$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa File: f2770efb-18a7-3ba4-acb5-61c9722570f1.roa (raw, json) Hash identifier: v8RcxZVvdPd7ymRyo+OVeNG0kPrZkGcjV3sSVehrhhc= Subject key identifier: 82:23:68:8F:A0:CC:96:F5:DE:D5:CA:70:2A:70:35:74:32:74:E5:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B0CDC18B401B5DBAC97A4CF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2620:74:59::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:18:b4:01:b5:db:ac:97:a4:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=8c6f1f04-30bc-4027-a9bb-7ce6e2af8bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:71:94:b1:35:82:3a:6c:f0:03:f1:29:06:47: 28:09:b1:3b:66:a6:e7:6a:0b:52:e6:b4:9e:a9:a0: cb:07:82:8d:5f:b3:b4:ed:ba:5c:0c:3e:eb:e0:1e: 37:02:03:3a:73:61:74:4b:38:44:ea:bf:15:45:7d: 51:de:eb:3d:33:02:33:a1:2f:3e:c5:4f:e0:9f:84: 94:a9:ba:bb:16:48:79:59:78:b5:8c:45:b8:19:55: 02:03:bd:e1:c7:2b:9d:63:a7:85:c4:fc:d4:be:71: 7c:7a:76:0f:18:88:6e:aa:ba:82:fa:67:0c:7d:64: bc:61:f3:49:40:02:c3:a2:59:a6:7a:6f:5c:73:ce: 91:dc:fb:e3:d1:e4:89:9e:f4:ed:dd:f6:26:67:f5: 9b:6e:21:8c:6b:d9:eb:cc:7c:e8:ce:1b:8e:48:c7: b9:a5:3f:82:75:53:d5:1e:50:7d:1d:94:46:11:10: 2f:22:f4:bf:27:97:32:49:e8:dd:19:88:56:a8:70: 68:2b:e9:f0:ad:f9:00:cc:18:e1:1c:63:87:bd:69: 69:1b:32:08:18:2c:89:06:7c:70:16:dd:22:79:70: 1e:98:f3:e6:41:d5:59:10:6e:34:2f:48:ee:d3:af: 5b:b4:d5:d6:06:71:59:53:3e:ef:8a:46:d1:88:aa: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:68:8F:A0:CC:96:F5:DE:D5:CA:70:2A:70:35:74:32:74:E5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:59::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:29:3c:fd:34:e0:2f:92:49:06:42:9e:9a:42:94:24:51:1a: 5c:ac:54:32:48:d1:64:c7:b7:3f:0a:90:d6:71:38:f5:f5:54: a5:5e:c6:60:be:54:2f:bc:42:44:2f:5d:42:4a:47:25:a8:bd: 14:07:fc:f8:ff:ef:cd:15:91:35:ff:13:ee:15:d0:c0:31:91: 8e:30:ac:59:7b:dd:f5:10:20:8e:c0:08:f5:bc:38:25:05:47: 9d:15:b0:69:57:84:f9:68:ed:06:e7:4a:90:ff:5f:62:4c:83: 51:dc:f7:0d:a6:b5:ca:3e:ed:b7:83:45:c1:17:6d:40:ef:3e: 8a:af:42:88:02:04:48:99:0f:dc:9a:65:c0:71:6d:2d:96:ad: a0:28:32:52:ef:34:22:34:a6:30:de:40:8e:3d:9e:78:ad:e0: e0:9f:17:b7:47:fc:cc:27:58:71:df:92:de:80:c0:e0:75:04: 50:9a:0c:25:38:6b:6e:b7:00:13:a6:6a:36:ac:a8:66:f1:c2: b9:f2:2d:fa:7c:ae:4c:87:08:77:e6:9e:d0:cc:65:b2:f6:5a: 17:b0:c8:3b:e5:2e:63:ca:aa:7d:82:cd:83:80:7f:e3:f4:63: c8:bf:bf:11:03:61:da:80:96:6d:d5:57:7c:48:75:eb:34:69: 56:33:e1:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3Bi0AbXbrJekz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OGM2ZjFmMDQtMzBiYy00MDI3LWE5YmItN2NlNmUyYWY4YmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHGUsTWCOmzwA/EpBkcoCbE7ZqbnagtS5rSe qaDLB4KNX7O07bpcDD7r4B43AgM6c2F0SzhE6r8VRX1R3us9MwIzoS8+xU/gn4SU qbq7Fkh5WXi1jEW4GVUCA73hxyudY6eFxPzUvnF8enYPGIhuqrqC+mcMfWS8YfNJ QALDolmmem9cc86R3Pvj0eSJnvTt3fYmZ/WbbiGMa9nrzHzozhuOSMe5pT+CdVPV HlB9HZRGERAvIvS/J5cySejdGYhWqHBoK+nwrfkAzBjhHGOHvWlpGzIIGCyJBnxw Ft0ieXAemPPmQdVZEG40L0ju069btNXWBnFZUz7vikbRiKp1kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIjaI+gzJb13tXKcCpwNXQydOVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjI3NzBlZmItMThhNy0z YmE0LWFjYjUtNjFjOTcyMjU3MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0pPP004C+SSQZCnppClCRRGlysVDJI0WTHtz8KkNZxOPX1VKVe xmC+VC+8QkQvXUJKRyWovRQH/Pj/780VkTX/E+4V0MAxkY4wrFl73fUQII7ACPW8 OCUFR50VsGlXhPlo7QbnSpD/X2JMg1Hc9w2mtco+7beDRcEXbUDvPoqvQogCBEiZ D9yaZcBxbS2WraAoMlLvNCI0pjDeQI49nnit4OCfF7dH/MwnWHHfkt6AwOB1BFCa DCU4a263ABOmajasqGbxwrnyLfp8rkyHCHfmntDMZbL2WhewyDvlLmPKqn2CzYOA f+P0Y8i/vxEDYdqAlm3VV3xIdes0aVYz4eA= -----END CERTIFICATE-----Generated at Thu Sep 11 02:48:14 2025 by rpki-client