$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa File: 959a1507-980e-3463-9f5a-17f9451099ae.roa (raw, json) Hash identifier: yo3AuQDeKURWktcJF/UM5nSK3mCOq2W7vKZSolMtCJg= Subject key identifier: BC:33:CE:F5:4A:A1:AE:08:EF:BC:B7:CA:0D:91:47:18:DA:ED:50:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1598BD971DEACE9FB1D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396581 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:8b:d9:71:de:ac:e9:fb:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=32a18222-8652-4489-aba0-3aba65debc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:ff:c9:eb:95:cf:1a:8b:14:8c:a8:b1:b1: c9:6b:ff:29:0e:63:15:8f:3e:fe:bc:a7:d3:7c:8b: 4c:b7:2a:a9:a4:1b:90:6d:c3:7b:d3:17:b8:ff:72: 0d:34:51:f7:83:36:54:92:5a:69:fb:3e:45:96:79: f3:33:76:3e:76:3d:1b:44:6b:9b:b1:ee:5b:d2:e5: e8:de:e7:97:d2:c2:0b:0d:8a:65:d8:92:0d:23:3f: 08:b0:48:cd:0d:ef:38:a2:cf:3e:8f:26:6d:25:e6: 89:36:cf:be:19:f1:cc:42:f9:77:0b:a2:e1:83:c5: 1b:e3:2b:e4:49:2a:ae:6a:17:86:60:66:b8:20:ff: 6c:4f:3f:0b:97:fd:c3:7b:11:80:98:99:51:35:70: 61:b3:34:d0:c3:10:9a:b0:12:e9:6d:b3:9a:fc:a0: 80:aa:3d:05:83:2a:65:f2:81:25:68:31:be:f0:9c: 6a:57:39:dd:7d:f5:4e:d9:f1:22:89:f7:d0:3b:1e: da:a1:23:3b:af:2b:57:60:6e:3e:b8:9e:bc:b2:ca: 66:6f:a3:c1:7a:bd:32:16:35:ab:79:a8:27:14:2c: a9:d9:a8:ac:d4:f8:7f:59:7f:8e:3f:07:51:c2:b9: d2:ac:8d:2e:de:9c:12:69:02:b9:7b:88:8d:76:6c: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:33:CE:F5:4A:A1:AE:08:EF:BC:B7:CA:0D:91:47:18:DA:ED:50:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ad:2f:01:0d:a3:bf:52:84:f0:db:e5:09:77:8e:2d:15:b6: 77:fb:33:ca:f0:d9:dd:3e:17:6e:ca:34:42:d0:8e:b0:8b:80: 9e:0a:d0:e5:7d:c0:f5:5e:de:c8:76:8b:aa:cb:5b:59:90:15: c8:73:19:8f:ee:5d:1e:f7:ef:d6:9f:ce:db:a2:02:bd:f7:d0: c4:88:64:88:3c:45:60:13:dd:56:8b:9f:c2:29:30:81:21:b5: 6a:ca:31:be:53:2b:d5:38:b4:a8:ca:ac:51:98:d4:62:37:01: 34:28:40:de:72:ac:67:96:9f:90:1d:53:d6:dd:25:c9:28:8f: e3:17:06:50:67:2b:12:3d:04:d8:2c:ea:e9:b2:17:50:35:45: 17:ad:27:f8:cc:a9:70:16:97:1c:62:ef:0d:82:a3:cc:f2:ca: 7f:52:5f:21:49:40:2a:ba:c7:a2:f5:11:c7:f8:90:72:fd:13: 17:e5:98:a7:90:65:d0:97:14:a3:8e:1a:b3:d8:e3:b1:01:57: 4a:a6:d2:5f:bf:34:cc:30:cc:ec:36:71:7d:38:29:d2:36:49: cf:e6:27:41:58:48:e7:da:4b:92:ef:d3:c8:45:f1:00:ef:d3: 9a:b2:bc:1c:0b:1c:e7:ea:61:0e:a6:29:70:82:a4:81:b2:89: 2b:42:8f:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VmL2XHerOn7HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MzJhMTgyMjItODY1Mi00NDg5LWFiYTAtM2FiYTY1ZGViYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxD/yeuVzxqLFIyosbHJa/8pDmMVjz7+vKfT fItMtyqppBuQbcN70xe4/3INNFH3gzZUklpp+z5FlnnzM3Y+dj0bRGubse5b0uXo 3ueX0sILDYpl2JINIz8IsEjNDe84os8+jyZtJeaJNs++GfHMQvl3C6Lhg8Ub4yvk SSquaheGYGa4IP9sTz8Ll/3DexGAmJlRNXBhszTQwxCasBLpbbOa/KCAqj0Fgypl 8oElaDG+8JxqVzndffVO2fEiiffQOx7aoSM7rytXYG4+uJ68sspmb6PBer0yFjWr eagnFCyp2ais1Ph/WX+OPwdRwrnSrI0u3pwSaQK5e4iNdmzb4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLwzzvVKoa4I77y3yg2RRxja7VCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU5YTE1MDctOTgwZS0z NDYzLTlmNWEtMTdmOTQ1MTA5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCtLwENo79ShPDb5Ql3ji0Vtnf7M8rw2d0+F27KNELQjrCLgJ4K 0OV9wPVe3sh2i6rLW1mQFchzGY/uXR7379afztuiAr330MSIZIg8RWAT3VaLn8Ip MIEhtWrKMb5TK9U4tKjKrFGY1GI3ATQoQN5yrGeWn5AdU9bdJckoj+MXBlBnKxI9 BNgs6umyF1A1RRetJ/jMqXAWlxxi7w2Co8zyyn9SXyFJQCq6x6L1Ecf4kHL9Exfl mKeQZdCXFKOOGrPY47EBV0qm0l+/NMwwzOw2cX04KdI2Sc/mJ0FYSOfaS5Lv08hF 8QDv05qyvBwLHOfqYQ6mKXCCpIGyiStCj7A= -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:35 2025 by rpki-client