$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa File: 1ae757c2-fd54-34e5-b835-c80962e8a054.roa (raw, json) Hash identifier: lvpAkxxT3yuBcEW/3GXibyrK0xRvozTviJ1PJ8bOvf8= Subject key identifier: 46:AE:AC:1C:65:B8:1F:58:83:7D:48:43:8C:43:36:B9:28:5E:05:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463481AB131191BBC0FCC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 10515 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:34:81:ab:13:11:91:bb:c0:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=19a27f02-7c1d-4383-bcfe-7a486100e8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:73:0e:02:60:b4:3c:75:e3:49:97:40:7f:c5: 4d:80:0a:fa:13:85:7b:4b:a9:90:6c:68:fa:9e:72: 5d:5b:dd:47:85:07:87:41:d1:64:c9:2e:ac:c9:1b: 0f:05:bb:1c:f0:82:db:3a:7e:ee:c8:9f:11:2c:e4: 34:4d:01:ee:99:f3:c7:cc:5f:d5:75:ee:20:f6:dd: 3c:01:92:14:ba:24:00:c1:6d:27:70:91:6a:10:66: 66:7c:74:fa:76:93:86:eb:23:b5:09:45:f5:7d:18: f2:32:61:79:13:5b:70:29:fc:65:f9:3b:c7:a1:bc: 95:22:94:14:49:d4:02:57:97:87:46:a6:5f:a4:e8: d7:a2:6a:9a:6c:7f:17:74:5a:38:6b:56:ff:a3:aa: e8:02:13:d9:8d:91:4b:bb:73:ce:b7:a3:56:8c:ea: e3:0f:55:59:3f:21:27:36:2d:bd:6a:ae:db:d8:14: af:f2:6e:2b:4f:eb:b2:d1:04:83:55:7f:84:7b:f7: a8:52:a1:ee:04:ae:ee:4a:6e:2c:23:e6:24:4d:f6: 0e:a2:e4:a5:7b:24:2c:35:a9:a7:1d:85:b6:a2:6e: 4f:1f:aa:ad:c3:36:16:95:01:3e:9e:1b:00:d4:64: 6d:e3:88:3d:56:ff:9e:1b:75:cf:0b:7f:d9:dc:dd: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:AC:1C:65:B8:1F:58:83:7D:48:43:8C:43:36:B9:28:5E:05:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d4:c0:36:23:b6:e6:e7:89:db:82:c5:e7:1c:36:a4:04:0d: 9e:90:84:89:1e:29:81:e6:2d:31:94:9c:c8:c9:18:5e:7e:dd: 0e:4a:c6:85:80:9e:02:7b:b6:7c:23:36:b3:e4:6b:a6:5a:dc: 23:f8:72:e7:1f:10:13:8d:4e:22:6f:a8:dc:39:ba:19:dc:37: 1e:be:42:72:63:6f:36:3c:b4:92:15:f8:91:91:25:79:ea:f9: 73:a1:20:ea:7e:cb:f9:79:05:96:6b:f0:f8:a2:a6:b4:8a:ab: 41:dc:17:ce:b3:3c:98:6f:63:a1:a8:99:c8:97:30:7f:65:e6: b5:da:a3:e1:32:92:52:d5:cc:02:0e:22:75:b8:39:9a:9c:ff: 3e:ca:53:e1:c7:40:e9:55:03:fa:58:47:e1:19:55:63:8f:99: 93:77:8a:cb:9d:11:7d:99:06:cc:c4:97:99:34:34:c2:56:dc: 78:19:c3:77:3a:c6:79:c8:76:6d:7d:d3:fe:19:4a:ef:95:82: 82:5a:c3:7b:45:91:1c:2c:c7:4a:e1:85:e6:5d:0e:b4:d7:0c: ec:52:1f:4b:f6:dd:d4:8f:90:4c:69:1c:ad:62:12:4a:64:29: 90:bc:e1:02:f1:b6:eb:d0:90:16:e1:b5:fc:07:1e:8d:24:de: b9:85:8c:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjSBqxMRkbvA/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MTlhMjdmMDItN2MxZC00MzgzLWJjZmUtN2E0ODYxMDBlOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinMOAmC0PHXjSZdAf8VNgAr6E4V7S6mQbGj6 nnJdW91HhQeHQdFkyS6syRsPBbsc8ILbOn7uyJ8RLOQ0TQHumfPHzF/Vde4g9t08 AZIUuiQAwW0ncJFqEGZmfHT6dpOG6yO1CUX1fRjyMmF5E1twKfxl+TvHobyVIpQU SdQCV5eHRqZfpOjXomqabH8XdFo4a1b/o6roAhPZjZFLu3POt6NWjOrjD1VZPyEn Ni29aq7b2BSv8m4rT+uy0QSDVX+Ee/eoUqHuBK7uSm4sI+YkTfYOouSleyQsNamn HYW2om5PH6qtwzYWlQE+nhsA1GRt44g9Vv+eG3XPC3/Z3N2huwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaurBxluB9Yg31IQ4xDNrkoXgU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFlNzU3YzItZmQ1NC0z NGU1LWI4MzUtYzgwOTYyZThhMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbUwDYjtubniduCxeccNqQEDZ6QhIkeKYHmLTGUnMjJGF5+3Q5K xoWAngJ7tnwjNrPka6Za3CP4cucfEBONTiJvqNw5uhncNx6+QnJjbzY8tJIV+JGR JXnq+XOhIOp+y/l5BZZr8PiiprSKq0HcF86zPJhvY6GomciXMH9l5rXao+EyklLV zAIOInW4OZqc/z7KU+HHQOlVA/pYR+EZVWOPmZN3isudEX2ZBszEl5k0NMJW3HgZ w3c6xnnIdm190/4ZSu+VgoJaw3tFkRwsx0rhheZdDrTXDOxSH0v23dSPkExpHK1i EkpkKZC84QLxtuvQkBbhtfwHHo0k3rmFjE0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:25 2025 by rpki-client