$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa File: f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa (raw, json) Hash identifier: WCov+3sPEwGTuOT0B84CLWjV2LY0cSdKAztgUdF4KWY= Subject key identifier: 12:0B:10:90:43:B2:49:7D:FD:34:0E:F6:28:F8:92:7F:5E:C5:7B:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15E9BF86D4663EB2ECFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 20362 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5e:9b:f8:6d:46:63:eb:2e:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=3f405508-6cb7-4975-88ec-988af9124fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fc:64:f3:7e:d7:f1:fa:d3:80:82:2b:93:2c: b4:88:99:f4:06:45:04:f9:a3:5e:fb:d8:c0:0a:a3: 66:b9:00:58:af:b7:e2:15:1a:9a:0f:19:85:2f:01: d8:dc:4d:78:a0:d4:9f:9d:60:a9:47:c0:35:85:ca: 29:f0:7c:2a:73:d4:e7:5d:76:e2:70:91:ff:9c:61: cc:83:41:fc:f2:93:63:89:da:99:3f:98:95:e8:08: 0b:19:c5:8b:12:17:db:9b:4b:39:06:e4:a6:d9:0a: d9:77:cb:03:66:13:6c:40:95:65:e7:85:11:69:23: 79:e2:44:4c:98:0a:f0:03:05:4f:10:da:cd:5c:6d: e1:99:13:96:13:68:8a:0b:b6:a0:05:e0:25:a0:39: ab:1c:81:23:bf:3a:23:b0:9e:36:11:2f:63:65:02: 31:b0:38:ca:ef:97:29:5d:4a:4f:da:4f:ef:a5:cf: 38:66:c2:84:b7:6b:cd:ba:fe:3b:ac:4c:4f:cf:52: 5a:d9:65:4d:e6:0b:64:d0:82:f1:89:91:3c:b3:3b: 33:33:65:a1:d2:d9:4d:9a:b1:af:08:eb:8d:0b:92: 57:87:49:34:c0:75:8e:49:1b:6d:e8:b5:c3:1d:a5: e3:d3:64:e3:13:b5:59:25:02:0f:8f:c1:15:69:21: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0B:10:90:43:B2:49:7D:FD:34:0E:F6:28:F8:92:7F:5E:C5:7B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c2:51:52:f8:25:58:9a:6f:dc:7c:58:f3:2e:cc:6b:5a:6b: 01:5f:2f:6e:a2:19:7c:b3:ca:e3:e3:c2:8c:c2:b3:36:fc:84: f9:32:bf:06:ac:b6:75:f3:f5:61:3c:16:4a:7b:b9:ac:ac:13: 33:0c:a1:a2:82:e7:8d:86:b9:a8:2a:d6:21:3f:9e:bc:6c:43: bc:03:6e:f6:04:b3:d0:16:44:2f:73:78:0a:d9:01:c9:0a:11: 7e:45:54:10:fa:15:99:84:13:08:2b:e7:69:5d:cb:32:ce:db: a0:19:52:57:cf:f8:4c:f7:d1:f7:f6:15:8b:f7:11:e7:6f:3a: e0:b2:b3:57:d7:f4:ba:4a:7f:2d:89:a7:f8:68:8c:4f:15:8e: d5:0a:fd:fe:ad:0b:88:d5:3e:41:f5:de:c5:13:d7:3c:cf:55: 9e:a2:be:ef:e0:b4:37:79:76:98:37:08:f9:72:64:6c:a7:c8: f5:40:09:63:b4:3b:5b:24:40:5b:ee:72:03:05:6f:1c:be:00: 58:19:63:0a:84:45:83:d4:b1:0e:92:70:98:cf:8c:c3:f6:64: a1:4f:d4:06:d7:85:f6:a8:e2:a1:a3:e5:ca:d7:3a:37:e6:0d: be:5c:a3:61:14:bc:3b:25:e5:91:2d:99:41:d1:22:bf:6e:41: 28:cb:04:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V6b+G1GY+suz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk M2Y0MDU1MDgtNmNiNy00OTc1LTg4ZWMtOTg4YWY5MTI0ZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPxk837X8frTgIIrkyy0iJn0BkUE+aNe+9jA CqNmuQBYr7fiFRqaDxmFLwHY3E14oNSfnWCpR8A1hcop8Hwqc9TnXXbicJH/nGHM g0H88pNjidqZP5iV6AgLGcWLEhfbm0s5BuSm2QrZd8sDZhNsQJVl54URaSN54kRM mArwAwVPENrNXG3hmROWE2iKC7agBeAloDmrHIEjvzojsJ42ES9jZQIxsDjK75cp XUpP2k/vpc84ZsKEt2vNuv47rExPz1Ja2WVN5gtk0ILxiZE8szszM2Wh0tlNmrGv COuNC5JXh0k0wHWOSRtt6LXDHaXj02TjE7VZJQIPj8EVaSFydQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBILEJBDskl9/TQO9ij4kn9exXtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjJiNWYxYTMtMjhkMi0z MjNkLThlZTgtNWRlMzg4YmZkNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC7CUVL4JViab9x8WPMuzGtaawFfL26iGXyzyuPjwozCszb8hPky vwastnXz9WE8Fkp7uaysEzMMoaKC542Guagq1iE/nrxsQ7wDbvYEs9AWRC9zeArZ AckKEX5FVBD6FZmEEwgr52ldyzLO26AZUlfP+Ez30ff2FYv3EedvOuCys1fX9LpK fy2Jp/hojE8VjtUK/f6tC4jVPkH13sUT1zzPVZ6ivu/gtDd5dpg3CPlyZGynyPVA CWO0O1skQFvucgMFbxy+AFgZYwqERYPUsQ6ScJjPjMP2ZKFP1AbXhfao4qGj5crX OjfmDb5co2EUvDsl5ZEtmUHRIr9uQSjLBJ4= -----END CERTIFICATE-----Generated at Wed Oct 29 20:39:46 2025 by rpki-client