$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fc84630-ca08-3f55-8c10-a6116461ef02.roa File: 9fc84630-ca08-3f55-8c10-a6116461ef02.roa (raw, json) Hash identifier: bkSY/C3pHDnR7KEn2PJaINdJBghUSs81szH4CEfjnV4= Subject key identifier: 38:D9:2D:E3:F2:83:22:B2:FF:50:BC:25:34:59:5A:9F:4F:EF:C9:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE8913A326E66916049B24A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fc84630-ca08-3f55-8c10-a6116461ef02.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:68::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3a:32:6e:66:91:60:49:b2:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=e243459d-14a3-4b36-afab-d5fdaabd534f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:09:6d:7f:36:1f:ab:c7:ca:30:73:47:8f: 0e:46:6e:91:70:96:f6:16:91:eb:e4:91:bd:08:a7: a5:46:cb:5e:d5:e8:a6:75:51:8d:8c:6d:1b:16:0a: 7f:f7:01:53:0b:87:94:20:37:a9:e8:86:c2:a8:6c: 1d:06:b1:96:6e:39:35:76:1b:90:64:34:9a:16:db: 3c:6a:5f:88:36:f4:8d:65:9a:eb:19:ad:a2:6a:d6: 5b:71:d9:32:4c:21:76:31:ec:12:d1:83:47:ab:fa: 07:49:84:ef:db:f6:ca:d1:30:73:34:06:f5:6d:4c: 1b:6f:64:ad:8c:ce:67:8a:94:02:71:ea:f2:b4:91: ac:6d:f1:df:30:cd:d9:fb:1d:8f:6c:71:96:bd:e6: 26:17:aa:88:94:09:b2:bb:5e:43:f4:b3:81:97:9b: 98:ac:6b:f1:71:69:65:e6:ec:ce:20:7a:3d:b3:ea: 82:32:31:c5:d5:29:cd:87:cd:85:3a:79:12:21:d1: b2:b1:d7:64:6d:a8:74:b5:d0:d8:aa:20:df:15:c0: 47:6b:c5:73:9f:32:73:a0:cc:83:bf:1b:00:98:41: 04:f4:25:22:dc:37:45:1e:2a:a8:b8:9c:38:89:2c: 8f:8f:56:9d:85:90:50:b7:6f:e2:5a:f0:82:77:6d: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:2D:E3:F2:83:22:B2:FF:50:BC:25:34:59:5A:9F:4F:EF:C9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fc84630-ca08-3f55-8c10-a6116461ef02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:68::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a6:8b:00:6c:1d:6c:15:29:ae:3d:3d:02:d4:2d:23:20:33: 80:cd:d0:99:19:df:02:5f:e1:be:5d:2c:46:87:88:94:59:f8: 1f:96:9e:db:e3:59:a9:ba:09:9f:4f:ea:e7:8e:b2:b3:c7:ee: 32:9c:0a:c6:6d:54:9c:67:f7:a9:90:02:71:2b:54:fc:4b:3e: 99:1f:95:c3:ce:06:da:14:4c:90:3e:8a:a2:4a:34:c6:47:b2: 90:1f:5f:59:c2:dc:06:a7:f3:69:11:68:de:4a:63:f2:c3:2c: 2b:ad:3c:b4:fb:9c:bc:0c:7f:d1:11:92:32:ed:9c:50:bc:de: f9:fb:af:2c:8b:5f:57:da:96:4c:15:2d:89:3b:e9:82:2b:8a: 18:6c:c0:9b:7f:68:91:18:3f:1a:0c:f2:80:dc:c7:7b:ae:a4: 8c:98:a9:5b:1e:15:b2:2f:b8:85:48:85:26:33:cc:b0:c5:d1: 54:7c:23:0c:30:3e:09:39:c4:e6:8f:59:82:1f:4f:a5:b3:fd: 20:19:29:76:8f:f3:6b:a2:94:27:b6:59:e0:fb:ef:74:4b:25: cb:5b:dc:9b:97:24:bd:b6:00:9e:0f:f2:11:73:3d:76:3d:95: e6:f3:38:dc:55:95:37:c7:70:fd:43:1a:ac:73:bb:fe:03:d0: 74:53:de:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErokToybmaRYEmySgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZTI0MzQ1OWQtMTRhMy00YjM2LWFmYWItZDVmZGFhYmQ1MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqAJbX82H6vHyjBzR48ORm6RcJb2FpHr5JG9 CKelRste1eimdVGNjG0bFgp/9wFTC4eUIDep6IbCqGwdBrGWbjk1dhuQZDSaFts8 al+INvSNZZrrGa2iatZbcdkyTCF2MewS0YNHq/oHSYTv2/bK0TBzNAb1bUwbb2St jM5nipQCcerytJGsbfHfMM3Z+x2PbHGWveYmF6qIlAmyu15D9LOBl5uYrGvxcWll 5uzOIHo9s+qCMjHF1SnNh82FOnkSIdGysddkbah0tdDYqiDfFcBHa8VznzJzoMyD vxsAmEEE9CUi3DdFHiqouJw4iSyPj1adhZBQt2/iWvCCd21f+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjZLePygyKy/1C8JTRZWp9P78lkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWZjODQ2MzAtY2EwOC0z ZjU1LThjMTAtYTYxMTY0NjFlZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIKmiwBsHWwVKa49PQLULSMgM4DN0JkZ3wJf4b5dLEaHiJRZ+B+W ntvjWam6CZ9P6ueOsrPH7jKcCsZtVJxn96mQAnErVPxLPpkflcPOBtoUTJA+iqJK NMZHspAfX1nC3Aan82kRaN5KY/LDLCutPLT7nLwMf9ERkjLtnFC83vn7ryyLX1fa lkwVLYk76YIrihhswJt/aJEYPxoM8oDcx3uupIyYqVseFbIvuIVIhSYzzLDF0VR8 IwwwPgk5xOaPWYIfT6Wz/SAZKXaP82uilCe2WeD773RLJctb3JuXJL22AJ4P8hFz PXY9lebzONxVlTfHcP1DGqxzu/4D0HRT3rg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:07:41 2025 by rpki-client