$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa File: b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa (raw, json) Hash identifier: mafm5KhB4MRb95l6yCe6dLekjW4i5iLIvO3eRRbCLxk= Subject key identifier: C1:83:35:DF:2E:55:11:C1:DB:37:A7:BF:C3:EE:DE:A6:38:11:C5:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B0CDC179DE13854EE304A7040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2620:74:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:17:9d:e1:38:54:ee:30:4a:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=04909b60-8a50-4fb6-86a4-b0d66077d92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:87:81:39:b4:f4:cd:8d:83:01:1e:11:3b: 80:89:e8:d4:78:b6:6d:c2:09:56:c4:36:7d:e0:e7: fa:e9:a2:89:8e:33:a1:ad:d7:f0:e7:05:35:7e:41: a6:b3:a5:48:e9:90:cf:84:60:7e:ad:07:36:46:50: 94:4d:bd:1e:e7:74:e3:8c:29:52:d8:fc:29:dd:b2: 7c:c5:40:9f:85:b7:b8:1f:69:3e:93:b8:f3:00:0a: fa:9b:83:f4:0d:46:49:12:22:0a:38:9a:00:53:06: 2f:66:f1:5f:c9:b2:30:27:11:e1:ce:20:0e:2a:e8: 5a:e4:4d:1a:0b:78:a9:e3:2e:8b:fd:2a:ac:fe:2e: 20:37:1a:d6:a1:f3:a8:58:e7:3c:de:23:f8:ce:8d: 8b:03:c9:63:a0:49:12:f0:c2:0f:c4:86:4b:a2:e0: 71:99:b7:a0:26:f3:8f:af:71:c8:5f:0c:30:a8:96: bd:5d:6f:ab:0d:ed:7b:f2:96:3b:85:26:1c:03:2a: af:62:45:ca:19:47:57:78:3e:bd:69:ee:61:de:77: d2:86:c1:50:06:52:82:cc:08:ae:df:7e:5c:3b:dd: 3f:84:cd:1d:bd:93:e9:d8:e1:ae:47:6b:c7:24:fb: 33:74:af:03:f8:36:d0:9f:17:ac:67:54:95:01:fc: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:35:DF:2E:55:11:C1:DB:37:A7:BF:C3:EE:DE:A6:38:11:C5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0c:3a:21:cb:29:d4:6b:9f:b1:68:f8:77:b2:9f:58:a5:89: bc:34:8a:36:e7:e9:23:d3:a9:79:3e:27:b8:d0:09:51:49:fa: 04:9e:98:e1:51:eb:e6:22:aa:51:be:94:66:13:39:aa:b6:e8: 90:d9:a9:19:b8:e3:7d:ae:ad:45:ab:1a:d3:f4:8c:81:78:bf: d1:3d:72:db:f0:9c:c5:cf:cc:a3:3f:6c:7f:a9:26:25:f5:ae: 37:15:27:3d:88:41:33:a9:3c:6c:37:09:15:5e:1c:5f:2e:e9: e3:ce:1e:7c:a9:0a:eb:2c:d2:1c:54:6c:d5:0e:b7:aa:03:09: c8:28:24:98:84:5d:de:fe:40:fb:24:0e:bd:a6:f0:80:ed:5e: 4e:0f:0c:91:58:4b:c5:86:db:2b:16:a4:c6:5b:20:10:fb:1d: 70:80:5d:1f:3e:39:0a:98:49:01:99:c1:05:b0:39:62:cd:9a: d0:1c:7e:81:ab:94:35:00:f2:ac:ab:a6:07:ae:a4:6f:30:37: 70:b3:b4:6d:05:cd:06:00:88:d9:f4:d7:dd:60:49:12:83:55: 28:69:4f:89:ab:2c:b4:9d:47:34:ae:a6:f0:7e:cd:a7:cf:82: c6:6c:7c:fe:6c:17:a3:ae:22:bf:ce:d8:96:10:09:e3:d8:c6: 7f:38:ce:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3Bed4ThU7jBKcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MDQ5MDliNjAtOGE1MC00ZmI2LTg2YTQtYjBkNjYwNzdkOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZmHgTm09M2NgwEeETuAiejUeLZtwglWxDZ9 4Of66aKJjjOhrdfw5wU1fkGms6VI6ZDPhGB+rQc2RlCUTb0e53TjjClS2Pwp3bJ8 xUCfhbe4H2k+k7jzAAr6m4P0DUZJEiIKOJoAUwYvZvFfybIwJxHhziAOKuha5E0a C3ip4y6L/Sqs/i4gNxrWofOoWOc83iP4zo2LA8ljoEkS8MIPxIZLouBxmbegJvOP r3HIXwwwqJa9XW+rDe178pY7hSYcAyqvYkXKGUdXeD69ae5h3nfShsFQBlKCzAiu 335cO90/hM0dvZPp2OGuR2vHJPszdK8D+DbQnxesZ1SVAfwB9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGDNd8uVRHB2zenv8Pu3qY4EcVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjg5YWJiNzYtZTRlZi0z ZjgwLWFiNDYtZTJkYzFhN2RlZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFoMOiHLKdRrn7Fo+Heyn1ilibw0ijbn6SPTqXk+J7jQCVFJ+gSe mOFR6+YiqlG+lGYTOaq26JDZqRm4432urUWrGtP0jIF4v9E9ctvwnMXPzKM/bH+p JiX1rjcVJz2IQTOpPGw3CRVeHF8u6ePOHnypCuss0hxUbNUOt6oDCcgoJJiEXd7+ QPskDr2m8IDtXk4PDJFYS8WG2ysWpMZbIBD7HXCAXR8+OQqYSQGZwQWwOWLNmtAc foGrlDUA8qyrpgeupG8wN3CztG0FzQYAiNn0191gSRKDVShpT4mrLLSdRzSupvB+ zafPgsZsfP5sF6OuIr/O2JYQCePYxn84zm8= -----END CERTIFICATE-----Generated at Thu Sep 11 02:50:59 2025 by rpki-client