$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa File: 086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa (raw, json) Hash identifier: MO5yRbU2CMF0iu0V5zfTPxKfI8g5Leyoao84J1BoHAU= Subject key identifier: 11:60:78:B7:56:D6:D8:7F:5D:1E:7A:73:BD:87:9F:4A:7A:FA:AA:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814633B91692AFC809704C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36632 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:33:b9:16:92:af:c8:09:70:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=3031c2dc-7332-4c16-808f-b27716d7dce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:39:a0:a8:7e:38:6b:f7:23:ce:b8:e1:c7: e9:b3:82:92:e5:d1:1a:8e:be:63:d8:8d:a9:c5:a0: 70:74:14:9f:37:96:ed:b0:77:69:60:82:e5:22:a2: fa:95:17:7e:f1:3b:b3:84:14:d4:f6:5d:8e:48:52: a6:07:ca:2f:b3:89:50:80:f3:56:3d:eb:0a:e3:b3: 24:d3:20:2f:41:70:8f:e8:2a:06:84:4a:6d:92:5a: 1d:32:c7:82:32:2c:54:a4:27:c4:d4:aa:5e:fb:53: f4:cb:60:ab:d0:26:ec:72:fd:f3:66:e5:39:25:60: 6c:b5:11:92:36:37:28:ab:ea:69:3a:49:a8:ed:4a: 91:86:0f:63:fc:59:2c:88:29:58:ac:f5:76:8c:09: 04:a2:2a:77:fc:c8:f1:9a:f6:ac:0b:bf:b4:07:70: 87:01:82:7c:74:86:ed:b2:91:c7:01:a8:78:fd:fa: 63:a8:a6:64:4c:1e:c3:5f:bd:d6:aa:66:13:12:cf: 12:2e:05:29:d5:54:c4:4a:98:40:26:22:74:56:d8: c6:f4:95:39:a3:dc:2b:97:ac:4d:b0:82:18:36:29: cf:1b:27:a8:a2:91:c4:0f:29:76:93:a0:25:e8:97: 4a:48:2d:7a:48:55:a0:29:f6:ce:5d:15:50:73:ac: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:60:78:B7:56:D6:D8:7F:5D:1E:7A:73:BD:87:9F:4A:7A:FA:AA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2b:07:46:b7:98:7f:e4:55:3b:21:d6:17:46:3b:9e:93:2c: 9f:d7:66:7e:9c:3f:b5:22:5d:6a:db:9f:a0:14:22:c3:55:2e: f6:d7:98:f4:8b:3b:60:f4:b3:4a:31:df:89:37:77:8e:1d:a8: 9a:85:4f:71:df:0a:60:5b:7e:07:43:2c:67:11:22:da:9d:7f: 60:c0:0c:6d:c1:a8:16:82:c4:8d:ad:5b:85:cd:2f:c5:18:b1: 33:95:63:1b:1e:bd:57:a1:e3:cb:60:40:66:48:e7:48:c7:c5: bb:58:ea:30:69:0d:e1:29:03:81:a3:2b:5a:ee:f8:57:be:e8: 13:dd:77:f6:18:33:70:d0:b0:c4:49:b6:09:f8:fe:2a:78:a6: d8:63:f2:5b:b4:4d:6a:50:77:75:eb:b0:e2:2f:c8:a1:a2:e4: 02:82:e0:41:c3:7b:27:53:de:60:c8:e9:2c:5e:7a:47:a5:00: f7:bb:9e:f1:91:2c:5a:48:29:1e:33:fa:9f:b6:11:fb:f0:63: df:9b:1e:4c:10:83:74:cd:90:20:70:03:32:7d:37:cf:f0:1c: 63:5e:5b:e4:f7:1b:4e:f8:bd:9b:3a:71:a9:84:41:34:d7:0c: 77:f6:da:48:24:0e:b3:70:b6:cf:9e:3d:ee:6e:bd:6a:fc:d4: d7:81:4a:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjO5FpKvyAlwTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzAzMWMyZGMtNzMzMi00YzE2LTgwOGYtYjI3NzE2ZDdkY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbg5oKh+OGv3I8644cfps4KS5dEajr5j2I2p xaBwdBSfN5btsHdpYILlIqL6lRd+8TuzhBTU9l2OSFKmB8ovs4lQgPNWPesK47Mk 0yAvQXCP6CoGhEptklodMseCMixUpCfE1Kpe+1P0y2Cr0Cbscv3zZuU5JWBstRGS Njcoq+ppOkmo7UqRhg9j/FksiClYrPV2jAkEoip3/MjxmvasC7+0B3CHAYJ8dIbt spHHAah4/fpjqKZkTB7DX73WqmYTEs8SLgUp1VTESphAJiJ0VtjG9JU5o9wrl6xN sIIYNinPGyeoopHEDyl2k6Al6JdKSC16SFWgKfbOXRVQc6xqtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFgeLdW1th/XR56c72Hn0p6+qoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg2OTk4YTItMjFiZi0z OGUyLTlkMGUtZWYzYWNiZjg3ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0rB0a3mH/kVTsh1hdGO56TLJ/XZn6cP7UiXWrbn6AUIsNVLvbX mPSLO2D0s0ox34k3d44dqJqFT3HfCmBbfgdDLGcRItqdf2DADG3BqBaCxI2tW4XN L8UYsTOVYxsevVeh48tgQGZI50jHxbtY6jBpDeEpA4GjK1ru+Fe+6BPdd/YYM3DQ sMRJtgn4/ip4pthj8lu0TWpQd3XrsOIvyKGi5AKC4EHDeydT3mDI6SxeekelAPe7 nvGRLFpIKR4z+p+2EfvwY9+bHkwQg3TNkCBwAzJ9N8/wHGNeW+T3G074vZs6camE QTTXDHf22kgkDrNwts+ePe5uvWr81NeBSk0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:14 2025 by rpki-client