$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa File: 22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa (raw, json) Hash identifier: L7Ar15fQH1uo1JDOTaoFecouwjKeeJHOpQo66jolk98= Subject key identifier: BD:61:F6:AD:D6:42:E7:41:AA:AB:49:D1:A7:64:C4:B2:C8:2D:17:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814633392A812EFD67063DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 20172 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:33:39:2a:81:2e:fd:67:06:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=fbfc7288-c9dc-4d14-b56b-40b314591ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:14:91:00:fe:eb:83:4a:14:fc:d2:72:a8:ae: 22:05:e4:50:f4:db:f1:b4:aa:7e:57:61:db:36:44: 2e:bd:5f:b4:e4:7e:3a:79:20:6f:f3:2e:2c:81:b2: 37:83:0c:a2:6e:c2:cb:c6:d3:f9:e9:a0:8f:c7:12: a1:73:15:a6:4c:40:3a:0d:53:68:63:e6:f4:1b:ed: 63:8e:0f:d7:e2:5b:0c:ca:93:be:d1:36:b1:2c:44: c4:1f:36:90:08:08:87:dc:d9:11:e6:63:d4:5f:06: fa:43:e6:1f:d5:69:59:9a:c4:fa:13:19:52:1d:a0: 66:13:c7:1b:6d:75:ff:8f:ab:c6:ed:3a:65:8f:fd: c9:a2:46:dc:f5:d4:24:39:c1:4c:83:af:a3:2a:d3: 37:82:e0:75:0b:53:8d:cc:34:b9:27:7c:d7:78:83: a5:6b:a6:da:6b:6d:ea:42:54:f3:18:a4:72:ca:92: e7:b3:c6:ad:55:c4:00:92:44:4a:ea:6b:c2:c0:b1: 08:4c:17:b4:a8:c1:9f:58:3f:fa:d7:75:ad:20:60: 02:b7:9e:29:89:85:7f:cc:20:83:5a:d8:a8:06:4b: 93:2f:41:fa:a5:e1:59:84:80:66:28:29:ac:71:40: aa:76:60:b5:cd:8a:2f:13:46:71:38:e9:ef:43:a3: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:F6:AD:D6:42:E7:41:AA:AB:49:D1:A7:64:C4:B2:C8:2D:17:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:14:1e:02:a7:4a:a5:4b:c9:15:89:5a:55:1d:df:de:fa:f4: 00:bb:5c:78:34:ac:6d:f1:39:60:3b:70:a3:6c:6c:c4:31:63: 75:e5:ad:c4:12:05:e1:e6:45:5c:10:24:22:71:68:9d:c2:a6: 96:69:6b:ef:8e:79:58:a9:ac:b5:bb:c2:d2:58:7c:1b:9c:3d: 03:fb:1f:9f:ec:8e:63:48:70:20:9e:af:e2:37:9d:f5:86:b9: e3:a5:e0:6f:d3:9b:32:ca:45:3d:b2:69:b8:34:e3:5f:9c:12: e0:d3:b3:35:9f:e4:b6:3a:c0:f5:8e:fa:0a:07:f6:e9:02:d4: 8f:ee:ed:ff:c5:5b:1e:cc:c8:6c:1a:8c:d5:a1:86:ab:f8:49: 2b:0e:16:6c:ba:03:ae:29:4f:34:41:e8:e8:34:0d:83:b4:33: 41:bd:b7:9b:eb:36:b1:f7:53:b0:96:c4:b2:68:29:0e:0d:63: ab:51:42:2d:c0:c1:13:1d:f1:3b:fb:20:ae:c1:d4:18:50:b8: 61:72:f9:0c:d3:d6:98:bc:42:1a:a3:71:c6:03:bf:e4:dc:90: 50:2c:84:b6:5f:f0:ba:09:ae:c9:2d:16:ac:2d:70:2e:fe:0e: 80:dd:48:0d:8d:39:54:09:4c:cd:17:42:c3:a7:bd:28:e7:fd: 69:ba:e9:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjM5KoEu/WcGPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmJmYzcyODgtYzlkYy00ZDE0LWI1NmItNDBiMzE0NTkxYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBSRAP7rg0oU/NJyqK4iBeRQ9NvxtKp+V2Hb NkQuvV+05H46eSBv8y4sgbI3gwyibsLLxtP56aCPxxKhcxWmTEA6DVNoY+b0G+1j jg/X4lsMypO+0TaxLETEHzaQCAiH3NkR5mPUXwb6Q+Yf1WlZmsT6ExlSHaBmE8cb bXX/j6vG7Tplj/3Jokbc9dQkOcFMg6+jKtM3guB1C1ONzDS5J3zXeIOla6baa23q QlTzGKRyypLns8atVcQAkkRK6mvCwLEITBe0qMGfWD/613WtIGACt54piYV/zCCD WtioBkuTL0H6peFZhIBmKCmscUCqdmC1zYovE0ZxOOnvQ6MYxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1h9q3WQudBqqtJ0adkxLLILRflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIwMjBkMDctNWEzOS0z YmEyLWJmMjctZWU5YmM0ODExZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkUHgKnSqVLyRWJWlUd39769AC7XHg0rG3xOWA7cKNsbMQxY3Xl rcQSBeHmRVwQJCJxaJ3CppZpa++OeViprLW7wtJYfBucPQP7H5/sjmNIcCCer+I3 nfWGueOl4G/TmzLKRT2yabg041+cEuDTszWf5LY6wPWO+goH9ukC1I/u7f/FWx7M yGwajNWhhqv4SSsOFmy6A64pTzRB6Og0DYO0M0G9t5vrNrH3U7CWxLJoKQ4NY6tR Qi3AwRMd8Tv7IK7B1BhQuGFy+QzT1pi8QhqjccYDv+TckFAshLZf8LoJrsktFqwt cC7+DoDdSA2NOVQJTM0XQsOnvSjn/Wm66V8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:13 2025 by rpki-client