$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa File: 6da7eb9a-1e72-3516-b74d-b83e19954db4.roa (raw, json) Hash identifier: T2XlDBgo1OGN7SgdhEz1OGWTGgYZzEbmNRHg/ueMWEE= Subject key identifier: 5B:7C:B5:CE:FC:8D:69:62:0E:55:45:68:DF:30:47:CE:D6:00:43:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B0CDC17B988A9259A50A07800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2620:74:ec::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:17:b9:88:a9:25:9a:50:a0:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=f8f01771-e4d2-4de9-b7a6-38e6536e2a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:c0:5f:da:b2:cb:93:74:24:bd:5a:cc:5a: db:f7:e5:a3:26:08:ea:13:18:b2:cc:e4:49:2b:1b: d7:7f:af:6e:4c:de:8d:2d:9f:2a:13:56:9e:65:c1: 28:98:dc:50:0e:11:e0:b6:ae:22:49:1b:59:5d:99: 8c:73:38:2b:57:c9:8a:ff:5a:ec:db:b1:8b:e7:e1: 18:c0:64:3e:e6:7b:50:16:ca:8f:da:0b:f9:ba:2f: 21:56:74:61:e2:e7:a7:09:69:15:09:7d:ee:8c:c8: 98:29:99:6f:6f:f9:b4:d2:31:4f:e5:85:eb:72:2f: 0e:88:11:ae:12:d1:88:b0:a0:5a:80:73:6c:a7:87: 52:bd:34:07:8b:ef:89:1b:c4:42:91:d7:88:93:6f: 33:b6:e9:4f:0b:88:85:c0:15:ab:11:37:1c:88:0b: 39:b8:f1:90:9e:f1:ba:a4:55:98:b0:6a:e2:08:e9: e6:90:82:02:45:de:cb:cd:26:e9:34:05:aa:2f:88: c4:df:07:ce:0e:c1:56:29:2b:9b:7b:8b:84:38:13: f5:81:cd:8d:da:26:c0:16:35:88:fe:7e:3d:55:75: 6e:11:32:d5:ea:3f:9d:b8:bf:a0:a7:38:70:dd:d4: e3:ff:97:74:63:d4:37:d8:57:78:64:e7:01:6e:64: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:B5:CE:FC:8D:69:62:0E:55:45:68:DF:30:47:CE:D6:00:43:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ec::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ac:bc:c4:7a:40:c4:d3:de:15:1b:80:07:a8:02:9d:a8:1d: 72:7e:08:4a:11:42:a9:3b:2f:ed:fa:33:7c:f2:f5:3f:11:58: cc:e5:d2:15:8c:89:ea:d3:00:52:6b:0e:11:49:76:50:0b:21: d5:65:5c:f6:29:dd:33:be:f9:65:fd:fb:72:78:0d:bb:b3:7f: b7:d8:5e:4d:c1:b2:bd:41:66:ee:a7:00:f4:b5:9f:74:fa:48: 28:7e:00:25:70:fb:21:e1:2b:4a:9d:6f:66:4b:08:2c:49:80: c4:e7:35:38:2d:6b:11:44:76:61:54:9f:77:a2:27:e8:da:2c: b9:9c:4a:ed:4e:4d:6f:00:83:d0:d7:51:00:75:4f:6a:8f:9b: b4:f2:7a:ac:cd:21:9b:8c:35:f4:12:5a:42:10:4e:f5:ce:26: 15:66:2d:81:c0:8a:9d:f3:1b:3a:e4:82:a5:7e:cb:6c:ae:4e: 54:f2:64:34:0b:70:b1:1e:45:3a:4c:44:1f:46:4c:2d:ab:b9: 21:ed:b0:ce:86:31:1a:d5:0b:2d:74:c0:8b:f8:56:35:e2:68: dc:a6:a4:a8:f5:8c:ad:8a:92:1e:d5:69:47:6b:e4:b4:87:f9: cf:2e:31:18:a5:72:79:28:8a:a6:dc:fc:5a:7f:b7:3c:61:16: a5:cb:18:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3Be5iKklmlCgeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZjhmMDE3NzEtZTRkMi00ZGU5LWI3YTYtMzhlNjUzNmUyYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykjAX9qyy5N0JL1azFrb9+WjJgjqExiyzORJ KxvXf69uTN6NLZ8qE1aeZcEomNxQDhHgtq4iSRtZXZmMczgrV8mK/1rs27GL5+EY wGQ+5ntQFsqP2gv5ui8hVnRh4uenCWkVCX3ujMiYKZlvb/m00jFP5YXrci8OiBGu EtGIsKBagHNsp4dSvTQHi++JG8RCkdeIk28ztulPC4iFwBWrETcciAs5uPGQnvG6 pFWYsGriCOnmkIICRd7LzSbpNAWqL4jE3wfODsFWKSube4uEOBP1gc2N2ibAFjWI /n49VXVuETLV6j+duL+gpzhw3dTj/5d0Y9Q32Fd4ZOcBbmSV6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFt8tc78jWliDlVFaN8wR87WAEOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmRhN2ViOWEtMWU3Mi0z NTE2LWI3NGQtYjgzZTE5OTU0ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdADs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWsvMR6QMTT3hUbgAeoAp2oHXJ+CEoRQqk7L+36M3zy9T8RWMzl 0hWMierTAFJrDhFJdlALIdVlXPYp3TO++WX9+3J4Dbuzf7fYXk3Bsr1BZu6nAPS1 n3T6SCh+ACVw+yHhK0qdb2ZLCCxJgMTnNTgtaxFEdmFUn3eiJ+jaLLmcSu1OTW8A g9DXUQB1T2qPm7TyeqzNIZuMNfQSWkIQTvXOJhVmLYHAip3zGzrkgqV+y2yuTlTy ZDQLcLEeRTpMRB9GTC2ruSHtsM6GMRrVCy10wIv4VjXiaNympKj1jK2Kkh7VaUdr 5LSH+c8uMRilcnkoiqbc/Fp/tzxhFqXLGDY= -----END CERTIFICATE-----Generated at Thu Sep 11 02:50:58 2025 by rpki-client