$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9d6ccb1-0539-3856-b352-b145944aee48.roa File: f9d6ccb1-0539-3856-b352-b145944aee48.roa (raw, json) Hash identifier: PsCgRNQenv0OPyS0ltHkaMchgIh0QD6I8IhMUuaP/0U= Subject key identifier: B3:80:34:C9:D1:62:25:5A:4B:44:2C:59:86:30:FA:67:F5:46:C5:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15D385BE5A16F44C5F240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9d6ccb1-0539-3856-b352-b145944aee48.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396617 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:38:5b:e5:a1:6f:44:c5:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=22e44707-beab-4845-a9b8-c06168e224b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:20:2a:4d:15:bb:1a:c6:fe:4b:75:02:c0: d9:e9:11:59:04:c1:34:09:36:0b:01:3f:46:7e:17: e4:eb:f6:04:fc:f1:58:30:03:6b:61:fb:17:48:05: aa:25:1d:05:65:00:78:87:d0:1c:09:20:91:56:7d: 1a:20:57:f6:8f:24:3a:14:7f:79:8b:8e:67:d7:b5: 79:91:1f:6b:ed:19:f2:f7:7e:1a:41:24:75:1d:6b: a3:94:de:23:b6:33:b0:0d:ae:a7:05:c7:20:55:c3: bf:28:5f:ea:00:27:48:3a:4f:e6:ef:b2:74:71:b4: 18:3f:3d:d5:69:ef:9c:17:49:41:d8:60:16:e0:df: a8:33:39:86:4d:f4:b9:12:40:1c:67:e2:d1:09:f0: 5d:86:a9:75:f8:0e:04:00:a0:53:31:bc:69:94:d9: da:8e:ea:78:e2:02:54:83:00:16:29:fa:3e:73:ae: 35:0e:46:a0:8c:f1:90:70:bc:b4:7d:6f:a2:db:92: af:6a:53:f6:97:f1:44:f3:32:01:87:88:62:cb:0c: 0b:de:96:04:10:38:4b:c4:7f:04:5d:0e:78:c5:4a: af:50:77:e2:d7:3f:03:7f:a6:c7:77:f3:99:96:73: 31:25:a7:81:5b:ef:ce:be:65:19:8e:e6:2a:6b:ff: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:80:34:C9:D1:62:25:5A:4B:44:2C:59:86:30:FA:67:F5:46:C5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9d6ccb1-0539-3856-b352-b145944aee48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5e:5c:8c:79:67:4f:d0:d4:93:72:ae:ea:67:bd:5b:fc:8a: 6e:ec:9d:d6:b6:f5:13:ad:f5:8e:e9:2d:a4:15:04:bf:da:1e: f5:dc:ce:fe:e5:f6:e5:cc:07:8a:99:ca:dc:59:e6:34:59:f8: b7:ea:a6:03:77:0c:09:bd:d1:d4:23:fc:b7:8e:7d:94:47:63: 33:cd:a6:af:a9:6e:d3:24:f4:55:02:ac:96:68:c4:1f:e0:c6: ab:b2:a2:0c:07:ca:10:c0:23:52:ea:f1:58:e1:e2:57:89:10: 4a:57:80:6c:07:90:f9:81:41:67:f5:e8:be:07:f2:74:79:75: a7:9a:d2:9a:bb:e8:d2:8b:f6:85:d8:99:9b:30:13:b1:00:26: 2d:08:1d:93:a9:92:db:c7:4b:9c:23:08:3c:3d:5e:73:ea:33: 31:07:6c:6b:4d:f8:7c:65:13:0c:7c:2b:a2:a2:5f:01:41:94: 6e:30:a8:43:66:be:3a:6a:b1:18:6b:d4:4e:49:8f:50:94:98: 78:13:55:23:49:b6:f8:9d:46:75:24:14:56:ff:33:97:4c:5f: 3e:63:fb:c4:eb:7a:15:ef:62:f9:f6:b6:d3:27:55:ee:81:ae: 33:28:b6:d9:45:33:97:55:ab:f7:3c:4a:97:8e:72:55:cf:e0: 4f:c9:f2:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V04W+Whb0TF8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MjJlNDQ3MDctYmVhYi00ODQ1LWE5YjgtYzA2MTY4ZTIyNGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9IgKk0VuxrG/kt1AsDZ6RFZBME0CTYLAT9G fhfk6/YE/PFYMANrYfsXSAWqJR0FZQB4h9AcCSCRVn0aIFf2jyQ6FH95i45n17V5 kR9r7Rny934aQSR1HWujlN4jtjOwDa6nBccgVcO/KF/qACdIOk/m77J0cbQYPz3V ae+cF0lB2GAW4N+oMzmGTfS5EkAcZ+LRCfBdhql1+A4EAKBTMbxplNnajup44gJU gwAWKfo+c641DkagjPGQcLy0fW+i25KvalP2l/FE8zIBh4hiywwL3pYEEDhLxH8E XQ54xUqvUHfi1z8Df6bHd/OZlnMxJaeBW+/OvmUZjuYqa/8kVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLOANMnRYiVaS0QsWYYw+mf1RsVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjlkNmNjYjEtMDUzOS0z ODU2LWIzNTItYjE0NTk0NGFlZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACheXIx5Z0/Q1JNyrupnvVv8im7snda29ROt9Y7pLaQVBL/aHvXc zv7l9uXMB4qZytxZ5jRZ+LfqpgN3DAm90dQj/LeOfZRHYzPNpq+pbtMk9FUCrJZo xB/gxquyogwHyhDAI1Lq8Vjh4leJEEpXgGwHkPmBQWf16L4H8nR5daea0pq76NKL 9oXYmZswE7EAJi0IHZOpktvHS5wjCDw9XnPqMzEHbGtN+HxlEwx8K6KiXwFBlG4w qENmvjpqsRhr1E5Jj1CUmHgTVSNJtvidRnUkFFb/M5dMXz5j+8TrehXvYvn2ttMn Ve6BrjMottlFM5dVq/c8SpeOclXP4E/J8hA= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:05 2025 by rpki-client