$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa File: 2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa (raw, json) Hash identifier: 9APGEycJLlSc0FLnd2wGpiyl1uHmxYtUBVWJDUe/Tro= Subject key identifier: 1D:33:85:01:BD:F9:97:74:08:56:EA:1D:82:A6:B7:11:06:D4:13:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF521642858F17971F73A4D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 7342 IP address blocks: 2620:74:aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:64:28:58:f1:79:71:f7:3a:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=e0c38641-60f6-4eee-9c58-535951da0449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:0f:94:62:ca:53:2b:8e:d1:9f:b9:d3:05: 7b:6a:9f:9e:91:d7:ab:8a:e0:91:80:3c:4a:9d:de: 0f:89:39:1e:64:44:11:6a:ef:4d:9f:d5:55:33:92: b2:91:13:8f:d6:bf:6d:42:99:83:28:db:33:10:e7: de:be:33:45:09:01:9b:84:87:fc:cc:73:25:b0:e2: a9:dc:ef:d5:10:63:62:c3:c6:2f:03:4e:44:7b:60: 8f:98:a1:15:90:ea:15:e6:7f:07:6e:28:dd:af:8d: 80:cb:df:ec:f2:4b:ac:cb:0e:6b:65:44:6c:47:79: 95:44:9e:dd:4f:a1:c2:f0:f1:7f:91:8f:4c:42:c4: b7:ec:0d:4d:1f:19:d1:c9:51:9c:84:d9:b4:e5:e8: 27:6b:a6:25:46:b8:78:67:c1:0a:68:df:bc:51:cd: aa:6e:d7:de:38:9d:d6:e6:04:d9:9b:1b:d4:87:48: 98:98:75:61:d2:d4:f9:b1:b2:7e:b0:68:63:50:b6: 8a:5c:d5:e8:c0:0f:2c:6f:57:c1:47:75:b8:8b:31: 12:19:ff:3b:23:86:db:e0:9d:5d:10:0a:6a:61:03: b7:62:12:0e:42:fc:9c:46:88:95:c1:e0:48:f8:c2: 5d:0b:83:24:2c:19:41:fa:21:6e:35:9d:32:f9:82: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:33:85:01:BD:F9:97:74:08:56:EA:1D:82:A6:B7:11:06:D4:13:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5b:10:e0:2c:9e:1e:df:b1:ec:15:74:d0:9b:09:99:b6:94: ee:39:bf:98:1e:2a:09:da:87:65:f3:50:d6:1c:3a:b2:53:a3: 25:72:b9:9b:71:ec:dd:58:f9:e1:97:88:ea:3b:e2:d6:a1:6f: 6d:66:7f:07:88:64:70:7d:c0:ff:f3:95:cf:e3:1c:3c:f9:40: 5b:5d:18:d6:15:26:8b:d8:44:75:1d:20:c8:6c:77:d2:ef:0d: b6:e7:32:39:33:77:77:d3:d0:cb:9d:a9:fa:e1:97:1a:a5:78: 6a:49:47:ae:13:b2:bd:8f:bb:52:8b:78:c1:6c:00:0e:24:09: 14:dc:47:33:4a:f6:c4:55:a2:86:5f:f1:da:fa:a2:b6:97:0a: 9b:cc:81:89:31:bd:5d:f3:29:75:39:79:c8:e6:5c:bb:ec:93: a0:cd:52:99:06:ad:8e:1f:3b:f0:76:39:63:21:eb:11:15:1b: 31:a3:a5:40:a7:7c:89:d4:bd:08:d1:a7:d2:ba:bb:8b:6e:ed: 85:8f:96:4f:18:77:98:ab:f2:14:3a:27:4f:06:bb:83:25:23: a5:ea:aa:f0:dc:77:0d:82:5d:c0:cb:bb:10:e5:52:f3:2e:95: 5f:9f:6e:89:61:99:4b:62:72:52:62:d0:f3:70:4c:ec:33:a3: c3:ac:94:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IWQoWPF5cfc6TUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTBjMzg2NDEtNjBmNi00ZWVlLTljNTgtNTM1OTUxZGEwNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojwPlGLKUyuO0Z+50wV7ap+ekderiuCRgDxK nd4PiTkeZEQRau9Nn9VVM5KykROP1r9tQpmDKNszEOfevjNFCQGbhIf8zHMlsOKp 3O/VEGNiw8YvA05Ee2CPmKEVkOoV5n8Hbijdr42Ay9/s8kusyw5rZURsR3mVRJ7d T6HC8PF/kY9MQsS37A1NHxnRyVGchNm05egna6YlRrh4Z8EKaN+8Uc2qbtfeOJ3W 5gTZmxvUh0iYmHVh0tT5sbJ+sGhjULaKXNXowA8sb1fBR3W4izESGf87I4bb4J1d EApqYQO3YhIOQvycRoiVweBI+MJdC4MkLBlB+iFuNZ0y+YJjQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB0zhQG9+Zd0CFbqHYKmtxEG1BM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQ2ODE2ODEtZjQ1Mi0z YjIwLWJhOWYtYjFjYmY5MGEwZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHtbEOAsnh7fsewVdNCbCZm2lO45v5geKgnah2XzUNYcOrJToyVy uZtx7N1Y+eGXiOo74tahb21mfweIZHB9wP/zlc/jHDz5QFtdGNYVJovYRHUdIMhs d9LvDbbnMjkzd3fT0MudqfrhlxqleGpJR64Tsr2Pu1KLeMFsAA4kCRTcRzNK9sRV ooZf8dr6oraXCpvMgYkxvV3zKXU5ecjmXLvsk6DNUpkGrY4fO/B2OWMh6xEVGzGj pUCnfInUvQjRp9K6u4tu7YWPlk8Yd5ir8hQ6J08Gu4MlI6XqqvDcdw2CXcDLuxDl UvMulV+fbolhmUticlJi0PNwTOwzo8OslGM= -----END CERTIFICATE-----Generated at Wed Sep 10 22:40:04 2025 by rpki-client