$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f172c845-b3d0-3664-912d-a767c6382394.roa File: f172c845-b3d0-3664-912d-a767c6382394.roa (raw, json) Hash identifier: VTWZalVUisHljYGFZqQIoXMcn7OdUoQCteRIYX+UuTQ= Subject key identifier: 5B:D3:44:2D:D0:17:F0:DC:DA:2B:BC:14:4A:3A:8B:FF:01:00:30:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15885F80C572B94155200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f172c845-b3d0-3664-912d-a767c6382394.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36625 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:85:f8:0c:57:2b:94:15:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=629c41d7-1efe-4527-9eb6-354bc1183dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:8f:76:89:a5:3b:e8:98:e1:d1:a0:d7:06: 8d:bb:4e:48:93:bd:b8:e3:f9:1b:07:8c:27:e2:dc: 84:77:93:7d:39:ac:ba:a9:ab:1d:08:53:fd:e2:49: e8:84:af:02:09:44:4a:28:3f:75:35:e4:f9:ac:cc: 3b:0c:5a:2e:45:28:82:6e:e2:7d:77:97:f5:64:e4: f5:59:ed:b3:2d:e9:29:f6:1d:ec:21:b4:30:85:f3: 6a:10:8d:f9:9c:46:a5:2e:81:6f:39:23:52:84:29: ea:1f:6e:9b:3b:e1:b3:c5:32:80:2f:b6:09:68:08: b0:7f:04:70:f4:5a:17:ec:3f:3b:e6:32:21:9e:0f: f7:f3:e8:da:c7:eb:c5:db:32:08:4d:ab:63:b0:ff: 88:73:2b:4a:c6:f1:d4:ce:e6:e6:cd:33:ae:ae:bf: cb:f4:3d:1f:7e:2f:35:e0:67:9b:b6:ae:4c:c1:0e: 78:cf:3c:a0:bb:2b:b7:5e:87:71:ac:68:29:7c:2b: 98:69:81:b8:de:c6:3a:f1:4d:41:09:64:35:9b:65: fb:0e:b6:0d:4f:fc:7d:b8:e5:08:a9:35:ec:b3:3b: 1b:d2:66:d6:15:a6:5e:6c:c0:6f:1d:32:5e:1b:f2: 1b:42:51:65:fa:b5:f4:da:48:cb:4c:a5:ec:f6:58: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:44:2D:D0:17:F0:DC:DA:2B:BC:14:4A:3A:8B:FF:01:00:30:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f172c845-b3d0-3664-912d-a767c6382394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cd:81:d0:5d:97:3d:fb:2d:b0:a8:de:8e:51:22:f8:31:e6: 66:a7:c1:1f:61:e8:43:dc:ca:f5:13:ab:e5:00:19:fd:31:59: 20:fd:94:fe:5b:06:2c:15:f1:fb:57:64:57:da:a2:a7:c8:2c: c0:e3:ce:02:68:05:c5:00:37:9a:08:00:b4:34:e8:d4:37:3e: aa:a7:5a:f7:77:8d:9b:c9:47:8f:59:e1:74:53:d4:ee:8b:ac: 56:8c:f6:b8:94:db:72:33:96:3c:89:06:e0:a6:59:d9:4d:6b: c3:3f:7e:3c:e0:d7:67:e9:d1:8e:ed:e0:80:5f:b3:e1:c4:75: e0:fd:f2:7f:84:a6:04:65:4d:8e:93:f7:48:e6:18:ac:14:eb: 73:98:a9:d2:4c:0d:0e:84:fd:c5:6f:ea:24:64:ad:97:8d:06: e4:e2:cf:1c:f0:c1:6c:1c:b8:15:6a:c1:ff:bf:a4:ac:45:a5: ef:df:05:0a:6a:c0:df:25:bd:6d:44:02:74:46:3b:58:6d:40: 52:9d:ca:cf:d4:ae:80:62:10:c3:8e:4b:bf:ba:e4:65:16:8e: c9:57:36:6c:b0:f3:f9:c4:ea:13:4f:3f:ff:8e:63:0e:a5:8a: 58:a5:69:13:e7:f1:56:e4:a9:31:8d:5c:1a:f4:21:e1:4b:e7: 72:e9:9e:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8ViF+AxXK5QVUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NjI5YzQxZDctMWVmZS00NTI3LTllYjYtMzU0YmMxMTgzZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pOPdomlO+iY4dGg1waNu05Ik7244/kbB4wn 4tyEd5N9Oay6qasdCFP94knohK8CCURKKD91NeT5rMw7DFouRSiCbuJ9d5f1ZOT1 We2zLekp9h3sIbQwhfNqEI35nEalLoFvOSNShCnqH26bO+GzxTKAL7YJaAiwfwRw 9FoX7D875jIhng/38+jax+vF2zIITatjsP+IcytKxvHUzubmzTOurr/L9D0ffi81 4Gebtq5MwQ54zzyguyu3XodxrGgpfCuYaYG43sY68U1BCWQ1m2X7DrYNT/x9uOUI qTXsszsb0mbWFaZebMBvHTJeG/IbQlFl+rX02kjLTKXs9lh5XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvTRC3QF/Dc2iu8FEo6i/8BADAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE3MmM4NDUtYjNkMC0z NjY0LTkxMmQtYTc2N2M2MzgyMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3NgdBdlz37LbCo3o5RIvgx5manwR9h6EPcyvUTq+UAGf0xWSD9 lP5bBiwV8ftXZFfaoqfILMDjzgJoBcUAN5oIALQ06NQ3PqqnWvd3jZvJR49Z4XRT 1O6LrFaM9riU23IzljyJBuCmWdlNa8M/fjzg12fp0Y7t4IBfs+HEdeD98n+EpgRl TY6T90jmGKwU63OYqdJMDQ6E/cVv6iRkrZeNBuTizxzwwWwcuBVqwf+/pKxFpe/f BQpqwN8lvW1EAnRGO1htQFKdys/UroBiEMOOS7+65GUWjslXNmyw8/nE6hNPP/+O Yw6lililaRPn8VbkqTGNXBr0IeFL53LpnkE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:33 2025 by rpki-client