$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa File: 2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa (raw, json) Hash identifier: isACuJwSdrmUpSp5vgLvURbf77B5M1KPVDvGIum1rmw= Subject key identifier: DA:04:F9:56:A2:49:5D:16:9A:6C:92:7F:71:59:1A:8C:33:1F:29:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F159C65B3AE4AE3F009E60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396565 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:c6:5b:3a:e4:ae:3f:00:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=089b19ae-1554-4029-add1-54e3b1531bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:78:b9:7e:fb:de:0b:b4:b2:88:d8:43:f6: 7a:af:b5:6a:5d:38:3b:10:3b:fe:b4:5f:33:7b:7b: 1e:2b:bc:b9:18:4c:b4:08:84:d9:6d:3d:17:c6:e6: 46:79:39:01:1c:0b:34:12:00:d3:bf:eb:d7:e9:11: df:e7:42:d8:96:a7:a2:bb:27:1b:f2:75:93:80:e9: aa:52:ac:63:5d:10:a9:71:0b:22:d8:3f:25:7e:2a: e3:3a:82:7a:2e:fa:8d:22:52:20:61:53:ad:61:9f: a3:f8:70:49:a2:fe:b8:89:15:75:16:73:39:9b:5f: 7d:26:ae:af:39:af:0e:a0:16:50:66:c3:cb:d7:65: 0e:d3:cc:7d:6b:22:46:21:a4:1e:dd:f3:33:4a:d4: 04:d2:0f:26:af:27:45:56:64:2f:cf:79:d9:60:10: b9:6f:c2:3a:d5:21:73:16:12:d2:8d:b0:8b:9b:ad: dd:ef:e0:86:ae:5e:71:e9:85:51:8d:90:13:39:c8: f7:77:93:6d:ce:8b:c9:f8:c8:72:64:0f:13:6e:2f: 11:9d:cb:e2:2d:38:1b:0a:02:bd:ca:ca:48:53:45: 3d:18:cc:e2:be:a4:fa:04:fe:cb:d6:e4:e8:a5:81: 8a:29:52:e9:a0:a3:9a:f1:dc:9b:5c:24:38:2e:a9: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:F9:56:A2:49:5D:16:9A:6C:92:7F:71:59:1A:8C:33:1F:29:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:71:8d:0c:bb:f2:dd:4a:5e:64:8c:63:cc:72:a0:cf:32:74: 02:6d:66:fb:ae:56:d3:bd:a7:6f:5d:7f:aa:6f:25:7e:62:21: 41:ee:80:8d:be:1f:8f:99:f0:44:5e:7b:75:6e:d1:48:31:d1: b2:db:d0:8f:12:fd:a8:76:17:ec:7d:81:2a:8b:a5:ae:66:8b: 79:4c:4c:2b:b0:35:0f:a1:57:ce:9b:bb:b8:de:9c:79:a4:f2: db:13:5c:dc:b7:b7:fb:21:68:83:a5:90:8b:8f:10:6d:57:10: fb:aa:7d:a5:f4:89:59:63:25:76:f9:eb:85:ed:f2:77:3b:4e: df:1d:a6:7a:51:32:c9:6e:e7:73:1b:b2:08:31:f8:16:9a:18: 96:dc:25:b5:45:32:e9:ca:d2:29:c4:7b:e4:60:86:44:a0:f6: 28:5e:54:39:3d:bd:ed:76:6a:48:ae:a6:3e:91:e8:33:64:85: af:73:cb:c9:18:88:9c:2f:07:b9:2b:52:ff:93:84:ab:2f:67: 5c:47:09:77:1e:94:0e:6d:45:d1:19:9c:9f:14:f4:21:41:58: 38:30:7d:42:4b:7f:86:90:88:49:ad:ef:a5:4b:10:49:4a:e2: 44:c0:1f:86:a5:5b:6a:37:76:d6:e9:4c:67:9f:40:f8:e6:aa: e2:0a:5f:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VnGWzrkrj8AnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDg5YjE5YWUtMTU1NC00MDI5LWFkZDEtNTRlM2IxNTMxYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXl4uX773gu0sojYQ/Z6r7VqXTg7EDv+tF8z e3seK7y5GEy0CITZbT0XxuZGeTkBHAs0EgDTv+vX6RHf50LYlqeiuycb8nWTgOmq UqxjXRCpcQsi2D8lfirjOoJ6LvqNIlIgYVOtYZ+j+HBJov64iRV1FnM5m199Jq6v Oa8OoBZQZsPL12UO08x9ayJGIaQe3fMzStQE0g8mrydFVmQvz3nZYBC5b8I61SFz FhLSjbCLm63d7+CGrl5x6YVRjZATOcj3d5NtzovJ+MhyZA8Tbi8RncviLTgbCgK9 yspIU0U9GMzivqT6BP7L1uTopYGKKVLpoKOa8dybXCQ4LqlENQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoE+VaiSV0WmmySf3FZGowzHykAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQ1NzNiZjMtNzQ5My0z NjgyLWI4MmUtZmMwYWU5ZjA3N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD1xjQy78t1KXmSMY8xyoM8ydAJtZvuuVtO9p29df6pvJX5iIUHu gI2+H4+Z8ERee3Vu0Ugx0bLb0I8S/ah2F+x9gSqLpa5mi3lMTCuwNQ+hV86bu7je nHmk8tsTXNy3t/shaIOlkIuPEG1XEPuqfaX0iVljJXb564Xt8nc7Tt8dpnpRMslu 53Mbsggx+BaaGJbcJbVFMunK0inEe+RghkSg9iheVDk9ve12akiupj6R6DNkha9z y8kYiJwvB7krUv+ThKsvZ1xHCXcelA5tRdEZnJ8U9CFBWDgwfUJLf4aQiEmt76VL EElK4kTAH4alW2o3dtbpTGefQPjmquIKX94= -----END CERTIFICATE-----Generated at Thu Oct 30 03:15:55 2025 by rpki-client