$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa File: b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa (raw, json) Hash identifier: eERUivUffOk2MpjzwyzF9ruKr5vvskLcVY+bGAKYQPA= Subject key identifier: 49:79:86:A8:E2:F3:13:26:18:44:CA:C8:61:35:B7:FC:79:46:1F:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE8913F87EFF20D3B04DB9C98 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 396828 IP address blocks: 2620:74:7a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3f:87:ef:f2:0d:3b:04:db:9c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=70b1b17f-3d8e-4eee-bf3f-a05690a5a9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:c3:3e:a4:0a:e6:c3:1f:82:d3:6c:cb:15: d6:a2:d0:72:5c:fd:5e:90:77:ff:c4:67:9a:aa:93: 99:93:bd:9d:4a:d0:df:c2:b9:11:22:92:42:25:73: f2:24:3c:5c:67:ac:8a:46:d5:87:c5:80:8b:97:92: 76:a9:31:b2:95:47:a0:4c:c4:f4:17:59:a9:f3:f7: 98:b0:21:e4:26:2c:f9:e8:24:6a:8e:6d:43:cb:12: a1:bc:9e:e0:39:7d:ec:b6:b2:55:ad:a1:4d:db:0b: b4:8e:d3:85:7c:a2:e4:71:0c:50:ff:e6:c0:dc:e0: c8:83:6c:bd:34:c2:a6:c2:6f:dc:39:6f:8e:3d:95: 7b:40:3b:b8:6b:a6:1e:5a:35:50:a7:42:b4:63:c6: db:72:43:9b:7f:91:e9:b8:cc:29:f2:49:cc:40:a3: fb:09:ff:cb:c6:a7:c6:1c:24:a2:cf:ac:76:c7:8a: 11:45:fa:07:db:85:08:4f:95:d8:ed:c1:32:a3:d9: 38:3f:f5:1d:3e:f3:3b:47:00:34:de:de:46:1a:28: a7:1f:00:9d:50:43:06:35:70:fb:28:fd:f8:66:fe: d3:48:c6:5b:c2:f3:ad:54:a7:71:06:3c:f2:03:90: 95:53:52:ef:0d:fa:34:fe:ea:86:55:13:b4:35:54: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:86:A8:E2:F3:13:26:18:44:CA:C8:61:35:B7:FC:79:46:1F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b81880bd-ad23-3a87-a158-4f0d6be9eb3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4d:be:aa:5b:4f:f7:b9:22:fa:5b:ed:57:fc:f3:eb:b1:f9: a4:27:b5:70:3a:81:33:a6:5e:5b:10:32:86:1e:be:b0:4f:06: b0:c5:00:bb:59:c7:ba:1d:91:e3:e8:b5:c1:46:3f:23:be:43: 06:40:e0:23:da:db:39:93:20:c9:c8:ab:a6:87:47:f5:34:7a: d2:16:38:38:91:1c:d0:53:0d:ee:9c:86:22:76:6a:93:c0:27: 1c:10:48:58:b1:fe:e9:20:d3:cf:da:e1:3f:53:a0:72:98:91: 53:cd:82:52:be:c9:a6:f6:f1:7d:a5:4f:2b:dd:1b:b8:d1:22: c7:7e:1d:a7:b2:bf:a4:ba:be:10:83:ec:54:6c:12:8c:9f:5c: 3d:82:39:3f:61:ca:7c:7d:d6:45:5c:1d:64:cf:94:9a:ba:8f: 4d:b7:c6:db:de:23:2b:06:19:a3:fd:f6:22:13:5c:b8:0e:52: ac:b8:62:02:fb:b9:90:f0:26:50:fa:1f:a7:1b:46:64:1c:9e: 11:17:cb:8a:16:07:d5:93:9d:8d:f1:ce:4f:97:45:94:91:a9: dd:c7:7c:1d:6b:d4:f5:71:3e:2d:c7:fc:1d:fc:6c:dc:2b:c6: 0a:85:c5:e2:6c:fb:91:49:90:cd:14:d8:5b:90:72:6f:20:eb: b6:c7:9e:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErokT+H7/INOwTbnJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NzBiMWIxN2YtM2Q4ZS00ZWVlLWJmM2YtYTA1NjkwYTVhOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gnDPqQK5sMfgtNsyxXWotByXP1ekHf/xGea qpOZk72dStDfwrkRIpJCJXPyJDxcZ6yKRtWHxYCLl5J2qTGylUegTMT0F1mp8/eY sCHkJiz56CRqjm1DyxKhvJ7gOX3strJVraFN2wu0jtOFfKLkcQxQ/+bA3ODIg2y9 NMKmwm/cOW+OPZV7QDu4a6YeWjVQp0K0Y8bbckObf5HpuMwp8knMQKP7Cf/LxqfG HCSiz6x2x4oRRfoH24UIT5XY7cEyo9k4P/UdPvM7RwA03t5GGiinHwCdUEMGNXD7 KP34Zv7TSMZbwvOtVKdxBjzyA5CVU1LvDfo0/uqGVRO0NVT8hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEl5hqji8xMmGETKyGE1t/x5Rh8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjgxODgwYmQtYWQyMy0z YTg3LWExNTgtNGYwZDZiZTllYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpNvqpbT/e5Ivpb7Vf88+ux+aQntXA6gTOmXlsQMoYevrBPBrDF ALtZx7odkePotcFGPyO+QwZA4CPa2zmTIMnIq6aHR/U0etIWODiRHNBTDe6chiJ2 apPAJxwQSFix/ukg08/a4T9ToHKYkVPNglK+yab28X2lTyvdG7jRIsd+Haeyv6S6 vhCD7FRsEoyfXD2COT9hynx91kVcHWTPlJq6j023xtveIysGGaP99iITXLgOUqy4 YgL7uZDwJlD6H6cbRmQcnhEXy4oWB9WTnY3xzk+XRZSRqd3HfB1r1PVxPi3H/B38 bNwrxgqFxeJs+5FJkM0U2FuQcm8g67bHnrg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:03 2025 by rpki-client