$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa File: ef8df252-f36d-3655-8163-5a2e52bb2462.roa (raw, json) Hash identifier: KoFzVMTOpgkkdf6yD3fDluAKpvGRkEA2TAZmRHnPk1Y= Subject key identifier: 73:55:43:16:14:5B:84:E1:32:82:CD:0D:52:FF:C5:B0:F2:DE:4E:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15A99CCC919D2ABF7AD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396549 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5a:99:cc:c9:19:d2:ab:f7:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=71644606-d7a2-439c-9598-8b7e2bbec27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e1:c4:22:e8:84:f2:c8:f0:7c:90:29:0d:69: ff:64:c8:bc:d6:d3:c9:5b:13:f2:5b:0b:79:b0:a5: ef:de:e5:28:b9:67:db:67:92:db:7a:15:e6:8f:9f: cb:79:95:66:81:ae:3f:1d:41:4f:28:22:d4:b9:77: d4:55:66:5b:9b:1b:99:38:be:8f:27:e3:d7:dd:1c: ea:ff:70:0e:e2:fc:6b:21:8f:8e:d1:e1:e2:f6:29: 6a:5f:3f:3c:f1:f0:bf:5a:5d:c3:53:7a:49:b6:32: 45:bf:22:80:fe:a9:e4:9c:e9:25:a3:b2:34:e9:cb: f4:d2:dc:50:a6:5f:85:c3:75:21:7a:e2:b8:ef:4a: 17:07:7e:62:0a:4b:ea:c3:1e:f1:31:a7:33:f7:40: 8e:26:91:20:f0:4d:11:71:3b:9f:f0:7a:a3:35:00: d8:a3:69:93:5a:ed:55:51:fd:f0:30:cd:6b:a6:d8: 6b:75:71:8e:10:95:5c:c5:d7:8b:5d:d4:c0:0e:6e: bb:a5:78:6d:3f:78:7f:d6:16:cb:a7:19:9d:73:a5: be:e5:d8:76:20:af:4d:f1:66:48:52:94:6d:2f:b5: 4d:58:0f:42:d0:ac:54:ad:e0:5e:ed:7a:e1:14:54: 33:f5:7d:d5:ef:b0:ca:5b:3d:8d:33:b3:41:18:8e: 95:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:55:43:16:14:5B:84:E1:32:82:CD:0D:52:FF:C5:B0:F2:DE:4E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ba:13:da:2d:c3:7b:81:d9:b9:04:d1:6e:84:1a:f9:61:81: 1a:07:ba:40:fc:53:fd:b7:d8:3c:9d:a4:4e:2e:bc:42:43:b2: 1c:43:9e:53:23:ab:e0:07:2e:3f:29:f5:db:bd:1f:69:89:73: 56:12:46:62:95:d8:ff:82:da:db:d8:b0:22:3d:b4:6b:c9:4a: e8:8f:25:cf:89:86:e3:22:4e:b1:00:0e:1d:90:17:2a:d1:9a: 1e:fd:85:e8:33:13:9a:18:f1:c2:fe:51:e6:3d:c5:a7:19:d6: 86:11:e1:29:a7:80:28:d7:6a:96:0d:77:b7:23:18:2c:f7:b0: 21:a4:62:53:9e:4e:8d:aa:c4:e8:ad:04:be:81:e3:cf:15:bc: 0e:04:e6:e2:59:87:36:e0:c6:dc:d1:01:0c:1f:e1:97:72:08: 69:0c:aa:70:ec:86:49:ef:3a:a4:ea:05:53:bb:e0:1d:9d:0c: 2a:2e:c7:c4:72:3a:04:c7:e1:a7:1e:d4:0b:67:5b:83:51:f3: 3e:14:9f:8f:08:18:c9:54:66:3a:96:c6:06:04:f7:5a:c1:14: fe:c6:c0:8b:1a:69:1c:fe:9d:9c:20:53:d1:e3:32:e2:e3:85: 31:fc:4c:e2:d2:19:64:81:b8:84:c2:4c:e5:9b:b3:4f:66:48: bf:67:01:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VqZzMkZ0qv3rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NzE2NDQ2MDYtZDdhMi00MzljLTk1OTgtOGI3ZTJiYmVjMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+HEIuiE8sjwfJApDWn/ZMi81tPJWxPyWwt5 sKXv3uUouWfbZ5LbehXmj5/LeZVmga4/HUFPKCLUuXfUVWZbmxuZOL6PJ+PX3Rzq /3AO4vxrIY+O0eHi9ilqXz888fC/Wl3DU3pJtjJFvyKA/qnknOklo7I06cv00txQ pl+Fw3UheuK470oXB35iCkvqwx7xMacz90COJpEg8E0RcTuf8HqjNQDYo2mTWu1V Uf3wMM1rpthrdXGOEJVcxdeLXdTADm67pXhtP3h/1hbLpxmdc6W+5dh2IK9N8WZI UpRtL7VNWA9C0KxUreBe7XrhFFQz9X3V77DKWz2NM7NBGI6VEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHNVQxYUW4ThMoLNDVL/xbDy3k5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY4ZGYyNTItZjM2ZC0z NjU1LTgxNjMtNWEyZTUyYmIyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACm6E9otw3uB2bkE0W6EGvlhgRoHukD8U/232DydpE4uvEJDshxD nlMjq+AHLj8p9du9H2mJc1YSRmKV2P+C2tvYsCI9tGvJSuiPJc+JhuMiTrEADh2Q FyrRmh79hegzE5oY8cL+UeY9xacZ1oYR4SmngCjXapYNd7cjGCz3sCGkYlOeTo2q xOitBL6B488VvA4E5uJZhzbgxtzRAQwf4ZdyCGkMqnDshknvOqTqBVO74B2dDCou x8RyOgTH4ace1AtnW4NR8z4Un48IGMlUZjqWxgYE91rBFP7GwIsaaRz+nZwgU9Hj MuLjhTH8TOLSGWSBuITCTOWbs09mSL9nATo= -----END CERTIFICATE-----Generated at Wed Oct 29 20:39:45 2025 by rpki-client