$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c62d809d-0431-3dab-b5c8-6cd38216a340.roa File: c62d809d-0431-3dab-b5c8-6cd38216a340.roa (raw, json) Hash identifier: X3rjBJvxrMzaw/zvMcV2t7yCqixHjMawOz3z/HefTZM= Subject key identifier: 58:FA:B3:DF:86:15:EC:B4:53:05:1B:BC:99:28:36:E8:1A:37:0A:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15C2A6AF8A11D35239780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c62d809d-0431-3dab-b5c8-6cd38216a340.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396603 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5c:2a:6a:f8:a1:1d:35:23:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8097ab31-cc8a-4d0f-971c-c234624e5560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:b7:9c:b0:10:39:04:2b:98:5e:8d:bd:87: 72:9c:fb:23:b0:0c:c9:37:51:49:1b:7c:95:dc:22: 6e:52:77:cd:d1:e7:be:fc:cb:9c:f1:3f:aa:c8:a2: c8:44:66:65:08:1c:be:83:cc:32:c1:ef:74:f8:61: e3:d1:a8:a4:d6:1b:14:95:69:2f:db:25:3b:27:fd: 97:00:e9:7c:ca:d7:d2:39:d0:aa:9c:6c:27:b5:56: 37:8c:5b:7f:56:fe:69:2b:7c:85:ae:f1:e9:8c:3e: ce:48:c6:c3:34:18:f1:f7:bf:c0:ad:ee:31:ec:8a: 1d:80:a1:24:f9:44:e1:f6:c7:72:52:3c:f6:88:cf: a2:f8:0c:97:a3:8d:d1:f9:3d:93:2a:78:86:0c:3a: 0b:0c:73:45:c6:72:51:4b:67:18:13:06:fc:85:43: 85:5f:8f:0e:ea:6c:fb:86:ba:61:7a:de:ed:d0:27: 5c:de:dd:6f:33:c4:89:2f:b3:9e:05:94:14:fd:b1: a0:77:52:06:2b:c9:ef:5c:0a:26:9f:30:30:e0:11: 42:34:ad:0b:11:ad:95:a1:31:bc:90:95:13:a5:eb: 55:e4:d2:9f:8e:b4:a6:e5:89:3d:78:88:90:67:95: 58:5b:e7:55:f2:db:83:62:32:ad:15:66:8f:42:e0: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FA:B3:DF:86:15:EC:B4:53:05:1B:BC:99:28:36:E8:1A:37:0A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c62d809d-0431-3dab-b5c8-6cd38216a340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:84:10:97:e4:87:75:2a:1a:6c:0b:f7:a0:39:47:de:47:82: 63:ad:4c:66:88:9a:3f:12:17:e2:c4:ef:4a:37:07:84:3c:b2: 93:ff:78:f3:a1:51:41:9a:67:bf:77:2b:99:75:e2:85:2e:f8: 4e:9d:68:37:a7:0d:dc:9d:ad:49:fc:a6:ed:fa:07:b4:be:4c: 2e:aa:64:b5:b6:75:05:9d:0e:ca:82:07:d3:91:ca:40:ff:31: 18:7e:11:6c:b8:0a:98:44:99:ae:2c:ed:f3:de:89:f0:3e:e9: 93:92:d5:6a:74:0e:be:9e:66:ea:78:bd:68:e5:75:fb:83:3f: 0e:8c:a1:cc:5a:06:17:d7:3a:02:1b:d9:77:a0:2b:7f:ed:bc: 27:ca:ac:b5:5f:b0:76:a9:5d:23:06:4b:98:66:cc:cf:43:32: 84:c9:5b:21:63:3a:32:ec:3d:fa:4a:c6:b7:ce:9c:d3:74:f2: 3f:78:70:d0:82:ee:62:30:c8:b1:ce:7c:09:45:06:0f:5b:fb: 88:80:a8:c1:33:aa:86:54:9e:3f:70:96:1a:c1:cb:e5:98:f8: e8:24:80:68:4e:1f:64:2d:25:56:05:21:41:dc:ff:67:25:67: c5:4d:7b:90:b8:af:2c:58:cb:8f:32:47:ec:78:c5:a7:5c:81: d3:e6:e1:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VwqavihHTUjl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ODA5N2FiMzEtY2M4YS00ZDBmLTk3MWMtYzIzNDYyNGU1NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWq3nLAQOQQrmF6NvYdynPsjsAzJN1FJG3yV 3CJuUnfN0ee+/Muc8T+qyKLIRGZlCBy+g8wywe90+GHj0aik1hsUlWkv2yU7J/2X AOl8ytfSOdCqnGwntVY3jFt/Vv5pK3yFrvHpjD7OSMbDNBjx97/Are4x7IodgKEk +UTh9sdyUjz2iM+i+AyXo43R+T2TKniGDDoLDHNFxnJRS2cYEwb8hUOFX48O6mz7 hrphet7t0Cdc3t1vM8SJL7OeBZQU/bGgd1IGK8nvXAomnzAw4BFCNK0LEa2VoTG8 kJUTpetV5NKfjrSm5Yk9eIiQZ5VYW+dV8tuDYjKtFWaPQuCm+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFj6s9+GFey0UwUbvJkoNugaNwqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzYyZDgwOWQtMDQzMS0z ZGFiLWI1YzgtNmNkMzgyMTZhMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOEEJfkh3UqGmwL96A5R95HgmOtTGaImj8SF+LE70o3B4Q8spP/ ePOhUUGaZ793K5l14oUu+E6daDenDdydrUn8pu36B7S+TC6qZLW2dQWdDsqCB9OR ykD/MRh+EWy4CphEma4s7fPeifA+6ZOS1Wp0Dr6eZup4vWjldfuDPw6MocxaBhfX OgIb2XegK3/tvCfKrLVfsHapXSMGS5hmzM9DMoTJWyFjOjLsPfpKxrfOnNN08j94 cNCC7mIwyLHOfAlFBg9b+4iAqMEzqoZUnj9wlhrBy+WY+OgkgGhOH2QtJVYFIUHc /2clZ8VNe5C4ryxYy48yR+x4xadcgdPm4S8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:32 2025 by rpki-client