$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa File: 0859e3de-d7bd-3f51-b107-036347946467.roa (raw, json) Hash identifier: 5irmRLCysh+d5kHDfrSUlN019vmj95Xub9tBM/MgMFI= Subject key identifier: 54:FF:FC:48:67:B3:B7:E6:EB:B4:26:2A:B5:6F:79:00:F2:57:D4:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F0580EB1E47FF679DA74 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396602 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f0:58:0e:b1:e4:7f:f6:79:da:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=d8441a7a-3f38-4940-97b1-a56fe8ea215f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:1e:b4:6d:f6:ee:2d:7f:13:24:57:b9:0f: 5c:db:ac:cf:d9:f6:fc:73:c8:de:39:6c:a4:36:03: 6e:a4:51:4c:78:4d:7d:ce:d7:48:1d:20:bd:e7:5e: 16:c1:75:e8:1c:7f:fc:9b:d8:af:d5:47:4f:f9:cb: 84:c1:51:c3:67:60:9e:7a:40:1d:83:39:c5:c9:80: d5:44:c5:cb:3b:57:01:0e:01:7b:6c:29:44:fc:dc: d9:b5:cc:36:ba:cc:50:d6:3a:7d:46:3b:ae:8b:6d: 1a:2e:13:64:98:97:24:93:41:97:fe:c3:ea:5e:81: d0:27:9b:35:28:dc:4f:e9:01:7e:18:d1:31:92:32: 4d:10:c4:57:9c:b1:5d:35:4e:42:99:c4:94:2a:da: 1e:e5:72:88:6d:fc:41:c7:04:cf:2f:cc:73:a9:61: ca:51:2d:56:c6:5f:c3:94:36:81:0f:5e:c2:6d:e8: b1:49:bb:22:d8:1f:50:97:c5:3d:8c:71:07:da:06: 94:b7:97:9b:3e:5a:52:c4:0e:97:bf:eb:0f:c0:92: 55:16:1d:a6:ff:e0:46:bb:f9:a5:a5:56:27:b7:89: e6:82:1e:27:f8:7c:e8:87:89:3f:24:d5:03:16:fe: 2a:17:7f:30:71:6a:b6:b3:95:b3:d1:61:4e:66:71: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FF:FC:48:67:B3:B7:E6:EB:B4:26:2A:B5:6F:79:00:F2:57:D4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:54:54:17:7d:f0:b5:0d:ff:47:ff:9e:7d:5a:b0:d6:27:ca: 2a:b2:6b:64:e7:ef:b1:ce:dd:60:e3:ae:49:ca:07:5e:89:99: 02:c7:bd:7d:d5:7b:33:73:09:d3:d1:2d:56:6a:c6:d7:e8:78: 3a:f2:55:64:89:e0:cd:d9:7b:6d:e6:83:da:94:52:c3:f1:da: 1e:ba:7c:e4:3b:0d:22:85:c0:05:30:ac:12:7f:89:13:f9:1b: 6a:23:ab:69:2c:aa:45:f3:d1:9d:d6:30:44:36:1e:1f:95:b4: 4e:f0:16:66:2f:af:65:7d:c3:66:75:b3:2f:da:4b:be:7c:52: 0c:84:83:48:1c:9b:c0:83:1a:25:7b:c4:f8:0a:35:e0:6b:b4: 5e:6c:9e:ac:41:89:c6:35:4d:63:09:34:fd:9b:b3:3f:69:b6: 24:18:bd:82:df:11:66:a7:60:47:d2:38:39:fe:9e:43:5d:9b: 72:21:51:6c:dd:d0:55:19:43:8b:11:08:91:b7:30:32:8b:9d: d0:71:e0:13:4f:67:b0:f2:ee:5e:8b:e2:83:af:76:68:e2:32: 75:86:a6:c6:65:41:7c:b3:3b:cd:e7:65:e5:e5:f4:66:79:e0: f0:e4:a0:d2:af:f6:20:56:ec:ee:45:9a:6e:de:9d:ec:3e:80: ff:9c:b8:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfBYDrHkf/Z52nQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZDg0NDFhN2EtM2YzOC00OTQwLTk3YjEtYTU2ZmU4ZWEyMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNAetG327i1/EyRXuQ9c26zP2fb8c8jeOWyk NgNupFFMeE19ztdIHSC9514WwXXoHH/8m9iv1UdP+cuEwVHDZ2CeekAdgznFyYDV RMXLO1cBDgF7bClE/NzZtcw2usxQ1jp9Rjuui20aLhNkmJckk0GX/sPqXoHQJ5s1 KNxP6QF+GNExkjJNEMRXnLFdNU5CmcSUKtoe5XKIbfxBxwTPL8xzqWHKUS1Wxl/D lDaBD17CbeixSbsi2B9Ql8U9jHEH2gaUt5ebPlpSxA6Xv+sPwJJVFh2m/+BGu/ml pVYnt4nmgh4n+Hzoh4k/JNUDFv4qF38wcWq2s5Wz0WFOZnEh5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFT//Ehns7fm67QmKrVveQDyV9TMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg1OWUzZGUtZDdiZC0z ZjUxLWIxMDctMDM2MzQ3OTQ2NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA9UVBd98LUN/0f/nn1asNYnyiqya2Tn77HO3WDjrknKB16JmQLH vX3VezNzCdPRLVZqxtfoeDryVWSJ4M3Ze23mg9qUUsPx2h66fOQ7DSKFwAUwrBJ/ iRP5G2ojq2ksqkXz0Z3WMEQ2Hh+VtE7wFmYvr2V9w2Z1sy/aS758UgyEg0gcm8CD GiV7xPgKNeBrtF5snqxBicY1TWMJNP2bsz9ptiQYvYLfEWanYEfSODn+nkNdm3Ih UWzd0FUZQ4sRCJG3MDKLndBx4BNPZ7Dy7l6L4oOvdmjiMnWGpsZlQXyzO83nZeXl 9GZ54PDkoNKv9iBW7O5Fmm7enew+gP+cuCs= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:46 2025 by rpki-client