$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa File: 1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa (raw, json) Hash identifier: ZRoOgG0hw/haIQv4EkhFedr2NjDZHri9Akdj6BFrxKM= Subject key identifier: DA:EF:87:0C:B3:40:5A:43:8A:84:02:42:FB:58:C0:0B:5C:16:C2:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814637EC191F54E1587C4580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36619 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:ec:19:1f:54:e1:58:7c:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=1b5fb55f-76d5-42c7-9b0f-042e60ded935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:58:80:df:e7:f2:33:ff:8e:f9:2b:6b:eb:38: 82:f0:a1:f2:5c:6b:03:2d:de:76:97:ab:31:db:8d: d5:df:02:2f:87:c7:d8:3d:52:2d:89:c3:49:f7:d2: a0:14:e7:1c:55:c9:47:d7:ee:e6:7d:bc:c9:b3:9f: 87:55:e4:56:a8:9a:77:f3:55:8a:bd:e2:1f:90:b5: a6:d5:6f:d1:f5:db:07:1f:72:9e:d2:6e:29:55:c5: ef:f0:c5:58:ec:01:5c:15:9b:27:d8:31:04:5a:2f: b7:44:42:d5:75:a1:9b:91:1c:eb:27:49:cc:56:ff: a8:03:e5:f6:38:13:88:31:f5:8a:0b:fb:44:08:ca: ae:ba:46:85:a6:24:4c:b9:da:c4:33:36:2b:19:b9: 48:e4:cc:10:a8:93:6c:d1:79:54:6e:02:e2:f7:fc: fa:03:5b:17:3a:aa:78:75:55:68:36:6b:39:5a:d5: ab:f0:a2:2c:61:64:97:76:40:d5:ff:a1:0e:33:d8: 6e:3d:1d:e0:73:7a:30:c0:53:84:72:26:1f:d9:f9: ed:c3:5e:ba:72:a2:12:b6:14:e2:b5:99:11:a3:8a: 6e:58:cf:4c:eb:d8:73:02:6a:60:ff:d6:f4:20:91: b5:ed:c5:a6:21:0d:62:23:e4:90:87:d7:e6:e2:9e: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EF:87:0C:B3:40:5A:43:8A:84:02:42:FB:58:C0:0B:5C:16:C2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5d:32:45:ff:89:50:48:a5:71:2a:13:0c:b6:e9:14:2a:c6: 52:34:5c:81:43:12:92:8c:c6:e4:48:5d:1a:44:b3:52:89:fb: 7b:8e:7c:0a:df:49:3a:67:6e:89:e8:5d:86:bf:b8:d5:d5:dc: e3:35:be:3f:be:9f:cf:13:59:54:b1:65:bc:79:e3:84:13:d4: be:82:f4:29:de:ae:0a:9c:5a:0c:6e:9d:e6:2f:09:7d:5a:74: fb:e7:e4:94:c7:92:9f:05:08:ab:af:c4:d5:9f:e9:c1:ee:5e: 86:aa:55:51:a0:b1:20:ba:c6:54:9b:8f:bd:1f:d3:10:eb:b4: d3:3e:bc:3d:02:3b:03:6d:62:d6:82:ad:6a:13:7f:4e:42:fb: 9d:0d:33:04:8e:6c:7a:0c:57:1c:89:9b:42:fd:6b:45:ac:b4: 9d:eb:f6:50:ac:13:60:0d:54:21:88:30:db:8d:21:85:37:a4: f6:54:30:59:98:e7:88:ca:4e:58:5b:eb:85:d5:a7:15:45:92: 98:8e:5a:1d:a1:03:fc:a9:66:04:19:53:fb:c2:b9:d3:fd:21: 8a:b9:bf:01:35:02:cb:10:10:63:34:6a:ce:48:3a:dd:4d:f8: ff:f5:7d:a8:09:30:68:9f:5b:d6:af:cb:93:b5:37:f9:38:70: 39:33:ae:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjfsGR9U4Vh8RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MWI1ZmI1NWYtNzZkNS00MmM3LTliMGYtMDQyZTYwZGVkOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkViA3+fyM/+O+Str6ziC8KHyXGsDLd52l6sx 243V3wIvh8fYPVIticNJ99KgFOccVclH1+7mfbzJs5+HVeRWqJp381WKveIfkLWm 1W/R9dsHH3Ke0m4pVcXv8MVY7AFcFZsn2DEEWi+3RELVdaGbkRzrJ0nMVv+oA+X2 OBOIMfWKC/tECMquukaFpiRMudrEMzYrGblI5MwQqJNs0XlUbgLi9/z6A1sXOqp4 dVVoNms5WtWr8KIsYWSXdkDV/6EOM9huPR3gc3owwFOEciYf2fntw166cqISthTi tZkRo4puWM9M69hzAmpg/9b0IJG17cWmIQ1iI+SQh9fm4p7z2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNrvhwyzQFpDioQCQvtYwAtcFsL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWM2OTg0MDYtMWQ4Zi0z ZjUxLWJmZDItYjFhMTU5YWYwYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABddMkX/iVBIpXEqEwy26RQqxlI0XIFDEpKMxuRIXRpEs1KJ+3uO fArfSTpnbonoXYa/uNXV3OM1vj++n88TWVSxZbx544QT1L6C9CnergqcWgxuneYv CX1adPvn5JTHkp8FCKuvxNWf6cHuXoaqVVGgsSC6xlSbj70f0xDrtNM+vD0COwNt YtaCrWoTf05C+50NMwSObHoMVxyJm0L9a0WstJ3r9lCsE2ANVCGIMNuNIYU3pPZU MFmY54jKTlhb64XVpxVFkpiOWh2hA/ypZgQZU/vCudP9IYq5vwE1AssQEGM0as5I Ot1N+P/1fagJMGifW9avy5O1N/k4cDkzrok= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:33 2025 by rpki-client