$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13822283-0f99-3522-81ce-988e5f338068.roa File: 13822283-0f99-3522-81ce-988e5f338068.roa (raw, json) Hash identifier: 3DhQ+2l8AIcTIx/X2Pbd95rF4aQWecF8+c3gy/0RD2k= Subject key identifier: 44:8A:6D:9C:8C:FB:90:3D:B8:E2:6A:F3:15:17:AF:CB:D0:14:48:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463876E3A3EEE497824600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13822283-0f99-3522-81ce-988e5f338068.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396590 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:38:76:e3:a3:ee:e4:97:82:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=35b9d070-10a1-4e79-be4d-64ec367d9e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:89:d3:bb:a1:7e:66:7a:80:87:ee:b4:13: d9:7b:ae:47:74:6c:c1:2b:ea:0c:07:0c:45:88:9f: 77:e6:f9:ab:6d:c7:88:62:18:20:a2:d1:76:4c:0f: c8:d7:1f:82:29:c3:2c:89:27:b3:53:bc:20:42:50: 1a:f5:5d:f3:6a:e4:2d:16:c5:73:66:1e:b3:2f:ff: 4b:b1:9b:10:8e:c0:98:8f:b1:6f:f7:22:58:de:a9: ad:4f:00:cf:f9:d6:46:ef:c1:93:2a:4e:54:14:22: 50:8b:92:19:c6:d7:19:45:03:9b:17:61:0b:08:55: 69:8d:dc:b2:0d:f8:b5:3a:54:91:05:4b:89:98:62: a7:c1:4c:23:00:8a:b0:11:61:53:94:06:5c:69:2a: 38:aa:4f:95:92:2f:21:e0:f7:d8:96:ec:18:2e:29: 52:ee:d8:77:63:ba:a0:d3:57:ae:7f:a1:82:36:c5: e0:4b:a1:74:26:a6:72:6a:f7:86:20:5d:35:60:93: 96:47:f5:1d:27:f0:19:05:ff:6e:b4:36:4f:a3:04: c0:91:9d:22:7d:d7:9e:58:08:75:e0:74:4e:90:42: 35:a0:5c:15:82:44:6a:c1:fd:82:eb:8c:56:6d:1b: 32:3f:ec:21:d4:1c:95:2f:c6:0c:e2:0f:54:36:25: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8A:6D:9C:8C:FB:90:3D:B8:E2:6A:F3:15:17:AF:CB:D0:14:48:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13822283-0f99-3522-81ce-988e5f338068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7b:8e:a1:6a:e2:d8:fc:9b:2e:4d:28:2e:9e:23:07:ce:39: 07:f7:74:50:6d:5c:5a:bd:d6:39:df:32:77:90:46:0f:01:0b: 2c:5f:e1:0b:29:a3:5c:d5:32:cf:48:ff:2b:4b:f1:12:d2:13: 88:bc:29:d3:2f:8c:f4:d5:d9:13:09:c2:5c:74:9c:51:dd:66: 4f:dc:17:05:53:35:8e:4e:3c:42:18:c2:6c:58:1a:75:ea:9e: fa:dc:de:dd:67:c7:87:c2:cc:12:c9:22:15:79:dc:e7:c3:7b: 78:66:3d:6e:ec:65:03:84:f5:48:36:5b:95:ed:eb:f5:15:67: 56:13:6a:58:47:6d:f6:30:e7:f6:f0:2d:56:44:1e:59:0e:fc: e0:75:a0:60:0d:bd:a4:95:c7:67:69:23:64:e8:7b:00:95:cc: 1a:fa:d5:62:af:32:fc:1f:26:f2:c4:74:26:10:27:85:12:53: 4e:2d:c4:b5:3d:c3:7f:04:d0:f1:92:ea:5a:f6:11:6c:6c:ce: 8a:18:b4:ca:26:2a:4e:47:25:09:01:07:c9:a0:89:4c:be:65: 48:b3:ab:dd:1a:77:17:cc:96:be:f8:da:28:2c:90:9f:20:00: 7d:5e:06:69:b1:07:9f:5a:8d:fd:02:67:1b:e2:64:63:dd:9c: c9:b3:60:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjh246Pu5JeCRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzViOWQwNzAtMTBhMS00ZTc5LWJlNGQtNjRlYzM2N2Q5ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp2J07uhfmZ6gIfutBPZe65HdGzBK+oMBwxF iJ935vmrbceIYhggotF2TA/I1x+CKcMsiSezU7wgQlAa9V3zauQtFsVzZh6zL/9L sZsQjsCYj7Fv9yJY3qmtTwDP+dZG78GTKk5UFCJQi5IZxtcZRQObF2ELCFVpjdyy Dfi1OlSRBUuJmGKnwUwjAIqwEWFTlAZcaSo4qk+Vki8h4PfYluwYLilS7th3Y7qg 01euf6GCNsXgS6F0JqZyaveGIF01YJOWR/UdJ/AZBf9utDZPowTAkZ0ifdeeWAh1 4HROkEI1oFwVgkRqwf2C64xWbRsyP+wh1ByVL8YM4g9UNiWi7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFESKbZyM+5A9uOJq8xUXr8vQFEg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTM4MjIyODMtMGY5OS0z NTIyLTgxY2UtOTg4ZTVmMzM4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGl7jqFq4tj8my5NKC6eIwfOOQf3dFBtXFq91jnfMneQRg8BCyxf 4Qspo1zVMs9I/ytL8RLSE4i8KdMvjPTV2RMJwlx0nFHdZk/cFwVTNY5OPEIYwmxY GnXqnvrc3t1nx4fCzBLJIhV53OfDe3hmPW7sZQOE9Ug2W5Xt6/UVZ1YTalhHbfYw 5/bwLVZEHlkO/OB1oGANvaSVx2dpI2ToewCVzBr61WKvMvwfJvLEdCYQJ4USU04t xLU9w38E0PGS6lr2EWxszooYtMomKk5HJQkBB8mgiUy+ZUizq90adxfMlr742igs kJ8gAH1eBmmxB59ajf0CZxviZGPdnMmzYLY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:48:28 2025 by rpki-client