$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f75dfda-6cef-372c-8ae0-863ff8750e12.roa File: 8f75dfda-6cef-372c-8ae0-863ff8750e12.roa (raw, json) Hash identifier: gCrwj4QhTNkZS3Mw1UjLAa2nv52ZFsMrJ4uJODNE8kk= Subject key identifier: C3:D5:92:C2:73:A0:1C:37:74:9D:01:29:8A:77:0F:FA:03:28:7D:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF521594567BA55AE9E27DAA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f75dfda-6cef-372c-8ae0-863ff8750e12.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 2620:74:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:59:45:67:ba:55:ae:9e:27:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1a9d1f84-3930-4049-b6f8-6da288389d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6e:28:82:fd:66:91:e9:6f:5c:66:04:54:a4: c3:8c:1e:f7:fa:39:d3:50:1f:23:88:c4:c5:8b:dc: b3:95:fb:2f:6f:f6:71:af:94:5c:b4:83:28:4b:20: 1f:2f:7e:d8:38:bd:b6:24:e3:47:b6:d3:5f:ca:ba: da:d2:2c:a7:f0:2b:a7:99:f2:b4:78:fd:fc:89:15: b1:5b:55:88:d5:f6:64:18:8f:65:82:7a:f2:57:1c: 94:42:35:d6:0a:18:19:23:89:5a:1b:83:9f:fc:ef: 90:03:3f:56:0b:45:e5:ba:9c:e8:99:5b:82:17:a2: 50:c6:d1:41:33:4c:db:6d:1a:2d:d0:72:a2:84:47: ec:83:f7:b3:ef:47:01:a1:3e:15:cb:fd:58:f7:9e: 6b:7d:5c:37:d5:cc:4e:c8:b6:73:54:70:21:79:25: 13:e1:3b:08:cf:b5:6a:df:f6:36:5f:a9:bc:aa:47: d4:92:61:54:92:e8:98:60:7a:41:fa:c3:97:d1:e2: d9:d1:67:f4:fc:33:22:2c:29:60:e1:a7:d1:8a:54: ae:5b:96:b1:d4:4d:10:76:fc:79:26:6c:7e:a8:71: 6a:3b:50:cf:b3:3b:66:2f:ea:09:6a:2a:18:1b:91: b4:93:59:5f:c0:8a:03:a9:33:77:8d:2a:bb:30:c4: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D5:92:C2:73:A0:1C:37:74:9D:01:29:8A:77:0F:FA:03:28:7D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f75dfda-6cef-372c-8ae0-863ff8750e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:de:54:ff:06:79:8e:ed:46:4e:dd:e1:f2:70:98:60:00: ae:ed:51:c2:91:e8:a1:0e:c3:08:6c:7c:cf:37:3e:1b:f1:30: 90:0b:13:de:8f:42:16:de:94:2b:c2:f1:c3:b8:3c:93:cb:1b: a5:33:39:78:96:5a:4e:9a:1c:87:41:2f:af:78:16:fb:b7:c9: cf:cc:23:41:c4:72:68:86:93:2c:a5:08:67:5d:78:04:c0:1a: 09:1b:b1:ca:83:6f:1a:f6:bb:1c:a8:38:b1:92:3c:04:a5:41: 48:ee:fb:e7:39:7f:14:7e:2c:71:a9:12:7f:ea:6b:60:21:6c: ad:f9:40:f1:d9:f3:b9:bc:af:03:64:46:7d:b4:22:b2:c7:c7: 9e:95:a6:63:a3:3e:05:e1:03:f9:76:cf:12:06:5f:d9:8b:e7: 4c:ae:a2:98:ee:eb:d7:ad:b5:cd:f6:a7:23:a2:6e:97:3c:9d: 42:ad:56:c1:f0:1c:e6:da:f3:63:d2:17:b3:52:c2:e1:7d:bd: 1e:8e:51:4a:26:4c:0d:39:5f:16:f6:02:d6:50:fe:98:e4:01: ef:32:11:1a:91:5b:73:28:d2:cc:cb:da:89:6b:4b:d5:70:27: ef:5e:6d:0d:54:75:fb:ba:01:a5:e5:80:1f:82:89:89:3b:ac: f6:b3:5e:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IVlFZ7pVrp4n2qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWE5ZDFmODQtMzkzMC00MDQ5LWI2ZjgtNmRhMjg4Mzg5ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg24ogv1mkelvXGYEVKTDjB73+jnTUB8jiMTF i9yzlfsvb/Zxr5RctIMoSyAfL37YOL22JONHttNfyrra0iyn8CunmfK0eP38iRWx W1WI1fZkGI9lgnryVxyUQjXWChgZI4laG4Of/O+QAz9WC0XlupzomVuCF6JQxtFB M0zbbRot0HKihEfsg/ez70cBoT4Vy/1Y955rfVw31cxOyLZzVHAheSUT4TsIz7Vq 3/Y2X6m8qkfUkmFUkuiYYHpB+sOX0eLZ0Wf0/DMiLClg4afRilSuW5ax1E0Qdvx5 Jmx+qHFqO1DPsztmL+oJaioYG5G0k1lfwIoDqTN3jSq7MMSWqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMPVksJzoBw3dJ0BKYp3D/oDKH07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGY3NWRmZGEtNmNlZi0z NzJjLThhZTAtODYzZmY4NzUwZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5K3lT/BnmO7UZO3eHycJhgAK7tUcKR6KEOwwhsfM83PhvxMJAL E96PQhbelCvC8cO4PJPLG6UzOXiWWk6aHIdBL694Fvu3yc/MI0HEcmiGkyylCGdd eATAGgkbscqDbxr2uxyoOLGSPASlQUju++c5fxR+LHGpEn/qa2AhbK35QPHZ87m8 rwNkRn20IrLHx56VpmOjPgXhA/l2zxIGX9mL50yuopju69ettc32pyOibpc8nUKt VsHwHOba82PSF7NSwuF9vR6OUUomTA05Xxb2AtZQ/pjkAe8yERqRW3Mo0szL2olr S9VwJ+9ebQ1Udfu6AaXlgB+CiYk7rPazXqg= -----END CERTIFICATE-----Generated at Thu Sep 11 02:51:46 2025 by rpki-client