$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa File: e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa (raw, json) Hash identifier: khfmV5nCCJQM4c6Aufk2CGlY8Aldi1V8eQaip8zENoU= Subject key identifier: 90:D8:37:1B:C5:52:0F:9F:A1:D8:94:0C:89:0E:78:35:52:EA:28:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F159232BF8D993C8F95C7C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396560 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:23:2b:f8:d9:93:c8:f9:5c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=a5414285-cca2-4538-aef2-993ebd898a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:ac:88:83:9e:68:05:5b:44:2c:9d:c9:be: b2:01:f2:85:58:62:cb:0e:59:b4:0e:22:59:df:f7: a4:de:f8:09:af:e0:66:cf:ea:8a:d8:92:a9:1f:34: 1a:86:53:03:16:59:fa:9a:5e:1a:e6:fb:66:9e:08: 17:e2:cd:6b:3c:e8:6c:d7:e3:46:9a:7d:66:e0:65: bb:d3:86:d4:d7:1a:3a:dd:f8:bc:10:57:8f:75:b5: 4d:73:91:13:67:48:46:66:9c:20:59:ed:28:08:68: 99:e5:96:68:06:f2:1e:f7:dc:33:a1:2b:3e:cd:e1: a6:09:3c:a4:4c:3c:b6:e0:ae:dc:74:f6:74:6f:9f: 11:90:2b:ad:b2:18:5a:72:68:f7:d5:ac:17:ac:ec: 6d:8e:2a:34:3e:f6:f8:3b:b0:d8:77:bc:b8:86:03: ef:7a:df:19:74:7b:f1:10:c0:b1:71:20:e5:2b:52: 57:be:1c:de:c3:c7:f6:99:b3:fb:7b:db:53:82:9b: 00:d7:8c:66:10:5b:da:fc:3d:26:0b:fc:8d:d5:ba: 04:27:89:f7:b2:65:33:98:70:8c:4a:cb:d9:33:80: d8:59:a2:8d:03:db:c8:ee:0b:14:6d:14:77:48:71: 9f:18:97:94:bb:39:40:73:dd:19:9a:35:3b:50:15: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:37:1B:C5:52:0F:9F:A1:D8:94:0C:89:0E:78:35:52:EA:28:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:af:98:f8:18:d3:79:dd:f1:ef:39:1f:86:39:ae:c9:19:10: 6d:41:77:d5:81:71:4c:78:3b:fc:f0:c5:d8:25:de:23:fd:ed: 3b:21:74:b3:ef:5c:c5:f3:c7:88:1c:17:52:db:53:49:91:97: 24:a0:26:e9:c3:c9:6b:bd:47:09:d5:0f:3f:a2:40:5c:b5:86: cb:5f:ac:84:e8:ed:50:b5:f6:22:90:ac:69:16:ed:55:05:28: c7:8b:51:ba:07:27:f6:a6:0c:ff:65:8a:20:1c:88:2a:6b:ca: af:51:b3:26:e8:33:29:38:0e:7e:d2:0c:e5:08:9c:66:0e:cb: 3e:51:fc:44:32:4b:84:b8:9b:bf:d2:8e:4a:18:84:aa:2f:79: f2:d2:e9:7c:6e:af:56:56:b7:13:13:a5:17:c8:10:06:31:9f: ae:ac:a5:07:70:7c:72:89:4d:99:d5:9b:6f:26:8f:cf:46:23: 34:a3:eb:78:2c:e6:fd:19:27:ed:ee:29:95:a9:06:ec:ad:0e: aa:7f:ab:f9:e2:07:be:23:73:ee:cf:2d:9d:33:1d:45:f4:1d: 42:97:9f:5c:3a:e1:75:63:a5:97:04:54:7a:58:d8:16:8d:98: 0a:6f:8b:88:40:4d:c5:0d:0b:16:ef:f4:ee:2e:a8:c2:01:fb: 91:db:27:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VkjK/jZk8j5XHwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YTU0MTQyODUtY2NhMi00NTM4LWFlZjItOTkzZWJkODk4YTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD6siIOeaAVbRCydyb6yAfKFWGLLDlm0DiJZ 3/ek3vgJr+Bmz+qK2JKpHzQahlMDFln6ml4a5vtmnggX4s1rPOhs1+NGmn1m4GW7 04bU1xo63fi8EFePdbVNc5ETZ0hGZpwgWe0oCGiZ5ZZoBvIe99wzoSs+zeGmCTyk TDy24K7cdPZ0b58RkCutshhacmj31awXrOxtjio0Pvb4O7DYd7y4hgPvet8ZdHvx EMCxcSDlK1JXvhzew8f2mbP7e9tTgpsA14xmEFva/D0mC/yN1boEJ4n3smUzmHCM SsvZM4DYWaKNA9vI7gsUbRR3SHGfGJeUuzlAc90ZmjU7UBXAkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJDYNxvFUg+fodiUDIkOeDVS6igvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTU1NzRhMDEtYjk4Yy0z ZTVhLTlhMjMtY2IyNTNlMGMxMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABevmPgY03nd8e85H4Y5rskZEG1Bd9WBcUx4O/zwxdgl3iP97Tsh dLPvXMXzx4gcF1LbU0mRlySgJunDyWu9RwnVDz+iQFy1hstfrITo7VC19iKQrGkW 7VUFKMeLUboHJ/amDP9liiAciCpryq9RsyboMyk4Dn7SDOUInGYOyz5R/EQyS4S4 m7/SjkoYhKovefLS6Xxur1ZWtxMTpRfIEAYxn66spQdwfHKJTZnVm28mj89GIzSj 63gs5v0ZJ+3uKZWpBuytDqp/q/niB74jc+7PLZ0zHUX0HUKXn1w64XVjpZcEVHpY 2BaNmApvi4hATcUNCxbv9O4uqMIB+5HbJ3g= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:02 2025 by rpki-client