$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa File: 08f7ded7-570b-3012-a7ef-01d7da7930d3.roa (raw, json) Hash identifier: b/foJth1YF5Xr5uXFQEEwOD9YfKkfl8OFXdnFA5Huyw= Subject key identifier: F8:E9:83:76:34:A7:57:19:69:A9:7F:D5:D3:44:F1:24:FE:B9:CA:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15DA89616F19E97543180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 397193 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:a8:96:16:f1:9e:97:54:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=5fe43c18-5ac2-4831-8b88-f28d790d3d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:45:86:8a:8c:75:df:5d:bc:e8:71:91:b1: 34:d1:82:be:b1:12:fe:e7:7b:20:22:57:93:ba:e0: 9d:a6:8f:73:e5:6a:66:dd:86:30:a1:97:d7:cf:be: 0b:6f:89:b2:75:63:94:fd:fb:41:b2:70:ed:bd:6c: c6:05:26:a6:e8:69:c9:ea:5c:22:94:e5:95:52:f7: 10:9a:fb:e9:17:55:85:6a:12:64:f8:b1:a1:73:70: 07:50:1f:39:ed:9e:1e:76:6f:dc:97:88:87:c1:22: 7a:c5:43:04:09:b5:16:9c:95:f8:8a:41:cc:b8:79: 2c:1d:bf:bb:48:a6:c9:04:fe:1b:13:a1:95:ad:21: 6b:99:07:9b:96:73:7e:7b:17:1b:68:9d:cd:2f:ac: bf:74:f8:65:51:68:4f:24:5f:00:40:3d:32:91:10: a8:66:0c:05:e6:ab:04:31:78:4a:2b:78:40:18:b6: 24:91:9a:9c:d9:9e:f8:e5:61:3d:62:e6:96:84:52: eb:79:ab:a2:e6:5b:a0:2a:87:42:bb:5d:ad:aa:1f: c6:a7:54:38:86:56:1a:ca:8d:54:1e:4a:96:f1:d7: cc:2f:1d:13:cc:1f:74:c9:11:66:11:6f:e9:aa:1e: e5:d6:11:41:b6:1c:70:25:9c:14:21:37:cb:84:8c: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E9:83:76:34:A7:57:19:69:A9:7F:D5:D3:44:F1:24:FE:B9:CA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fc:78:a8:14:f9:83:49:76:70:a1:2f:dc:37:1f:7f:00:88: 54:7c:9b:dc:cb:6d:64:b7:5b:54:cc:a3:55:38:ce:ae:42:87: 36:7e:71:be:06:6b:dc:22:20:f5:f8:6d:00:44:ac:73:92:81: fe:cb:2c:af:49:92:d4:8d:48:b8:81:8b:28:58:66:6f:14:d4: d1:f9:6e:2e:46:9c:17:7a:26:3d:3f:92:93:46:42:83:2e:e4: f5:2f:e4:49:59:94:c6:98:4a:c3:bc:59:c6:4e:9b:73:24:9d: 02:26:d7:b1:a2:81:83:ef:b9:ae:60:d1:c1:44:2f:d1:b3:74: 74:c8:e9:c7:d4:f2:ab:9a:e7:b4:ab:27:bc:4a:91:c9:33:43: 26:9d:7c:c0:00:66:68:f1:6a:08:a9:1e:3c:b6:c1:00:3c:3b: 22:ab:e7:dc:aa:2e:23:e3:d2:13:60:61:f7:7f:23:05:f2:01: 96:bc:93:74:a6:f9:06:ef:50:92:76:c9:f5:28:db:5a:e5:23: f6:d7:10:f1:34:a3:98:93:1e:2e:80:88:1b:9e:ac:65:9b:80: 48:93:68:c7:77:09:1b:5e:ef:ed:b9:fb:34:76:38:76:4b:19: b4:7d:f0:37:8f:a2:5c:d8:4e:41:3b:99:99:ee:e8:b7:f7:c3: ab:b4:ae:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V2olhbxnpdUMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NWZlNDNjMTgtNWFjMi00ODMxLThiODgtZjI4ZDc5MGQzZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYNFhoqMdd9dvOhxkbE00YK+sRL+53sgIleT uuCdpo9z5Wpm3YYwoZfXz74Lb4mydWOU/ftBsnDtvWzGBSam6GnJ6lwilOWVUvcQ mvvpF1WFahJk+LGhc3AHUB857Z4edm/cl4iHwSJ6xUMECbUWnJX4ikHMuHksHb+7 SKbJBP4bE6GVrSFrmQeblnN+excbaJ3NL6y/dPhlUWhPJF8AQD0ykRCoZgwF5qsE MXhKK3hAGLYkkZqc2Z745WE9YuaWhFLreaui5lugKodCu12tqh/Gp1Q4hlYayo1U HkqW8dfMLx0TzB90yRFmEW/pqh7l1hFBthxwJZwUITfLhIx9UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPjpg3Y0p1cZaal/1dNE8ST+ucr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDhmN2RlZDctNTcwYi0z MDEyLWE3ZWYtMDFkN2RhNzkzMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHL8eKgU+YNJdnChL9w3H38AiFR8m9zLbWS3W1TMo1U4zq5ChzZ+ cb4Ga9wiIPX4bQBErHOSgf7LLK9JktSNSLiBiyhYZm8U1NH5bi5GnBd6Jj0/kpNG QoMu5PUv5ElZlMaYSsO8WcZOm3MknQIm17GigYPvua5g0cFEL9GzdHTI6cfU8qua 57SrJ7xKkckzQyadfMAAZmjxagipHjy2wQA8OyKr59yqLiPj0hNgYfd/IwXyAZa8 k3Sm+QbvUJJ2yfUo21rlI/bXEPE0o5iTHi6AiBuerGWbgEiTaMd3CRte7+25+zR2 OHZLGbR98DePolzYTkE7mZnu6Lf3w6u0rqI= -----END CERTIFICATE-----Generated at Wed Oct 29 13:22:26 2025 by rpki-client