$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa File: 2044af53-1751-3c14-b88d-8a21757b959c.roa (raw, json) Hash identifier: dDlNkxZPfvZMmh3RdvtgIYh7gSep7C2avEu4/3c1S0I= Subject key identifier: 65:94:2D:82:21:41:54:A9:C6:DE:66:37:07:12:1F:16:7B:90:A6:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EE5E49A0D9119DBC9460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396575 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ee:5e:49:a0:d9:11:9d:bc:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=dc8451b3-6181-4ac6-9dd6-1b4406ae0a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:1d:2d:b8:7e:9e:af:8c:9c:d0:d3:7a:72: ce:b4:dd:30:c8:64:13:ed:89:76:4f:18:ad:28:df: 13:9a:5b:f3:e6:a6:c3:3c:7b:37:2e:54:0c:2a:ea: e4:d0:ea:0e:97:75:cd:b1:81:fe:7c:f8:6f:b3:f3: 6d:b9:0a:54:a6:37:4e:69:5e:64:7d:53:6f:a6:e2: 14:71:53:1f:6b:a9:16:8a:ee:db:27:77:d2:c9:c2: 7e:9b:c3:bf:de:80:4e:3d:a6:ac:7c:8e:2c:a8:3f: ad:da:0d:5a:7a:4a:09:6c:fe:c4:33:81:d1:52:5b: 95:9b:4a:d0:c3:ff:1d:69:73:18:7f:40:9e:f9:b8: dc:a9:49:e9:c4:ad:c9:47:d7:14:4b:10:3a:02:50: df:56:95:01:29:1b:43:1a:73:7e:20:aa:f8:ce:14: d6:f7:71:cc:29:5f:85:6d:b0:06:7a:28:f6:36:2c: 69:ef:a3:92:1d:33:d6:8a:e6:cb:c3:9d:ea:1e:f3: 21:c7:84:63:2a:60:f7:ed:0f:de:60:92:16:22:61: 1d:97:cb:67:98:bd:54:d1:47:6d:56:2f:c2:4a:18: d0:25:2f:1c:dc:75:9f:34:3c:e0:99:c3:a9:a9:f5: b8:bd:b5:db:ca:78:57:54:4f:1a:b3:c7:18:dc:c0: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:2D:82:21:41:54:A9:C6:DE:66:37:07:12:1F:16:7B:90:A6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9f:f8:62:a0:f3:b4:0d:1f:55:92:9c:a9:14:20:54:68:f9: 60:bf:61:1e:7f:bd:30:77:7a:ef:88:ec:1f:61:8e:e2:a7:6e: 70:d8:e5:77:cd:58:68:e9:30:2b:27:b1:81:83:08:e6:19:08: 55:25:09:5a:f4:9c:d4:c9:ce:13:6e:70:9d:a2:4e:bb:bb:12: 5f:c5:de:99:34:65:89:3c:5b:b2:3e:37:1c:41:7a:d0:79:57: 61:8f:50:c9:cf:25:65:56:67:d5:50:6f:81:f3:0b:52:2e:46: 69:e9:b6:7e:7d:0c:d8:45:f6:36:30:97:06:ff:68:bb:11:96: 4a:8d:54:7a:b3:6c:53:84:d3:35:bd:d6:4a:99:56:36:65:be: 2d:fc:2a:e5:82:a4:04:20:15:f4:05:65:d5:68:12:aa:c3:bb: 7f:1d:09:dd:df:c4:35:e8:c4:c6:24:80:53:a2:4b:b7:11:6f: db:7d:85:6a:c0:55:d0:f5:9f:d2:cc:b3:1d:a0:52:a2:93:53: 8b:14:d2:d9:65:9d:cb:71:b4:2e:b4:e1:e5:5c:9c:ca:c5:26: 0b:51:13:25:26:a3:8c:83:10:0b:62:25:38:6d:98:40:57:6e: fc:f7:90:2b:3b:5f:5a:a6:5e:e8:00:ec:0f:62:b9:64:75:62: a3:7d:7d:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe5eSaDZEZ28lGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZGM4NDUxYjMtNjE4MS00YWM2LTlkZDYtMWI0NDA2YWUwYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl8dLbh+nq+MnNDTenLOtN0wyGQT7Yl2Txit KN8Tmlvz5qbDPHs3LlQMKurk0OoOl3XNsYH+fPhvs/NtuQpUpjdOaV5kfVNvpuIU cVMfa6kWiu7bJ3fSycJ+m8O/3oBOPaasfI4sqD+t2g1aekoJbP7EM4HRUluVm0rQ w/8daXMYf0Ce+bjcqUnpxK3JR9cUSxA6AlDfVpUBKRtDGnN+IKr4zhTW93HMKV+F bbAGeij2Nixp76OSHTPWiubLw53qHvMhx4RjKmD37Q/eYJIWImEdl8tnmL1U0Udt Vi/CShjQJS8c3HWfNDzgmcOpqfW4vbXbynhXVE8as8cY3MDdyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGWULYIhQVSpxt5mNwcSHxZ7kKZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjA0NGFmNTMtMTc1MS0z YzE0LWI4OGQtOGEyMTc1N2I5NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOf+GKg87QNH1WSnKkUIFRo+WC/YR5/vTB3eu+I7B9hjuKnbnDY 5XfNWGjpMCsnsYGDCOYZCFUlCVr0nNTJzhNucJ2iTru7El/F3pk0ZYk8W7I+NxxB etB5V2GPUMnPJWVWZ9VQb4HzC1IuRmnptn59DNhF9jYwlwb/aLsRlkqNVHqzbFOE 0zW91kqZVjZlvi38KuWCpAQgFfQFZdVoEqrDu38dCd3fxDXoxMYkgFOiS7cRb9t9 hWrAVdD1n9LMsx2gUqKTU4sU0tllnctxtC604eVcnMrFJgtREyUmo4yDEAtiJTht mEBXbvz3kCs7X1qmXugA7A9iuWR1YqN9fYs= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:19 2025 by rpki-client