:00:ac:28:dd:0a:db:99: b6:aa:bb:26:e2:2b:c9:2d:d0:aa:3a:61:03:bc:e8:07:bb:29: 64:4b:c4:1b:14:27:dd:79:da:86:38:6d:a5:d9:48:c3:aa:a2: b4:57:d5:81:2c:42:ee:f1:bb:55:03:13:90:11:79:74:31:a6: fe:f6:8b:e1:24:79:1a:c2:26:c2:4e:d2:07:bf:11:7d:ca:98: 8a:1e:a0:4d:18:03:8b:93:15:f7:9e:ac:8a:ac:e0:93:a1:96: 7a:de:e9:2e:b3:c7:f4:37:cf:2c:5b:4e:54:9d:71:40:e7:81: 7a:e9:24:af:09:4d:8d:b7:7c:47:97:5f:ae:09:ac:ee:fc:c0: 56:9a:5f:81:c2:90:55:3e:ea:f3:44:94:0d:a3:7e:bc:5c:dc: 97:b8:0b:d8:51:60:15:d3:15:b7:4c:cf:ca:58:9c:ff:8e:d5: 76:1b:95:4c:91:c5:c5:81:5a:38:fd:4a:78:0d:ae:e1:f4:77: 5e:f6:88:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V40dV01an/fLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MjRmOWUwM2QtZDRiYi00MmMyLWFjYzMtNjNkM2Y0NzRiZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa++FJkpXHeMh+NpfwMPB4QSDs3iFrEJiw8M p7hEREmHg2YaA6ZEQukbC2wfTLo5rfJxeZ5A4GNEaaMB/YwOt0kQvwka8+tkySNq kdgPGVn+eQNMjMz7FABw+GNswaJspVF1psZVQaKTF/Zlxxp23rnH4Jbof43wi9d9 Jup7HwBkIElfsrSbPhsBc9g8fNaTfNiUGiYCeC5LzT2wsuuRWrAqZ/w5hxSFpfCX xjvQI9sCh/coql0ajOHikDy7zLIx4yxLaeFvP6yE9xl+6jMF2gwNuyLLm93tBdwy N+EBDnxEnpk6Cxzkk2xWXcH98V9nXd+5f+oUTPhcdqUXQxG/nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIc+qedUb+zwx2ADZ4QbfhGzET97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGY2OWIxMDUtZTk0My0z M2UyLTkyNzgtNTkwNzlkNWJjNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIG5KHVK18WnFmF/mvgFQG80trlsVHZUHwpz/TubwR5hnpqYlnxa hg1nMxARxP60cKPPm0PcSBZMOvk2S9BOhBJ7AKwo3QrbmbaquybiK8kt0Ko6YQO8 6Ae7KWRLxBsUJ9152oY4baXZSMOqorRX1YEsQu7xu1UDE5AReXQxpv72i+EkeRrC JsJO0ge/EX3KmIoeoE0YA4uTFfeerIqs4JOhlnre6S6zx/Q3zyxbTlSdcUDngXrp JK8JTY23fEeXX64JrO78wFaaX4HCkFU+6vNElA2jfrxc3Je4C9hRYBXTFbdMz8pY nP+O1XYblUyRxcWBWjj9SngNruH0d172iEc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:45 2025 by rpki-client