$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afe0861-e80d-3103-9a48-663680ed8ed8.roa File: 0afe0861-e80d-3103-9a48-663680ed8ed8.roa (raw, json) Hash identifier: kiEyhxdDAjJuAYUWx6Mwb6FFiRDP37s5m9CjSafehvY= Subject key identifier: 8B:8B:1F:9D:8D:E3:85:47:E7:2D:08:5B:CA:7E:CF:FB:CD:22:67:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E3F898F5B3FC8BE7DC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afe0861-e80d-3103-9a48-663680ed8ed8.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396576 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e3:f8:98:f5:b3:fc:8b:e7:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=402baa54-7d1a-4433-acdd-63f9875ebd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d1:31:db:0d:7e:ee:02:d1:64:ad:bc:75:31: 46:f5:84:37:71:50:aa:ad:9e:dd:67:37:bb:48:12: 54:07:6e:c5:4c:92:86:f8:99:8c:6b:29:ed:06:0a: 6a:fc:a7:99:8a:44:50:37:8e:bc:0d:16:b2:5e:74: 88:9e:70:a7:30:0e:46:d9:e4:89:47:8d:7a:01:65: 21:a2:29:e9:47:cd:bc:c2:11:62:1b:92:4c:87:ab: d6:34:b3:a0:d9:6f:25:f4:d2:c4:3f:5f:e0:7e:0a: 6b:05:72:02:e5:cb:09:a2:3a:f5:b7:f3:45:a4:8b: 65:0f:c8:13:ba:48:3a:f2:d6:d6:41:43:2b:6e:a8: 74:07:a1:46:a9:d0:52:38:40:bf:14:84:97:73:06: 9c:47:37:a7:be:f6:4b:f5:a2:a1:ad:ec:14:ce:67: ae:50:86:c5:05:0a:18:8b:3e:06:72:38:cf:7b:81: 38:37:24:cd:2c:20:86:70:23:60:d5:56:97:3c:c8: b7:f1:ad:1d:94:6c:8e:4b:6d:ed:ff:2f:7d:9d:59: cc:d4:fd:81:dc:4b:18:67:28:e6:95:44:98:c3:bb: c2:41:22:eb:33:6e:c3:8a:3b:9f:c7:56:37:85:6b: 60:43:71:47:0d:f9:d4:23:5f:e6:75:d6:b4:55:db: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8B:1F:9D:8D:E3:85:47:E7:2D:08:5B:CA:7E:CF:FB:CD:22:67:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afe0861-e80d-3103-9a48-663680ed8ed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:eb:14:be:87:b4:b2:21:aa:a2:71:ab:03:46:b3:85:c4:4e: ca:c3:d0:88:57:79:1e:31:ef:89:0a:cb:0f:a9:da:98:c1:07: dd:c7:63:f2:bf:cc:49:52:1c:c8:80:af:50:d2:8b:67:58:fa: 4e:4d:25:75:70:9a:74:bf:8a:38:d9:4a:a5:ce:45:7c:23:30: f6:38:22:32:db:13:4f:fb:ea:78:f3:1b:9f:88:8c:89:30:e3: 35:df:98:36:e4:82:5d:cd:a5:0c:c8:e4:34:48:00:c6:d1:f3: 67:f4:6d:6d:5d:16:30:d9:36:d7:1e:44:9c:87:20:1c:54:00: 60:36:de:85:dd:9e:9b:c5:92:54:6c:a6:e5:2e:e8:42:ad:46: 96:36:18:f9:03:1b:eb:cf:ab:50:40:4a:87:93:60:20:51:d0: 78:21:ab:7c:b7:5b:b7:7f:f8:81:9b:2c:26:2e:1b:06:8e:ce: 0b:c7:ee:99:e4:35:4f:b7:66:77:44:37:07:e5:2f:98:4f:c7: 70:2f:32:74:db:e5:9d:0b:02:cb:02:ee:ba:47:de:3b:71:e1: 0a:4a:18:ce:0e:77:b0:60:4c:d0:7a:f8:eb:9e:49:fc:28:6a: 34:4e:74:89:02:31:8d:7b:0c:e3:39:ac:c4:70:fc:ec:32:b8: b5:bb:11:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJeP4mPWz/Ivn3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NDAyYmFhNTQtN2QxYS00NDMzLWFjZGQtNjNmOTg3NWViZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNEx2w1+7gLRZK28dTFG9YQ3cVCqrZ7dZze7 SBJUB27FTJKG+JmMayntBgpq/KeZikRQN468DRayXnSInnCnMA5G2eSJR416AWUh oinpR828whFiG5JMh6vWNLOg2W8l9NLEP1/gfgprBXIC5csJojr1t/NFpItlD8gT ukg68tbWQUMrbqh0B6FGqdBSOEC/FISXcwacRzenvvZL9aKhrewUzmeuUIbFBQoY iz4GcjjPe4E4NyTNLCCGcCNg1VaXPMi38a0dlGyOS23t/y99nVnM1P2B3EsYZyjm lUSYw7vCQSLrM27Dijufx1Y3hWtgQ3FHDfnUI1/mdda0VdsPMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIuLH52N44VH5y0IW8p+z/vNImdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFmZTA4NjEtZTgwZC0z MTAzLTlhNDgtNjYzNjgwZWQ4ZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXrFL6HtLIhqqJxqwNGs4XETsrD0IhXeR4x74kKyw+p2pjBB93H Y/K/zElSHMiAr1DSi2dY+k5NJXVwmnS/ijjZSqXORXwjMPY4IjLbE0/76njzG5+I jIkw4zXfmDbkgl3NpQzI5DRIAMbR82f0bW1dFjDZNtceRJyHIBxUAGA23oXdnpvF klRspuUu6EKtRpY2GPkDG+vPq1BASoeTYCBR0Hghq3y3W7d/+IGbLCYuGwaOzgvH 7pnkNU+3ZndENwflL5hPx3AvMnTb5Z0LAssC7rpH3jtx4QpKGM4Od7BgTNB6+Oue SfwoajROdIkCMY17DOM5rMRw/OwyuLW7EYo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:17 2025 by rpki-client