$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0320cbe9-d834-3034-9895-9940d4d9f0db.roa File: 0320cbe9-d834-3034-9895-9940d4d9f0db.roa (raw, json) Hash identifier: EuiL+E3q2CfchEXWS8jMRM5LjIO3tZYEdenq6Gq8UgM= Subject key identifier: 58:33:F7:69:B2:D4:2D:7B:5E:86:3B:47:4F:1E:EB:53:26:36:E4:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E5E7803265139C768D70 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0320cbe9-d834-3034-9895-9940d4d9f0db.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396570 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e5:e7:80:32:65:13:9c:76:8d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=55c947a1-f3af-4723-90ac-423a1291b5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:e6:1e:f0:4f:3f:d0:40:a8:85:88:15:b2: fb:b5:ab:7f:54:04:b8:91:bc:6c:4d:35:01:6a:8f: 24:20:73:e6:3b:05:89:bd:92:9c:0f:d9:fc:49:6c: 6f:bf:16:1b:97:04:42:fd:91:82:c8:ba:9f:42:40: c5:df:c1:b2:ac:b4:93:e2:9e:5d:71:f9:55:68:58: ee:cc:2a:0f:c5:02:0c:48:c0:4d:29:32:87:e5:53: 51:3c:85:14:85:f5:04:72:c3:85:ec:67:0e:ab:87: 1e:03:54:c1:6a:f1:b8:d6:06:c1:9c:23:f9:d2:76: fe:08:4c:97:ad:6a:22:a3:57:0c:92:f1:5c:5e:e4: 8c:17:ed:78:3f:61:46:fc:cb:56:f6:16:6e:fd:2e: 0e:d3:c9:1d:f0:ff:96:a3:27:c9:15:e9:11:d3:7b: 01:be:14:8e:b7:08:0b:fb:16:76:32:b0:8d:f3:61: b9:35:5f:26:77:cc:d5:9c:ca:76:16:43:92:35:c5: ec:8e:11:5a:a2:f3:1c:b3:10:a6:bf:a2:a3:f3:13: fd:0b:bc:d0:5d:ce:96:a0:15:f2:4b:dc:83:17:fc: d9:29:3d:00:6f:69:68:fc:1e:e7:47:c7:9a:02:4d: aa:e8:80:3f:69:2f:59:aa:01:9b:10:57:48:08:ec: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:33:F7:69:B2:D4:2D:7B:5E:86:3B:47:4F:1E:EB:53:26:36:E4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0320cbe9-d834-3034-9895-9940d4d9f0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:dc:b8:89:92:3d:85:95:98:71:5b:81:4a:5f:61:02:5e:f1: db:90:98:cd:12:78:91:11:15:a4:7b:14:00:dd:5a:b4:b0:c3: 2f:b8:96:9d:63:e2:94:76:09:cb:9f:49:5a:a5:d6:05:7e:a5: 16:e8:18:60:93:46:e5:39:11:29:85:bd:81:af:94:7a:7f:d7: 66:71:16:8b:ed:58:1f:67:15:cd:7f:62:d6:2a:d7:ca:ad:ac: 56:18:19:d0:ca:28:6b:23:47:e1:6b:3c:9d:2b:9e:1d:82:d1: 8d:05:b0:ed:c3:5e:b7:e2:bc:bd:c1:14:09:8c:16:c9:66:43: c8:fb:11:c0:63:64:a2:47:e3:c3:df:46:9e:61:79:6f:a6:d6: b5:16:78:35:38:9b:5a:f2:dc:6d:54:bd:b5:c2:53:ab:ff:f2: 30:34:fd:4a:54:90:d3:81:a0:01:d7:cd:34:44:be:91:be:dc: 5b:36:f9:80:8f:3e:6e:0d:26:46:3f:9a:a8:1c:c1:fa:cb:7d: 67:17:7f:13:11:17:52:aa:e5:a5:e0:04:ff:80:1c:69:c6:5d: 23:33:57:8f:d8:8f:fd:45:a0:47:db:d9:65:a3:c2:eb:04:30: 23:72:db:e3:d9:9a:4e:d8:f3:69:bf:90:96:58:96:19:1f:ee: cd:40:1b:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJeXngDJlE5x2jXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTVjOTQ3YTEtZjNhZi00NzIzLTkwYWMtNDIzYTEyOTFiNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fPmHvBPP9BAqIWIFbL7tat/VAS4kbxsTTUB ao8kIHPmOwWJvZKcD9n8SWxvvxYblwRC/ZGCyLqfQkDF38GyrLST4p5dcflVaFju zCoPxQIMSMBNKTKH5VNRPIUUhfUEcsOF7GcOq4ceA1TBavG41gbBnCP50nb+CEyX rWoio1cMkvFcXuSMF+14P2FG/MtW9hZu/S4O08kd8P+WoyfJFekR03sBvhSOtwgL +xZ2MrCN82G5NV8md8zVnMp2FkOSNcXsjhFaovMcsxCmv6Kj8xP9C7zQXc6WoBXy S9yDF/zZKT0Ab2lo/B7nR8eaAk2q6IA/aS9ZqgGbEFdICOxYvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgz92my1C17XoY7R08e61MmNuQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDMyMGNiZTktZDgzNC0z MDM0LTk4OTUtOTk0MGQ0ZDlmMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrcuImSPYWVmHFbgUpfYQJe8duQmM0SeJERFaR7FADdWrSwwy+4 lp1j4pR2CcufSVql1gV+pRboGGCTRuU5ESmFvYGvlHp/12ZxFovtWB9nFc1/YtYq 18qtrFYYGdDKKGsjR+FrPJ0rnh2C0Y0FsO3DXrfivL3BFAmMFslmQ8j7EcBjZKJH 48PfRp5heW+m1rUWeDU4m1ry3G1UvbXCU6v/8jA0/UpUkNOBoAHXzTREvpG+3Fs2 +YCPPm4NJkY/mqgcwfrLfWcXfxMRF1Kq5aXgBP+AHGnGXSMzV4/Yj/1FoEfb2WWj wusEMCNy2+PZmk7Y82m/kJZYlhkf7s1AG6c= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:37 2025 by rpki-client