$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9537350b-9779-32ae-b13b-e6f3bd7dfa44.roa File: 9537350b-9779-32ae-b13b-e6f3bd7dfa44.roa (raw, json) Hash identifier: WJC8llq2WMIuUVAZ6ytlvQ3DEsf5gn2MYSUeu9oav5g= Subject key identifier: 89:38:A6:46:73:6B:0D:39:D6:5B:4E:BA:30:0E:58:04:7A:01:77:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15B6EDB25C0A80336EE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9537350b-9779-32ae-b13b-e6f3bd7dfa44.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396542 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5b:6e:db:25:c0:a8:03:36:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=dfe64a84-66f1-463d-b362-7a4fa9b2a782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:b3:3f:41:2a:ca:02:b1:b8:30:30:3f:6d: ab:7b:26:ea:82:ef:e9:f1:0c:46:6a:8a:0c:bf:1a: 85:69:34:13:2f:57:e0:60:8a:2f:d5:63:9c:8d:c2: 75:2e:e6:25:f1:b6:56:7c:5f:b7:d4:47:ee:0a:66: 6e:02:f6:78:a1:50:9b:8b:d5:ed:55:98:f1:1c:a1: c6:a0:23:a1:12:39:ce:9f:bb:c6:73:1d:ad:e2:eb: 36:df:4a:89:50:3f:f5:08:9c:ed:81:81:3d:ba:44: 43:ae:d9:a1:76:44:e4:a7:74:e6:dd:fb:9d:ac:ee: 52:74:ba:04:91:2a:10:dd:b9:50:0d:b9:eb:88:4c: cc:66:68:84:83:75:25:96:04:51:dd:ea:f5:4d:90: f0:1c:3a:61:5a:36:b0:7e:53:13:06:9a:c9:a4:f9: 0a:1c:4f:1c:0d:e7:dc:6e:e8:5d:bf:d9:57:7f:83: b0:48:b0:bc:6a:26:20:97:7b:f8:ec:37:0a:a4:0e: 79:31:e9:ea:81:b1:3e:d6:49:db:b5:f0:0a:65:f9: b3:89:9b:a4:7a:d2:29:62:82:69:ad:c6:46:f1:8d: 30:f9:d2:59:2c:e1:fb:13:f5:a0:ac:3f:91:d6:22: d7:29:66:cc:e9:bb:c3:32:67:76:c7:01:f0:21:93: 52:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:38:A6:46:73:6B:0D:39:D6:5B:4E:BA:30:0E:58:04:7A:01:77:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9537350b-9779-32ae-b13b-e6f3bd7dfa44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:48:24:28:b5:c8:a1:7d:5d:13:ee:e7:c5:0b:5e:ed:3f:04: 0b:19:8f:25:10:26:21:dc:cf:f1:fb:12:21:8e:15:df:5b:c4: 43:19:af:cb:bb:c6:5f:59:d7:51:f8:23:7b:97:5f:ce:92:0a: a3:8a:70:33:8a:55:c1:54:e2:d5:3b:8f:f8:e2:d2:f3:0d:c1: 97:8e:7f:da:06:bb:1e:fe:25:da:3d:c3:75:18:11:96:77:96: b1:fd:09:d8:99:eb:7f:01:6e:1c:06:29:19:56:f5:be:d9:85: bf:a4:33:fb:73:1a:ae:29:ff:62:00:96:f1:8c:91:9f:32:0b: 25:cd:ae:53:78:25:eb:66:ca:12:c9:c9:a6:7b:dd:ee:2c:87: d9:2a:cc:be:d3:2f:84:06:ee:ea:d1:d4:40:d1:23:13:8c:8d: 79:7a:ea:a0:da:c4:b8:da:af:5f:85:5c:aa:b2:e3:ae:2f:2e: 69:31:df:9e:35:c3:de:03:dd:87:43:98:63:d0:a6:47:c4:1e: 71:6b:25:2a:94:7a:90:26:76:e3:7e:49:ef:3c:6d:9e:54:c3: b0:2f:fe:cd:e6:7e:f1:30:e1:1d:54:2c:77:94:e6:ff:2e:f0: 51:34:a1:da:f0:3e:8d:19:d4:b6:61:a6:70:0a:a2:08:ba:f2: ad:13:e8:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8Vtu2yXAqAM27gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGZlNjRhODQtNjZmMS00NjNkLWIzNjItN2E0ZmE5YjJhNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTizP0EqygKxuDAwP22reybqgu/p8QxGaooM vxqFaTQTL1fgYIov1WOcjcJ1LuYl8bZWfF+31EfuCmZuAvZ4oVCbi9XtVZjxHKHG oCOhEjnOn7vGcx2t4us230qJUD/1CJztgYE9ukRDrtmhdkTkp3Tm3fudrO5SdLoE kSoQ3blQDbnriEzMZmiEg3UllgRR3er1TZDwHDphWjawflMTBprJpPkKHE8cDefc buhdv9lXf4OwSLC8aiYgl3v47DcKpA55MenqgbE+1knbtfAKZfmziZuketIpYoJp rcZG8Y0w+dJZLOH7E/WgrD+R1iLXKWbM6bvDMmd2xwHwIZNSFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIk4pkZzaw051ltOujAOWAR6AXfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTUzNzM1MGItOTc3OS0z MmFlLWIxM2ItZTZmM2JkN2RmYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlIJCi1yKF9XRPu58ULXu0/BAsZjyUQJiHcz/H7EiGOFd9bxEMZ r8u7xl9Z11H4I3uXX86SCqOKcDOKVcFU4tU7j/ji0vMNwZeOf9oGux7+Jdo9w3UY EZZ3lrH9CdiZ638BbhwGKRlW9b7Zhb+kM/tzGq4p/2IAlvGMkZ8yCyXNrlN4Jetm yhLJyaZ73e4sh9kqzL7TL4QG7urR1EDRIxOMjXl66qDaxLjar1+FXKqy464vLmkx 3541w94D3YdDmGPQpkfEHnFrJSqUepAmduN+Se88bZ5Uw7Av/s3mfvEw4R1ULHeU 5v8u8FE0odrwPo0Z1LZhpnAKogi68q0T6Pk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:59 2025 by rpki-client