$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa File: 1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa (raw, json) Hash identifier: 93HHcrovhBYk6Fx+IAiCgF49A1RJcIBGWHMtfVRXT44= Subject key identifier: BF:B2:4B:1F:2F:D3:72:FD:6F:28:90:81:DB:54:59:85:EE:CD:ED:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F354FBB0289C937BC740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397207 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f3:54:fb:b0:28:9c:93:7b:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=4c0e94bb-07b9-4e67-81da-b57f5b590ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:78:ba:ab:10:bb:7d:14:cd:7b:6b:bc:f5: eb:5c:85:f5:d0:e9:ac:61:10:fb:6e:ef:32:2c:62: 7c:fa:b8:cf:b4:df:b2:c7:d9:2c:6e:ee:e6:64:23: 74:27:d1:a5:74:17:be:e7:cc:27:13:35:ba:91:e6: 95:3e:57:4b:4b:1b:d6:90:e4:4e:2b:58:1d:3d:ac: e5:25:fe:74:f0:f5:9e:e1:5c:0d:76:ec:89:10:a4: 16:89:54:24:61:b7:d7:42:e1:38:47:ca:06:9c:17: 7a:33:a2:46:18:3d:ef:23:03:41:74:07:69:ff:f1: bf:e0:75:aa:b7:a3:a9:b4:ad:ec:8c:a2:cd:86:ad: 14:09:88:d9:79:c3:2e:48:d0:06:8b:0b:6e:93:03: fa:f1:4d:45:82:51:c9:5c:35:5d:53:9c:e8:b2:db: e8:81:fc:20:8c:7f:35:fa:50:de:0e:e4:7e:c1:08: 8e:09:ad:1e:cd:01:f8:32:f0:cd:eb:dc:be:c2:45: d4:e4:d4:96:0c:df:a0:61:70:51:1f:bb:ce:08:14: 3a:ec:40:27:83:99:fb:8b:14:16:46:ff:28:99:86: 08:66:7f:89:7a:35:6e:dd:d7:44:fb:f2:c9:9f:ed: 05:66:ba:7b:37:2c:8a:2a:8e:46:38:7d:f0:2a:c5: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B2:4B:1F:2F:D3:72:FD:6F:28:90:81:DB:54:59:85:EE:CD:ED:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7d:68:a5:cc:50:8d:cf:7d:6f:3c:24:dc:2f:59:4a:58:c5: 6c:11:58:7e:64:c0:3a:8e:f9:16:f9:a3:59:b0:7c:60:1b:0f: b3:c7:64:59:07:be:4d:fd:a7:24:b1:0b:84:11:e3:c1:dd:9b: 3f:44:96:06:b7:09:e5:0c:9e:0d:e9:75:62:aa:5d:7e:7f:75: f8:95:60:fb:cb:ca:16:bc:b3:91:e7:84:d1:fb:38:9f:0b:9e: 09:92:5f:1e:84:b9:47:1e:00:87:0a:db:a0:da:fb:ed:b2:b1: b3:ea:de:82:c6:e2:8a:00:fc:73:9b:a7:e2:ce:00:ae:fe:63: 43:7d:f0:d3:7c:c2:ba:5b:98:ea:63:e0:80:15:7b:42:47:44: 95:5d:df:25:3f:5c:69:84:47:0c:ff:dc:ce:0a:04:06:27:3f: b7:25:c5:0c:49:80:f0:e6:55:b1:8b:45:a2:75:71:8c:64:a5: 21:ad:1c:08:87:59:f5:c3:7c:a8:cf:69:3c:a0:08:28:bd:ee: 7b:32:79:06:69:13:17:8a:fb:71:17:ce:99:21:97:01:1c:bc: f1:b1:c7:b1:6a:22:94:61:a7:99:92:08:e3:46:79:8e:b5:9a: b2:09:db:75:10:93:31:52:2b:5c:95:db:b6:59:18:fe:c7:53: 18:1a:e9:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfNU+7AonJN7x0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NGMwZTk0YmItMDdiOS00ZTY3LTgxZGEtYjU3ZjViNTkwYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8V4uqsQu30UzXtrvPXrXIX10OmsYRD7bu8y LGJ8+rjPtN+yx9ksbu7mZCN0J9GldBe+58wnEzW6keaVPldLSxvWkOROK1gdPazl Jf508PWe4VwNduyJEKQWiVQkYbfXQuE4R8oGnBd6M6JGGD3vIwNBdAdp//G/4HWq t6OptK3sjKLNhq0UCYjZecMuSNAGiwtukwP68U1FglHJXDVdU5zostvogfwgjH81 +lDeDuR+wQiOCa0ezQH4MvDN69y+wkXU5NSWDN+gYXBRH7vOCBQ67EAng5n7ixQW Rv8omYYIZn+JejVu3ddE+/LJn+0FZrp7NyyKKo5GOH3wKsWzdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+ySx8v03L9byiQgdtUWYXuze1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWVjNWMyMGYtMDAzNS0z YmIwLTg1NzYtMGNjZWE5NWJjOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA19aKXMUI3PfW88JNwvWUpYxWwRWH5kwDqO+Rb5o1mwfGAbD7PH ZFkHvk39pySxC4QR48Hdmz9Elga3CeUMng3pdWKqXX5/dfiVYPvLyha8s5HnhNH7 OJ8LngmSXx6EuUceAIcK26Da++2ysbPq3oLG4ooA/HObp+LOAK7+Y0N98NN8wrpb mOpj4IAVe0JHRJVd3yU/XGmERwz/3M4KBAYnP7clxQxJgPDmVbGLRaJ1cYxkpSGt HAiHWfXDfKjPaTygCCi97nsyeQZpExeK+3EXzpkhlwEcvPGxx7FqIpRhp5mSCONG eY61mrIJ23UQkzFSK1yV27ZZGP7HUxga6fU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:47 2025 by rpki-client