$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa File: ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa (raw, json) Hash identifier: EVBjEdDWpRbMbld+PlVV8kVFFsJd2BPvr9hg9XU6Ot4= Subject key identifier: 00:8B:AF:93:0F:5D:74:93:A9:C1:1E:2A:87:3D:F8:89:1F:94:47:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15D1040F86565CC942D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396572 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:10:40:f8:65:65:cc:94:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=febc00fb-d5fa-44da-8035-cb7637a09e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6d:5c:89:2a:ea:c1:65:34:d9:53:05:6d:f4: 7d:40:51:8d:b4:45:97:0d:97:4a:48:89:8c:ab:6d: 69:91:1f:91:d3:54:7b:f6:18:b9:45:a9:8a:78:70: be:4c:41:bd:67:0d:79:1b:3b:3f:e7:47:a5:37:c8: ac:e5:a5:35:8a:41:8f:0e:18:5e:11:14:8c:b9:9b: 7e:aa:31:57:b9:f2:7f:8e:58:dd:0f:d3:71:4f:8a: 00:ab:b7:1d:67:e6:17:e4:2b:66:00:7c:9c:ae:d5: 02:62:0f:3c:a4:e3:d6:3c:f9:8e:f2:19:e3:ce:a6: 48:95:90:25:a0:f8:23:b4:67:cc:44:80:e0:bd:8c: 46:32:c3:ed:16:77:51:d9:a4:50:84:02:c3:57:dc: ea:79:1d:45:da:69:6e:b9:b5:1e:2d:47:d2:d4:4c: a7:e0:2d:4f:85:bb:af:9b:60:85:1d:58:be:a0:9f: 0e:c2:27:52:84:fd:9f:d3:7c:a3:c2:b7:2b:39:77: 8a:78:96:89:0a:31:06:93:4a:3b:61:b5:53:a1:d5: 4d:7c:00:90:36:0a:eb:8a:60:f0:e1:47:5c:11:ef: 3c:b4:2d:03:ba:6a:07:3f:93:63:93:3d:31:40:2a: b0:e0:9f:d8:69:6d:f6:ab:67:d4:31:41:ea:e3:21: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8B:AF:93:0F:5D:74:93:A9:C1:1E:2A:87:3D:F8:89:1F:94:47:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b5:60:9b:fd:c4:e5:d3:00:5d:09:98:8b:a4:53:be:4c:bd: 0d:55:f3:c9:d1:f3:71:fa:63:aa:0f:67:b1:b7:1e:9c:82:13: 1e:8f:93:81:36:ff:cc:82:77:26:37:33:4e:07:89:c1:57:9d: 74:0e:7b:42:dd:62:3a:58:cc:df:d8:76:8c:f1:d8:02:15:ca: 80:48:c6:6f:c2:e6:f1:f8:cc:2a:9c:eb:ad:af:55:c4:26:0f: 02:99:e0:a8:c5:58:f4:6e:ce:1a:e2:cf:6a:0a:1b:47:1c:1a: e1:95:cb:91:b0:0e:da:f7:9b:1d:ae:89:26:f7:f6:03:93:26: 85:4c:86:66:4d:a3:b4:fd:59:ff:a0:4b:66:a3:79:88:c2:fa: f7:04:48:91:c2:37:8c:54:2e:20:8b:db:29:2b:83:9b:76:91: e6:06:32:da:85:3f:1a:5e:52:b2:06:b4:65:7e:80:8a:ec:fc: 56:9b:a6:93:ec:27:2e:11:f2:f0:34:dd:87:57:a3:a1:1b:6d: 7a:5c:68:1a:6a:4a:23:93:62:86:4b:b6:65:b8:20:f6:98:59: c0:46:4b:d8:4d:5c:6d:34:fc:3a:d8:ff:16:c7:93:17:69:ba: dc:d0:8e:0d:7c:9a:e6:0e:0e:5b:0c:31:0b:2c:b3:35:19:19: 49:10:8e:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V0QQPhlZcyULUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZmViYzAwZmItZDVmYS00NGRhLTgwMzUtY2I3NjM3YTA5ZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk21ciSrqwWU02VMFbfR9QFGNtEWXDZdKSImM q21pkR+R01R79hi5RamKeHC+TEG9Zw15Gzs/50elN8is5aU1ikGPDhheERSMuZt+ qjFXufJ/jljdD9NxT4oAq7cdZ+YX5CtmAHycrtUCYg88pOPWPPmO8hnjzqZIlZAl oPgjtGfMRIDgvYxGMsPtFndR2aRQhALDV9zqeR1F2mluubUeLUfS1Eyn4C1Phbuv m2CFHVi+oJ8OwidShP2f03yjwrcrOXeKeJaJCjEGk0o7YbVTodVNfACQNgrrimDw 4UdcEe88tC0DumoHP5Njkz0xQCqw4J/YaW32q2fUMUHq4yFdewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFACLr5MPXXSTqcEeKoc9+IkflEekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2UxZWExYjktNDg1ZS0z NjUyLTllOGQtMGU1ODdlYTRlNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEC1YJv9xOXTAF0JmIukU75MvQ1V88nR83H6Y6oPZ7G3HpyCEx6P k4E2/8yCdyY3M04HicFXnXQOe0LdYjpYzN/Ydozx2AIVyoBIxm/C5vH4zCqc662v VcQmDwKZ4KjFWPRuzhriz2oKG0ccGuGVy5GwDtr3mx2uiSb39gOTJoVMhmZNo7T9 Wf+gS2ajeYjC+vcESJHCN4xULiCL2ykrg5t2keYGMtqFPxpeUrIGtGV+gIrs/Fab ppPsJy4R8vA03YdXo6EbbXpcaBpqSiOTYoZLtmW4IPaYWcBGS9hNXG00/DrY/xbH kxdputzQjg18muYODlsMMQssszUZGUkQjpI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:50 2025 by rpki-client