$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa File: c853e1d5-13ac-351a-9d88-98dde451d814.roa (raw, json) Hash identifier: HxAtVDJFHrRc+cL0cD2u/UZPYX9n4ERoGSqcKb6dCaQ= Subject key identifier: 46:B6:20:33:71:7E:87:39:8A:43:5E:27:D1:91:F3:FD:F9:42:38:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ACE0BA93B38532E354F1ECB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a9:3b:38:53:2e:35:4f:1e:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=8813730f-acc5-4310-82da-57f4dc36ca8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:00:3a:bd:27:5b:3e:b0:b5:2e:b0:61:e3:42: e0:db:b1:32:fb:50:58:06:ef:ad:1c:e6:cf:0f:0a: e5:fb:ea:46:20:b0:46:f6:31:04:ab:a7:de:22:50: 13:f6:98:0a:a7:16:89:43:5f:0f:80:cd:b9:96:73: fb:ae:14:3b:00:61:29:f4:a8:83:33:8f:9b:68:94: 35:d5:69:a2:dc:51:44:70:67:7d:03:ba:24:a8:64: 24:ab:5e:4e:9f:d8:e4:54:db:32:80:c5:71:94:b9: 43:2b:2e:3b:47:97:a5:de:d1:6d:7b:f0:8c:31:ef: be:ca:7b:c2:a0:44:77:9c:42:20:fd:5d:53:09:2d: fe:57:21:74:75:62:6d:6c:61:5d:00:1b:18:1d:5d: f9:85:5f:fb:ba:21:8d:86:40:10:67:9d:ef:6f:d3: ad:fb:02:f7:ca:f7:de:a5:77:64:ea:76:4c:88:46: b6:53:16:24:0f:1a:1b:cf:8e:8e:8d:be:ce:42:70: 78:64:e9:e8:87:eb:9c:bc:74:30:82:8c:e8:28:3a: 2d:49:e6:74:be:31:55:c8:bd:51:2d:61:47:20:42: d3:ef:e7:16:d6:82:a8:b9:2f:d6:fa:ed:75:ff:cb: 64:c3:30:5c:8a:3c:f7:2c:6a:53:d7:da:c2:bf:83: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:20:33:71:7E:87:39:8A:43:5E:27:D1:91:F3:FD:F9:42:38:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:59:56:b8:4b:b1:f9:5d:cf:26:c9:96:31:4f:3b:e5:c8:f8: 73:47:5f:4c:d6:1f:75:99:1a:a5:09:77:c8:bc:59:85:ae:6d: e7:95:cd:ae:b5:dc:92:0c:f2:35:27:de:e6:21:02:19:bb:9d: 9c:88:7f:55:18:df:a0:d5:a7:f7:9f:b1:78:b3:a9:e7:e9:8c: 64:b1:33:db:5b:2e:e4:92:d7:0d:d6:e8:f5:39:b8:16:5d:bc: 81:85:c5:aa:97:ad:10:6a:fc:10:c5:be:17:47:73:60:54:7c: 63:fe:52:77:26:0a:bd:91:21:69:d3:f2:50:b3:a3:37:ea:92: bd:1f:62:09:bc:07:b3:99:81:ba:cf:9b:e1:40:25:5a:b7:7a: e4:72:30:37:44:84:bd:ca:ee:c8:22:a5:6c:0a:ff:d9:49:e6: b4:af:94:25:e1:50:b3:b7:81:95:41:bb:96:3a:b5:68:cd:35: 40:8f:b7:d2:69:3c:15:d8:8a:9f:5f:73:00:07:85:95:96:5e: 72:e7:c5:5f:0a:a1:25:4d:54:75:f7:d7:ff:5e:04:dd:7f:79: 1e:e4:bb:3b:99:06:72:ed:42:8f:b6:91:d6:3c:c1:87:70:91: dd:2f:e3:45:53:1b:0e:ce:8a:88:b7:66:5d:d2:bb:8a:9e:f3: 0c:89:c3:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC6k7OFMuNU8ey4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ODgxMzczMGYtYWNjNS00MzEwLTgyZGEtNTdmNGRjMzZjYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQA6vSdbPrC1LrBh40Lg27Ey+1BYBu+tHObP Dwrl++pGILBG9jEEq6feIlAT9pgKpxaJQ18PgM25lnP7rhQ7AGEp9KiDM4+baJQ1 1Wmi3FFEcGd9A7okqGQkq15On9jkVNsygMVxlLlDKy47R5el3tFte/CMMe++ynvC oER3nEIg/V1TCS3+VyF0dWJtbGFdABsYHV35hV/7uiGNhkAQZ53vb9Ot+wL3yvfe pXdk6nZMiEa2UxYkDxobz46Ojb7OQnB4ZOnoh+ucvHQwgozoKDotSeZ0vjFVyL1R LWFHIELT7+cW1oKouS/W+u11/8tkwzBcijz3LGpT19rCv4MzrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEa2IDNxfoc5ikNeJ9GR8/35QjgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1M2UxZDUtMTNhYy0z NTFhLTlkODgtOThkZGU0NTFkODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlZVrhLsfldzybJljFPO+XI+HNHX0zWH3WZGqUJd8i8WYWubeeV za613JIM8jUn3uYhAhm7nZyIf1UY36DVp/efsXizqefpjGSxM9tbLuSS1w3W6PU5 uBZdvIGFxaqXrRBq/BDFvhdHc2BUfGP+UncmCr2RIWnT8lCzozfqkr0fYgm8B7OZ gbrPm+FAJVq3euRyMDdEhL3K7sgipWwK/9lJ5rSvlCXhULO3gZVBu5Y6tWjNNUCP t9JpPBXYip9fcwAHhZWWXnLnxV8KoSVNVHX31/9eBN1/eR7kuzuZBnLtQo+2kdY8 wYdwkd0v40VTGw7Oioi3Zl3Su4qe8wyJwy4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:51:58 2025 by rpki-client