$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/397fbf3f-6e53-396d-9116-c302461631c0.roa File: 397fbf3f-6e53-396d-9116-c302461631c0.roa (raw, json) Hash identifier: 2Ro0SjE8+iqN/cUgESVzSlpdv52aaN+sT8OK/gjQqJU= Subject key identifier: 12:74:98:7D:6C:C4:D9:5B:B3:72:55:76:2C:EF:BB:2C:26:3C:01:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15D4ACD8749B552979040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/397fbf3f-6e53-396d-9116-c302461631c0.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36616 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:4a:cd:87:49:b5:52:97:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=9cb6a144-d8c3-48bf-abae-18dd5805dd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:b3:51:b3:4a:d5:4f:10:f3:34:b8:1e:32: cf:29:1e:42:39:ca:4b:0c:e7:d6:ed:66:2e:bc:9d: c6:a8:46:8d:31:6e:99:f0:9c:71:50:16:32:c6:d1: 8b:27:d9:d0:a1:44:33:60:3a:89:33:aa:17:97:8e: 69:91:39:e0:7f:03:72:fb:b9:1e:3b:f5:0a:06:0e: 06:6f:11:ee:23:2c:68:47:03:4b:94:bc:cd:07:8a: 26:56:fc:3a:b9:13:80:62:bd:ed:a4:ce:31:8e:e9: 66:51:66:53:54:b7:15:10:ab:48:9c:65:a6:35:50: 4f:02:7a:09:4d:ac:9c:21:9c:1c:f0:29:1b:30:a7: 25:52:8a:df:5e:a1:19:46:16:b1:38:f4:cb:fd:cb: ab:18:c7:14:6b:60:58:69:a4:46:74:00:50:fb:1d: 4b:af:51:2e:d4:81:cb:70:7e:e5:c1:62:fa:52:e4: d8:1d:ac:2b:d3:d7:60:db:9f:32:b5:94:a7:78:d5: d5:22:41:7c:57:05:eb:e3:cb:38:34:89:40:dd:97: ce:56:04:ac:41:d9:79:62:1c:5f:29:df:65:d3:64: 49:56:0d:f4:09:32:14:2a:58:d0:d3:c2:0f:e7:96: 88:0a:43:87:85:fa:9b:11:22:1a:dd:ba:63:55:b8: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:74:98:7D:6C:C4:D9:5B:B3:72:55:76:2C:EF:BB:2C:26:3C:01:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/397fbf3f-6e53-396d-9116-c302461631c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d6:10:c5:80:65:c3:8f:e2:74:2d:14:db:43:d9:17:00:76: 3e:95:47:bf:1e:61:5a:a8:4c:63:bb:f8:9b:c3:02:c7:03:98: 07:aa:d6:12:62:78:dc:93:cb:6e:2f:88:5a:11:4e:94:9b:89: 75:35:1a:c8:e3:e3:78:30:bc:a2:bb:3c:a5:3e:05:fa:94:78: f1:f9:42:28:11:35:98:a1:6b:c5:e3:22:4a:61:32:46:28:d1: 95:a3:7e:99:54:64:15:35:ff:e1:96:cc:4b:db:11:7d:60:1a: 0b:21:c7:9d:bf:18:b7:bd:ea:f1:88:86:e4:ef:7f:ed:a5:57: 11:94:7e:93:ed:db:50:42:b2:99:a8:41:01:fd:b3:9b:9d:56: ff:ec:55:03:7a:c4:7f:a4:0a:e5:3f:f5:65:64:91:14:2f:a2: 59:cd:86:73:00:11:78:8c:f8:0d:72:0d:c6:4e:75:5f:ef:0a: 38:0b:ac:67:db:fb:ad:b4:9b:d6:d9:31:a7:a8:ab:93:c3:48: a9:15:cd:c3:7c:a6:d1:42:7b:7a:31:95:67:71:8b:6c:6b:10: 8f:a7:1f:6c:e4:05:d5:67:27:0f:9c:40:43:b6:29:d6:11:4a: 8c:c7:7e:f4:aa:01:3f:2e:72:ec:12:cb:ad:ce:d6:72:9b:6f: 34:78:aa:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V1KzYdJtVKXkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OWNiNmExNDQtZDhjMy00OGJmLWFiYWUtMThkZDU4MDVkZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf6zUbNK1U8Q8zS4HjLPKR5COcpLDOfW7WYu vJ3GqEaNMW6Z8JxxUBYyxtGLJ9nQoUQzYDqJM6oXl45pkTngfwNy+7keO/UKBg4G bxHuIyxoRwNLlLzNB4omVvw6uROAYr3tpM4xjulmUWZTVLcVEKtInGWmNVBPAnoJ TaycIZwc8CkbMKclUorfXqEZRhaxOPTL/curGMcUa2BYaaRGdABQ+x1Lr1Eu1IHL cH7lwWL6UuTYHawr09dg258ytZSneNXVIkF8VwXr48s4NIlA3ZfOVgSsQdl5Yhxf Kd9l02RJVg30CTIUKljQ08IP55aICkOHhfqbESIa3bpjVbioiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBJ0mH1sxNlbs3JVdizvuywmPAHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk3ZmJmM2YtNmU1My0z OTZkLTkxMTYtYzMwMjQ2MTYzMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfWEMWAZcOP4nQtFNtD2RcAdj6VR78eYVqoTGO7+JvDAscDmAeq 1hJieNyTy24viFoRTpSbiXU1Gsjj43gwvKK7PKU+BfqUePH5QigRNZiha8XjIkph MkYo0ZWjfplUZBU1/+GWzEvbEX1gGgshx52/GLe96vGIhuTvf+2lVxGUfpPt21BC spmoQQH9s5udVv/sVQN6xH+kCuU/9WVkkRQvolnNhnMAEXiM+A1yDcZOdV/vCjgL rGfb+620m9bZMaeoq5PDSKkVzcN8ptFCe3oxlWdxi2xrEI+nH2zkBdVnJw+cQEO2 KdYRSozHfvSqAT8ucuwSy63O1nKbbzR4qio= -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:23 2025 by rpki-client