$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa File: 1487c29f-5570-325d-82af-e15061a6002b.roa (raw, json) Hash identifier: XMCOP37D0J+w6DZsNUsyjMymxfPkfbD24j7homnYjbw= Subject key identifier: 98:BD:79:16:92:A1:5E:5E:A1:5B:E6:7C:8B:E6:AA:33:34:BC:66:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146331E0F87C38796B81B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397195 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:33:1e:0f:87:c3:87:96:b8:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=5a138d68-87d0-4e62-9c96-b519f9e44d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:12:84:4c:c0:6f:f4:0d:aa:ed:bf:5e:60: de:37:62:f2:02:3f:e7:d5:f0:59:13:66:cf:1b:91: 4b:4e:21:52:50:83:b8:94:b2:19:ba:09:f0:7e:fe: a5:c6:26:a2:b4:49:ce:62:9c:90:b5:1a:1d:4c:4c: c2:91:9f:55:cf:9d:2e:f2:37:41:9f:4c:5d:61:d6: fe:fb:e8:60:c2:02:9a:99:af:18:f6:af:65:6d:86: f3:aa:12:50:be:a1:de:c1:ca:c6:6d:60:6d:f6:03: 3b:02:1f:18:be:3a:17:63:b0:34:03:1a:01:6b:18: 58:cf:91:62:be:66:8f:f7:bf:17:9e:b7:41:c9:e7: a4:74:fb:ca:5c:2f:64:dc:46:df:5c:23:c2:f6:49: c4:51:78:72:e5:24:8e:09:ba:52:e4:3c:ca:53:f0: 0c:2a:46:a9:88:3d:01:bf:b2:12:c1:ae:86:de:00: fa:4b:b2:15:7d:03:6f:15:07:84:69:a0:e5:fb:91: 70:77:e6:d3:c3:12:7c:46:55:b7:da:00:c4:88:5a: df:b4:35:dd:e4:f4:9d:f1:c2:6c:5e:07:de:55:d2: 36:02:ad:eb:52:98:bc:f7:32:63:7c:a1:cb:73:e3: 59:76:7c:0c:04:a2:e8:aa:98:6f:16:cd:c0:f0:15: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BD:79:16:92:A1:5E:5E:A1:5B:E6:7C:8B:E6:AA:33:34:BC:66:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:88:c8:a2:06:f7:53:9f:4b:db:a3:20:d0:ab:ec:8b:a9:3c: ca:5c:55:44:dc:83:58:03:fc:29:2b:8d:35:5b:7e:5f:b5:5e: db:28:90:b6:60:0a:52:5a:d6:1a:5c:38:fb:5d:21:99:b1:6e: 8c:1f:97:38:0d:2a:59:c5:b4:4b:54:70:ae:12:d7:70:ae:fa: 7d:6e:a1:0f:69:9e:e1:3f:39:a1:5d:cc:c5:1a:54:68:be:34: f6:6c:07:e7:fe:ba:99:29:e2:0e:33:58:85:ac:79:17:7a:1e: 59:b1:48:d0:06:ba:b3:f1:4c:51:30:97:d0:05:97:a5:9e:5e: d1:32:d1:1a:ac:f1:19:26:9b:c0:61:34:26:80:ac:4d:83:0c: b6:92:4f:55:a6:1c:6e:59:3e:27:42:de:35:3f:dc:72:ae:56: 81:7a:b8:8e:d1:af:7e:b5:64:70:53:1b:b4:6b:d4:70:4f:7e: bd:d8:b0:53:66:48:54:4f:86:d6:a6:1b:07:f1:50:f6:8d:27: 85:e9:75:d3:30:5f:22:29:ef:06:5d:6e:d8:de:f8:ee:2e:3d: cc:66:f1:f8:09:7c:68:db:9a:8d:e4:d5:b9:91:d8:48:27:a4: 63:e5:83:1c:0d:58:0a:ba:53:fb:b4:7f:ef:2a:03:14:e1:8e: fa:a1:9b:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjMeD4fDh5a4G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NWExMzhkNjgtODdkMC00ZTYyLTljOTYtYjUxOWY5ZTQ0ZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFkShEzAb/QNqu2/XmDeN2LyAj/n1fBZE2bP G5FLTiFSUIO4lLIZugnwfv6lxiaitEnOYpyQtRodTEzCkZ9Vz50u8jdBn0xdYdb+ ++hgwgKama8Y9q9lbYbzqhJQvqHewcrGbWBt9gM7Ah8YvjoXY7A0AxoBaxhYz5Fi vmaP978XnrdByeekdPvKXC9k3EbfXCPC9knEUXhy5SSOCbpS5DzKU/AMKkapiD0B v7ISwa6G3gD6S7IVfQNvFQeEaaDl+5Fwd+bTwxJ8RlW32gDEiFrftDXd5PSd8cJs XgfeVdI2Aq3rUpi89zJjfKHLc+NZdnwMBKLoqphvFs3A8BU68wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJi9eRaSoV5eoVvmfIvmqjM0vGYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQ4N2MyOWYtNTU3MC0z MjVkLTgyYWYtZTE1MDYxYTYwMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeIyKIG91OfS9ujINCr7IupPMpcVUTcg1gD/CkrjTVbfl+1Xtso kLZgClJa1hpcOPtdIZmxbowflzgNKlnFtEtUcK4S13Cu+n1uoQ9pnuE/OaFdzMUa VGi+NPZsB+f+upkp4g4zWIWseRd6HlmxSNAGurPxTFEwl9AFl6WeXtEy0Rqs8Rkm m8BhNCaArE2DDLaST1WmHG5ZPidC3jU/3HKuVoF6uI7Rr361ZHBTG7Rr1HBPfr3Y sFNmSFRPhtamGwfxUPaNJ4XpddMwXyIp7wZdbtje+O4uPcxm8fgJfGjbmo3k1bmR 2EgnpGPlgxwNWAq6U/u0f+8qAxThjvqhmxs= -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:01 2025 by rpki-client