$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa File: 17d44661-cd2c-3151-81fa-24d06d36d33a.roa (raw, json) Hash identifier: Om2M/pYI32d3nG04GiQXXnrrRfjUXiUbcMHdpdM516o= Subject key identifier: 54:87:C3:43:D4:D9:47:F9:60:02:13:C8:24:4B:7A:83:F3:19:FE:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F1595855DC9D98B589E080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396604 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:58:55:dc:9d:98:b5:89:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=515d0e86-806b-4168-9cdc-cab3e406d480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:43:68:f6:5d:2f:44:51:17:9c:64:85:9d:5a: 92:b2:52:2a:73:5d:8f:16:79:06:94:01:eb:12:2f: d0:75:85:c9:b8:47:20:d1:1e:93:ce:59:51:91:c1: 9a:27:de:9d:4a:87:a8:73:81:7f:c2:5d:27:59:ba: 33:67:b5:8a:5e:96:fe:b9:e8:7a:23:9d:d3:a6:96: 4f:2a:b8:be:5a:a5:09:d4:55:82:f0:1a:21:a0:33: 14:85:1c:1a:cc:8b:7c:06:7a:19:88:38:a1:2e:4a: a7:7d:9a:a8:2b:4b:5c:8b:53:e3:22:b6:06:5b:2e: 60:c0:d8:8e:b5:9d:09:ec:ab:7d:c1:42:ee:15:75: 5a:58:8f:1e:f8:01:81:fc:bb:fe:68:12:2f:8c:cb: 89:e1:b1:4a:1d:d7:43:4b:e6:59:3e:53:48:cf:97: c8:32:bf:db:9a:c1:a6:39:87:27:f4:e6:36:4b:ad: 32:7e:29:fe:fa:7a:7a:e6:ff:81:9d:8c:2e:a8:e6: e3:00:16:81:f0:57:e9:85:6e:e6:8d:32:0f:54:1c: 09:c7:73:93:47:1a:40:68:28:3d:98:b1:df:76:19: ad:66:5f:bf:87:5a:ef:e7:e3:7a:84:dd:bf:d7:50: 16:4e:92:e5:91:82:5f:ac:40:62:5b:65:58:0c:96: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:87:C3:43:D4:D9:47:F9:60:02:13:C8:24:4B:7A:83:F3:19:FE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0a:45:3d:b1:e1:95:9a:37:58:8c:5e:2d:32:d6:68:b5:26: 0e:0a:1b:a2:60:4d:e3:70:93:85:a0:21:51:f1:b1:dc:cb:ec: 55:17:9e:67:66:60:8c:e1:30:57:d0:63:14:b4:67:7f:5a:26: 9f:92:72:10:83:c7:0d:77:83:6f:2d:2f:06:da:56:97:ef:f0: 8c:a1:31:93:3d:13:fb:23:3b:8c:53:cc:37:19:63:b2:2b:96: 96:c1:00:bf:d0:28:bf:e6:c1:69:ac:79:3e:3a:dd:9a:de:3d: 1c:32:bf:70:07:47:3b:df:aa:16:4c:20:2c:b3:2c:52:ac:4f: 14:1e:1d:59:88:ec:4a:fa:1b:52:b3:4e:6e:c0:f0:f4:7b:bd: 92:92:81:3f:ca:a8:1c:96:41:ee:50:37:c3:c6:79:a1:82:2f: b0:e7:1f:80:88:95:dd:28:78:71:d8:26:64:94:9b:dd:9b:3d: 3e:d2:06:e9:4a:a8:03:63:67:cc:71:fe:65:2d:3b:99:95:e7: a1:ee:05:c7:78:47:27:21:27:65:b5:73:d3:af:13:cf:e3:82: 6e:82:eb:2f:60:42:fa:4c:d6:cc:85:b6:f7:41:ac:98:cb:9e: b8:cc:5a:b2:64:5a:43:9f:8e:7b:cc:97:ae:36:4c:c9:d0:ef: dc:4d:2a:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VlYVdydmLWJ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTE1ZDBlODYtODA2Yi00MTY4LTljZGMtY2FiM2U0MDZkNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kNo9l0vRFEXnGSFnVqSslIqc12PFnkGlAHr Ei/QdYXJuEcg0R6TzllRkcGaJ96dSoeoc4F/wl0nWbozZ7WKXpb+ueh6I53TppZP Kri+WqUJ1FWC8BohoDMUhRwazIt8BnoZiDihLkqnfZqoK0tci1PjIrYGWy5gwNiO tZ0J7Kt9wULuFXVaWI8e+AGB/Lv+aBIvjMuJ4bFKHddDS+ZZPlNIz5fIMr/bmsGm OYcn9OY2S60yfin++np65v+BnYwuqObjABaB8FfphW7mjTIPVBwJx3OTRxpAaCg9 mLHfdhmtZl+/h1rv5+N6hN2/11AWTpLlkYJfrEBiW2VYDJaBpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSHw0PU2Uf5YAITyCRLeoPzGf4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTdkNDQ2NjEtY2QyYy0z MTUxLTgxZmEtMjRkMDZkMzZkMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEKRT2x4ZWaN1iMXi0y1mi1Jg4KG6JgTeNwk4WgIVHxsdzL7FUX nmdmYIzhMFfQYxS0Z39aJp+SchCDxw13g28tLwbaVpfv8IyhMZM9E/sjO4xTzDcZ Y7IrlpbBAL/QKL/mwWmseT463ZrePRwyv3AHRzvfqhZMICyzLFKsTxQeHVmI7Er6 G1KzTm7A8PR7vZKSgT/KqByWQe5QN8PGeaGCL7DnH4CIld0oeHHYJmSUm92bPT7S BulKqANjZ8xx/mUtO5mV56HuBcd4RychJ2W1c9OvE8/jgm6C6y9gQvpM1syFtvdB rJjLnrjMWrJkWkOfjnvMl642TMnQ79xNKlE= -----END CERTIFICATE-----Generated at Wed Oct 29 11:36:13 2025 by rpki-client