$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa File: 7f50af9e-2962-3c73-891b-2b2f216346f9.roa (raw, json) Hash identifier: EQD7e1Fcac+eAeXBaYGtXal4uth7OB6yYAfIVoyw6dw= Subject key identifier: D8:17:DD:1C:53:96:29:0A:C3:44:A9:B8:EE:20:B6:DD:FC:CB:CF:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15C0360F5680F155B7F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396608 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5c:03:60:f5:68:0f:15:5b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8c898446-536d-4702-9dbe-549d35328149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:7a:6c:27:dc:0c:84:10:0f:02:f9:e2:a6: a0:c0:29:02:8e:da:66:6b:a9:64:96:3c:1f:7d:6b: a4:76:08:29:dc:90:29:18:91:31:f8:df:71:fe:06: ea:3d:8b:ff:06:f5:21:2a:8b:f1:f5:8b:83:ab:12: fd:35:f3:7e:6b:98:b9:3b:85:8e:11:e2:bc:5c:9b: f9:3d:7b:1e:56:d8:98:c8:8e:9d:c0:64:72:2e:70: e7:95:a3:6b:b9:f1:82:e3:26:0b:ff:8b:8a:79:a9: 00:8f:d7:89:c1:1d:79:e8:ae:3a:8b:52:d7:6a:9f: 17:40:df:e1:57:c5:25:1c:76:67:d4:3c:65:93:e5: cd:eb:b1:85:f0:83:ab:98:a8:6d:a7:0e:6e:a2:cc: ad:ae:eb:f7:ca:32:35:2d:9d:05:c2:ac:bd:04:ee: 19:5c:7c:2f:85:41:cf:62:05:ba:d3:44:03:d7:12: 41:8e:70:57:03:bb:c2:03:44:99:f7:5b:e7:48:36: 96:79:fb:a1:43:14:d4:d7:c6:e6:2f:f5:94:5e:44: 96:12:3e:d9:bb:b5:9b:61:a9:81:c8:dc:aa:de:50: dd:bc:94:32:d9:30:36:11:e6:7b:4d:f9:4e:f2:e8: 4a:cf:3f:f7:28:f9:6b:c2:c5:f4:2a:9f:5d:11:f9: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:DD:1C:53:96:29:0A:C3:44:A9:B8:EE:20:B6:DD:FC:CB:CF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7f:62:dd:ff:d4:74:c2:c8:21:44:fd:ce:7c:4e:b4:8e:c6: 18:73:b5:79:70:cf:27:ed:08:1a:0d:3d:b8:dd:b1:45:9c:b3: 3a:11:87:61:54:3f:1d:c4:bf:f9:27:a3:df:b4:e5:ec:60:51: 63:3e:d9:56:2c:78:df:f5:ad:ac:76:1c:c5:d2:8b:e5:6c:3a: ca:e4:86:ef:50:9a:51:f4:74:6b:d9:c8:78:ed:bd:1e:f8:af: de:7e:ee:38:55:a3:a1:f3:eb:51:b7:3e:f0:4f:15:ec:f2:51: 7c:1f:c8:f0:e6:40:6b:75:e2:ff:71:5d:a2:c6:72:53:f5:df: 45:c7:34:77:e1:71:f0:26:41:79:b6:eb:d8:10:1c:a2:2c:76: f3:62:4c:8e:ab:ea:85:9a:83:90:d6:44:4b:a9:50:bf:02:4e: 64:56:a7:91:3e:be:19:04:13:2a:14:35:db:5b:46:5c:fa:d8: f4:97:75:ab:f5:3c:a1:4c:50:f1:a5:a8:71:05:28:e0:fd:35: 9e:e8:05:5a:ae:f8:64:32:78:b9:15:b2:65:e6:0c:71:15:cc: 69:1e:94:b5:44:70:02:a5:f9:d6:34:11:0a:e4:97:91:37:20: 58:d2:e0:08:c8:f1:d2:87:d2:2c:f6:36:13:75:95:44:5a:c5: 7f:ef:10:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VwDYPVoDxVbfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OGM4OTg0NDYtNTM2ZC00NzAyLTlkYmUtNTQ5ZDM1MzI4MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5F6bCfcDIQQDwL54qagwCkCjtpma6lkljwf fWukdggp3JApGJEx+N9x/gbqPYv/BvUhKovx9YuDqxL9NfN+a5i5O4WOEeK8XJv5 PXseVtiYyI6dwGRyLnDnlaNrufGC4yYL/4uKeakAj9eJwR156K46i1LXap8XQN/h V8UlHHZn1Dxlk+XN67GF8IOrmKhtpw5uosytruv3yjI1LZ0Fwqy9BO4ZXHwvhUHP YgW600QD1xJBjnBXA7vCA0SZ91vnSDaWefuhQxTU18bmL/WUXkSWEj7Zu7WbYamB yNyq3lDdvJQy2TA2EeZ7TflO8uhKzz/3KPlrwsX0Kp9dEfnC6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgX3RxTlikKw0SpuO4gtt38y88TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y1MGFmOWUtMjk2Mi0z YzczLTg5MWItMmIyZjIxNjM0NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACp/Yt3/1HTCyCFE/c58TrSOxhhztXlwzyftCBoNPbjdsUWcszoR h2FUPx3Ev/kno9+05exgUWM+2VYseN/1rax2HMXSi+VsOsrkhu9QmlH0dGvZyHjt vR74r95+7jhVo6Hz61G3PvBPFezyUXwfyPDmQGt14v9xXaLGclP130XHNHfhcfAm QXm269gQHKIsdvNiTI6r6oWag5DWREupUL8CTmRWp5E+vhkEEyoUNdtbRlz62PSX dav1PKFMUPGlqHEFKOD9NZ7oBVqu+GQyeLkVsmXmDHEVzGkelLVEcAKl+dY0EQrk l5E3IFjS4AjI8dKH0iz2NhN1lURaxX/vEKw= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:06 2025 by rpki-client