$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5643284-8851-35be-9243-a36568d40cae.roa File: e5643284-8851-35be-9243-a36568d40cae.roa (raw, json) Hash identifier: LpWfBMxh1BVSFAMoXs4s/j3KU7TOoNzj83yGceykx58= Subject key identifier: DD:D4:33:CC:FD:FC:80:EC:18:87:D2:62:53:8E:30:84:E3:C2:32:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F157D42984DF3894443140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5643284-8851-35be-9243-a36568d40cae.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396564 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:57:d4:29:84:df:38:94:44:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=58f7c125-63c9-4527-9d48-709104cfaf12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:e9:1c:c9:92:bb:09:07:67:af:67:8c:ec: 05:01:63:9d:c2:2e:58:66:5a:1b:c0:d0:c0:10:df: 25:04:63:d2:74:fd:c7:ba:17:9b:67:5d:a0:e0:5f: 58:96:0a:5e:49:f4:e9:4b:f4:8b:d0:83:c9:34:30: 2d:c8:1d:fb:37:85:d2:40:0f:35:af:21:44:23:6c: 9a:a0:25:27:88:f4:f6:a2:84:a2:db:e9:ec:13:29: fd:bf:24:14:2b:b4:3c:26:96:f3:04:d6:52:c9:2b: 73:0a:db:e5:9e:be:8f:6d:e6:2f:33:01:e8:c1:52: 10:dc:79:0f:3d:5d:a5:9a:4b:4f:a1:5e:b4:82:7d: 69:b9:3e:8d:40:41:e9:c6:ef:f9:fa:58:ff:38:5c: d8:38:82:c2:82:8a:35:f8:71:f1:32:ad:1f:52:48: b9:48:e4:d6:07:95:5a:35:a0:37:1e:04:96:1b:75: 5e:0e:7e:49:6c:d2:19:ad:c0:1f:1b:1b:1b:e3:61: db:7c:5e:06:5f:e7:aa:64:01:26:4a:e9:7b:e0:7e: 0a:b4:de:43:dd:77:08:f8:9a:17:75:9a:08:93:9c: 67:79:7f:72:27:d4:7d:a1:7b:58:6f:fe:63:f6:31: f6:30:2b:0c:cb:9e:51:6a:9e:3c:c9:29:9b:d7:ec: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:33:CC:FD:FC:80:EC:18:87:D2:62:53:8E:30:84:E3:C2:32:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5643284-8851-35be-9243-a36568d40cae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e8:60:b5:ce:35:da:89:dc:8d:d0:6f:9c:cf:e4:98:54:11: 3b:d1:66:50:2c:7b:af:92:44:df:27:69:c3:a5:b9:f0:92:48: 02:9c:e1:9b:c3:d8:f0:67:9d:b5:60:37:ac:d7:b8:33:c3:0c: f1:0c:cd:31:70:bc:66:af:5c:eb:e4:0a:e5:80:38:bd:fb:e6: 56:ba:a2:71:22:84:06:53:c9:a4:2a:84:44:f8:9c:cc:4a:7d: f0:6b:18:7f:5b:21:db:36:de:f8:98:2c:a8:57:85:c1:82:a7: 2a:73:03:e1:16:58:1f:a3:a2:12:28:46:8b:c4:46:27:55:84: 04:da:3e:df:b3:78:40:f4:99:e0:b6:00:59:65:8e:0c:60:66: 02:78:26:67:13:37:66:0b:6d:80:1d:00:38:f8:80:5b:44:b1: 9b:f0:2d:33:f6:94:36:be:0a:5a:d3:60:b2:1e:b6:66:16:0e: c1:ed:c1:f4:61:53:e2:f1:cb:20:fc:11:59:9e:64:55:92:4e: 17:01:bc:03:b9:4f:fc:0f:85:b3:db:0f:6d:1a:ee:59:57:7f: 55:ee:4b:58:d6:ce:5c:e6:be:29:b3:b3:11:ee:65:34:1d:12: ec:57:cc:d0:af:d0:47:36:15:e6:0a:6d:7e:9a:96:1d:3f:d3: 14:02:14:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VfUKYTfOJREMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NThmN2MxMjUtNjNjOS00NTI3LTlkNDgtNzA5MTA0Y2ZhZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfbpHMmSuwkHZ69njOwFAWOdwi5YZlobwNDA EN8lBGPSdP3HuhebZ12g4F9YlgpeSfTpS/SL0IPJNDAtyB37N4XSQA81ryFEI2ya oCUniPT2ooSi2+nsEyn9vyQUK7Q8JpbzBNZSyStzCtvlnr6PbeYvMwHowVIQ3HkP PV2lmktPoV60gn1puT6NQEHpxu/5+lj/OFzYOILCgoo1+HHxMq0fUki5SOTWB5Va NaA3HgSWG3VeDn5JbNIZrcAfGxsb42HbfF4GX+eqZAEmSul74H4KtN5D3XcI+JoX dZoIk5xneX9yJ9R9oXtYb/5j9jH2MCsMy55Rap48ySmb1+zeXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3UM8z9/IDsGIfSYlOOMITjwjIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTU2NDMyODQtODg1MS0z NWJlLTkyNDMtYTM2NTY4ZDQwY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEroYLXONdqJ3I3Qb5zP5JhUETvRZlAse6+SRN8nacOlufCSSAKc 4ZvD2PBnnbVgN6zXuDPDDPEMzTFwvGavXOvkCuWAOL375la6onEihAZTyaQqhET4 nMxKffBrGH9bIds23viYLKhXhcGCpypzA+EWWB+johIoRovERidVhATaPt+zeED0 meC2AFlljgxgZgJ4JmcTN2YLbYAdADj4gFtEsZvwLTP2lDa+ClrTYLIetmYWDsHt wfRhU+LxyyD8EVmeZFWSThcBvAO5T/wPhbPbD20a7llXf1XuS1jWzlzmvimzsxHu ZTQdEuxXzNCv0Ec2FeYKbX6alh0/0xQCFA0= -----END CERTIFICATE-----Generated at Wed Oct 29 20:31:36 2025 by rpki-client