$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e805bb38-aa99-34ce-a61b-e734fa306684.roa File: e805bb38-aa99-34ce-a61b-e734fa306684.roa (raw, json) Hash identifier: 7Lz/N4HJpFgasaYGm5tPlM8guXAH47YDHsbOV5FHebE= Subject key identifier: 4E:66:55:60:78:C1:53:AF:63:33:4A:9C:AC:5D:1A:F6:0C:5B:E6:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE89141AC08BF0DA06802F880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e805bb38-aa99-34ce-a61b-e734fa306684.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:41:ac:08:bf:0d:a0:68:02:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=780f53d4-f0f1-4490-a873-d5c868be8069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bb:db:65:b5:ac:ca:ec:d4:d5:a6:e0:64:21: e8:6d:c5:c2:66:ad:80:0f:28:9f:63:91:6c:3f:c6: 43:ed:a4:e0:7a:2b:af:9e:78:24:fa:73:a2:1a:47: 68:4c:f1:d1:83:73:62:cf:a4:27:42:02:9a:69:d6: 50:e8:bc:7e:3c:49:6b:2f:d7:05:c6:43:3f:cf:39: d0:11:4d:a1:58:3f:f4:f4:9e:74:ac:df:3b:c1:0f: 7b:e1:91:5c:79:6f:07:11:d0:d9:a0:c8:7a:12:4a: ce:bc:20:1c:62:8e:02:59:59:4d:a1:47:0c:bb:3a: b7:c0:c1:81:a6:49:cd:98:d6:20:a8:e4:f6:2d:cc: 90:f9:db:61:03:23:cd:a4:31:42:27:1d:30:11:12: 6f:48:65:3c:8a:99:9f:4c:67:63:f1:e5:8b:67:64: b1:08:1b:db:46:68:ff:4b:c0:ac:4d:57:c4:9d:1b: ce:7b:38:bb:05:7a:75:48:9e:66:86:94:0c:ea:8b: 64:51:65:e1:be:75:7e:c6:b5:5b:3e:54:25:6c:1c: 1d:33:f4:75:21:27:6a:cc:7b:50:71:02:8a:2b:4b: 99:77:e4:74:05:c6:22:4a:cb:14:b1:80:fc:88:17: 54:34:ab:bc:d7:1a:ae:17:63:33:6d:73:e7:36:89: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:55:60:78:C1:53:AF:63:33:4A:9C:AC:5D:1A:F6:0C:5B:E6:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e805bb38-aa99-34ce-a61b-e734fa306684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:72::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:73:17:da:36:b2:b8:df:af:b9:2a:4d:45:d3:7b:8a:32:1a: 66:80:e8:af:56:e5:94:96:e2:02:88:c3:a5:f4:3e:9e:b9:9f: d7:a0:f2:46:31:54:89:e1:64:27:ff:23:22:6b:ef:45:9d:da: 91:67:4c:87:6a:b5:f2:59:59:5a:f1:a1:79:ff:64:10:23:77: f5:0d:f6:72:39:fe:71:9a:ec:ed:c3:de:84:f0:7a:85:70:ec: b1:e3:ee:25:22:11:f7:a0:12:44:52:51:dd:92:93:f4:69:a9: 6b:75:7b:fa:60:91:89:d9:5c:b8:69:47:32:80:df:92:c1:ab: 90:76:ec:18:e0:0c:24:6a:ae:3e:57:71:48:ec:25:ba:13:c8: b6:14:cf:02:13:23:9a:da:6f:27:87:0f:d9:f0:2b:bd:91:09: 3d:cd:3c:e8:ee:54:72:55:35:8b:5c:d8:68:28:92:ec:9c:00: 83:e1:76:e0:1c:0a:09:65:1e:34:6e:04:11:3b:a2:eb:66:94: 17:fa:c9:72:d2:ca:ff:d8:4f:0a:35:83:26:7d:09:94:43:42: cc:49:8a:bc:37:b3:6b:3b:c6:eb:d6:2e:73:2b:ae:6a:f7:28: 16:9b:15:ef:7c:bb:eb:f4:64:d2:a9:28:2a:39:b2:ff:45:dd: 9f:37:64:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErokUGsCL8NoGgC+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NzgwZjUzZDQtZjBmMS00NDkwLWE4NzMtZDVjODY4YmU4MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrvbZbWsyuzU1abgZCHobcXCZq2ADyifY5Fs P8ZD7aTgeiuvnngk+nOiGkdoTPHRg3Niz6QnQgKaadZQ6Lx+PElrL9cFxkM/zznQ EU2hWD/09J50rN87wQ974ZFceW8HEdDZoMh6EkrOvCAcYo4CWVlNoUcMuzq3wMGB pknNmNYgqOT2LcyQ+dthAyPNpDFCJx0wERJvSGU8ipmfTGdj8eWLZ2SxCBvbRmj/ S8CsTVfEnRvOezi7BXp1SJ5mhpQM6otkUWXhvnV+xrVbPlQlbBwdM/R1ISdqzHtQ cQKKK0uZd+R0BcYiSssUsYD8iBdUNKu81xquF2MzbXPnNok+HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE5mVWB4wVOvYzNKnKxdGvYMW+asMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTgwNWJiMzgtYWE5OS0z NGNlLWE2MWItZTczNGZhMzA2Njg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpzF9o2srjfr7kqTUXTe4oyGmaA6K9W5ZSW4gKIw6X0Pp65n9eg 8kYxVInhZCf/IyJr70Wd2pFnTIdqtfJZWVrxoXn/ZBAjd/UN9nI5/nGa7O3D3oTw eoVw7LHj7iUiEfegEkRSUd2Sk/RpqWt1e/pgkYnZXLhpRzKA35LBq5B27BjgDCRq rj5XcUjsJboTyLYUzwITI5rabyeHD9nwK72RCT3NPOjuVHJVNYtc2GgokuycAIPh duAcCgllHjRuBBE7outmlBf6yXLSyv/YTwo1gyZ9CZRDQsxJirw3s2s7xuvWLnMr rmr3KBabFe98u+v0ZNKpKCo5sv9F3Z83ZCU= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:10 2025 by rpki-client