$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/223b11d2-47b5-3108-9382-47de2de8359b.roa File: 223b11d2-47b5-3108-9382-47de2de8359b.roa (raw, json) Hash identifier: v8fcoqDn+dlcglo8cnZQGUAPk47gdnJNPCTcb7IclMM= Subject key identifier: 46:68:55:27:A8:97:CD:B9:F6:55:6A:3B:B7:FC:45:12:C5:B1:AA:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AFC1C144E51E6A32D551B5E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/223b11d2-47b5-3108-9382-47de2de8359b.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7342 IP address blocks: 2620:74:5d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:14:4e:51:e6:a3:2d:55:1b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=77fa5e73-537b-452a-8875-5f9c3c6339de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fc:19:b2:97:6c:47:52:41:5a:01:c3:e9:ce: 8d:fe:c3:0b:5d:10:34:69:77:41:17:7f:83:22:65: 9c:61:fc:88:1a:10:47:74:8e:b1:f0:c8:a9:78:78: 94:45:0e:d8:e7:c5:83:33:45:d1:0a:28:e8:71:38: c9:16:45:d5:58:cc:14:b3:26:fb:49:8e:51:1e:6e: 77:80:b7:f7:14:56:31:87:a1:ee:d1:37:7e:1b:12: 55:25:52:a7:50:e6:c0:c3:09:10:31:60:98:39:ad: 8b:dc:39:61:4e:29:18:5b:d3:1c:14:4f:2a:47:08: b1:30:86:e1:e3:16:67:5d:75:28:89:c9:6c:a8:1b: 72:0a:09:28:ab:27:5a:e5:4d:f2:9f:6e:15:fb:68: 43:4b:8e:30:99:16:96:05:10:a8:6e:61:0d:72:5c: 5d:16:05:6d:60:1f:a0:0e:5d:ab:10:ba:0c:25:c5: c9:59:b2:19:af:f0:4b:8a:2c:14:a3:4c:70:eb:5f: 0b:37:c6:fb:30:e9:51:ed:33:a9:06:5e:c2:a0:e0: b1:89:fa:9c:7f:52:6f:e4:fa:2d:ca:a3:b8:49:44: b9:94:d1:2d:e7:be:68:3f:48:95:0d:1a:74:74:9c: 38:31:69:6b:ac:05:86:a3:c8:43:fd:fb:31:ab:ee: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:68:55:27:A8:97:CD:B9:F6:55:6A:3B:B7:FC:45:12:C5:B1:AA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/223b11d2-47b5-3108-9382-47de2de8359b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8b:52:2c:0f:95:63:76:a2:8b:d7:b9:d6:9c:aa:ad:26:70: c8:0b:57:25:fc:c5:49:ce:6b:b4:ed:75:5a:81:f6:a5:84:9c: 84:89:c7:c7:03:c3:cd:10:ee:43:58:a7:87:6f:82:64:e7:0f: bf:b4:a2:e5:dd:d1:52:3b:e2:63:e6:86:6c:ec:18:db:1d:14: df:46:ec:e9:61:6b:6b:03:7c:49:b7:57:e7:02:bc:86:7f:d6: 97:6b:ea:88:58:f7:6e:ce:ba:3c:a3:f0:37:dd:66:9f:46:21: 86:2f:12:96:51:34:1d:3e:ce:fb:45:65:d4:a9:8e:3e:c7:e5: 82:d2:d8:e7:84:e1:23:f8:09:bd:b4:9b:53:bb:c5:cc:9d:87: e8:01:09:5b:08:82:13:69:67:8b:21:cf:fa:30:64:24:8c:e5: ba:b3:f9:cd:b6:2b:46:6c:bf:dc:f7:19:2c:20:92:03:32:11: 1f:e6:cd:91:55:d0:df:9b:40:fc:6d:45:a0:d0:ed:02:13:bf: e8:ad:65:4e:26:e2:d2:df:1e:91:e4:4b:65:e8:95:fd:be:c8: d4:4a:b4:46:2e:99:c3:0a:e8:f5:42:8b:29:65:5c:28:eb:03: 87:29:16:cc:29:f1:42:1d:67:e3:d6:8c:8c:ff:bb:83:4f:33: 85:8a:67:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8HBROUeajLVUbXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NzdmYTVlNzMtNTM3Yi00NTJhLTg4NzUtNWY5YzNjNjMzOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fwZspdsR1JBWgHD6c6N/sMLXRA0aXdBF3+D ImWcYfyIGhBHdI6x8MipeHiURQ7Y58WDM0XRCijocTjJFkXVWMwUsyb7SY5RHm53 gLf3FFYxh6Hu0Td+GxJVJVKnUObAwwkQMWCYOa2L3DlhTikYW9McFE8qRwixMIbh 4xZnXXUoiclsqBtyCgkoqyda5U3yn24V+2hDS44wmRaWBRCobmENclxdFgVtYB+g Dl2rELoMJcXJWbIZr/BLiiwUo0xw618LN8b7MOlR7TOpBl7CoOCxifqcf1Jv5Pot yqO4SUS5lNEt575oP0iVDRp0dJw4MWlrrAWGo8hD/fsxq+5U1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZoVSeol8259lVqO7f8RRLFsarMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIzYjExZDItNDdiNS0z MTA4LTkzODItNDdkZTJkZTgzNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6LUiwPlWN2oovXudacqq0mcMgLVyX8xUnOa7TtdVqB9qWEnISJ x8cDw80Q7kNYp4dvgmTnD7+0ouXd0VI74mPmhmzsGNsdFN9G7Olha2sDfEm3V+cC vIZ/1pdr6ohY927Oujyj8DfdZp9GIYYvEpZRNB0+zvtFZdSpjj7H5YLS2OeE4SP4 Cb20m1O7xcydh+gBCVsIghNpZ4shz/owZCSM5bqz+c22K0Zsv9z3GSwgkgMyER/m zZFV0N+bQPxtRaDQ7QITv+itZU4m4tLfHpHkS2Xolf2+yNRKtEYumcMK6PVCiyll XCjrA4cpFswp8UIdZ+PWjIz/u4NPM4WKZxg= -----END CERTIFICATE-----Generated at Wed Oct 29 20:31:34 2025 by rpki-client