$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20c61510-ec43-3517-9c57-12d63181a3e8.roa File: 20c61510-ec43-3517-9c57-12d63181a3e8.roa (raw, json) Hash identifier: /az6hdO6xgO9joXovTDil5SqnilEjstTjku+HTS2jRo= Subject key identifier: 6F:67:56:4E:41:FC:90:7A:91:4F:B0:1B:69:3E:74:91:56:83:68:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F181B1630D4F3F414A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20c61510-ec43-3517-9c57-12d63181a3e8.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396610 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f1:81:b1:63:0d:4f:3f:41:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=7f1218b1-592a-487e-8629-d55d91e1a04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:20:a7:10:b4:a8:ac:44:96:e0:07:a6:b9: 60:b2:09:91:24:08:6c:ff:3a:2f:b5:54:eb:49:c5: 8f:ef:4f:18:6f:48:bb:04:9c:57:c6:08:cb:83:73: c4:47:0b:03:df:92:09:a8:79:93:1d:f1:c9:a5:d6: 23:a2:29:93:fa:a7:50:16:3c:ac:28:94:68:30:98: 68:09:50:08:64:e4:5b:63:ce:51:68:6f:11:b2:60: 9e:b5:3c:c5:01:55:2c:63:29:4a:cc:39:22:27:76: 35:16:cb:1a:d9:e5:2f:ff:49:d8:a4:72:45:0a:f5: 23:2a:11:a7:5e:d2:b4:fa:e0:6e:7e:57:61:fb:fd: 7b:3c:47:68:71:08:f4:a4:e5:dc:b3:51:3b:e7:8b: 1b:79:ec:20:8a:31:b2:65:59:3f:02:af:79:ea:d4: d2:c0:64:ec:d4:b8:74:d0:6f:02:17:c1:93:6d:90: ec:64:d5:b1:5c:7f:86:e8:28:73:37:af:66:ed:7b: 22:6a:71:1f:8c:e8:36:2a:96:b7:67:83:f4:2a:a6: 8a:f6:7f:6d:7e:a5:f4:e4:71:fc:17:46:0d:eb:b5: c2:c9:b3:c6:42:d5:08:dc:54:73:d9:0b:49:cb:91: 4f:25:c1:4f:4a:04:2f:61:e1:93:6e:d9:2b:6e:dd: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:67:56:4E:41:FC:90:7A:91:4F:B0:1B:69:3E:74:91:56:83:68:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20c61510-ec43-3517-9c57-12d63181a3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:15:aa:0f:d6:25:98:60:e6:d3:6a:ec:0a:c6:be:86:17:a4: c8:1b:2a:e2:e6:07:9d:28:e7:1e:e9:db:1f:f7:a4:37:31:1b: 15:44:d8:51:58:e2:94:fb:95:c2:eb:dd:1b:6a:d5:cc:84:f4: da:d1:c5:07:28:d6:72:fc:2e:5a:ee:80:0e:37:57:4e:97:dd: 8a:4c:e5:26:dc:da:cc:42:b0:14:48:2b:af:b8:ff:ec:7c:29: aa:bb:01:a7:90:0f:27:7e:a9:80:50:81:70:bb:85:af:62:5b: e9:98:d3:3b:9d:40:a2:88:f9:0a:db:db:56:16:42:e0:36:14: e2:ee:bd:96:5c:ba:be:9d:e5:cb:fe:00:c9:25:7a:c5:b3:04: b1:e1:78:5f:d5:6a:52:1e:aa:64:d3:6a:02:21:da:f5:be:c7: ab:51:20:44:0b:86:1b:8e:50:99:88:fa:80:53:2d:56:49:f3: 2a:76:d1:36:a8:d9:fd:e4:89:f7:52:0d:f5:eb:d1:f9:f7:55: b1:3c:bb:6e:b4:b5:d2:ca:26:5f:48:75:d7:99:3d:49:54:a0: 7d:05:65:32:fb:86:fd:bb:1d:05:d0:7b:83:7c:54:cb:15:9f: 71:b9:69:cc:75:70:6f:de:b0:93:be:05:ff:4e:14:59:3e:c0: 25:13:58:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfGBsWMNTz9BSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk N2YxMjE4YjEtNTkyYS00ODdlLTg2MjktZDU1ZDkxZTFhMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmAgpxC0qKxEluAHprlgsgmRJAhs/zovtVTr ScWP708Yb0i7BJxXxgjLg3PERwsD35IJqHmTHfHJpdYjoimT+qdQFjysKJRoMJho CVAIZORbY85RaG8RsmCetTzFAVUsYylKzDkiJ3Y1Fssa2eUv/0nYpHJFCvUjKhGn XtK0+uBufldh+/17PEdocQj0pOXcs1E754sbeewgijGyZVk/Aq956tTSwGTs1Lh0 0G8CF8GTbZDsZNWxXH+G6ChzN69m7XsianEfjOg2Kpa3Z4P0KqaK9n9tfqX05HH8 F0YN67XCybPGQtUI3FRz2QtJy5FPJcFPSgQvYeGTbtkrbt1TpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG9nVk5B/JB6kU+wG2k+dJFWg2iqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjBjNjE1MTAtZWM0My0z NTE3LTljNTctMTJkNjMxODFhM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwVqg/WJZhg5tNq7ArGvoYXpMgbKuLmB50o5x7p2x/3pDcxGxVE 2FFY4pT7lcLr3Rtq1cyE9NrRxQco1nL8LlrugA43V06X3YpM5Sbc2sxCsBRIK6+4 /+x8Kaq7AaeQDyd+qYBQgXC7ha9iW+mY0zudQKKI+Qrb21YWQuA2FOLuvZZcur6d 5cv+AMklesWzBLHheF/ValIeqmTTagIh2vW+x6tRIEQLhhuOUJmI+oBTLVZJ8yp2 0Tao2f3kifdSDfXr0fn3VbE8u260tdLKJl9IddeZPUlUoH0FZTL7hv27HQXQe4N8 VMsVn3G5acx1cG/esJO+Bf9OFFk+wCUTWGA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:25 2025 by rpki-client