$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/276f3a29-7198-379a-ac90-1cb0f786575c.roa File: 276f3a29-7198-379a-ac90-1cb0f786575c.roa (raw, json) Hash identifier: iFCsM/yVU55ZYaEasiihqPKKHziRbGKqQqOEcoMKTgc= Subject key identifier: FF:F7:15:77:AA:26:9E:7A:34:82:49:7B:A4:11:3F:17:D5:56:DD:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146351B9D8EF280C3B692F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/276f3a29-7198-379a-ac90-1cb0f786575c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397201 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:1b:9d:8e:f2:80:c3:b6:92:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=38a65f10-fd79-49af-9042-826adad815c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:c2:d1:97:f6:aa:0b:5a:ca:fe:8a:47:07: ce:5a:0c:d8:28:a2:07:7a:58:ce:e7:a5:e3:67:f1: d0:4a:65:03:a8:51:07:c8:c6:7f:5e:8b:eb:01:0d: 08:77:d1:6b:2c:76:b4:c6:16:05:74:ae:d4:fd:9a: 01:34:14:24:87:a4:2d:21:0e:cc:73:39:78:0f:ba: a0:35:35:10:a6:99:67:42:1d:80:5f:02:db:7f:0b: 91:c1:b7:74:63:eb:20:0e:c5:e3:da:53:b2:63:53: 35:8f:cb:b5:d8:5e:20:ca:58:7a:a9:c5:5b:42:ab: 14:aa:9d:79:eb:86:86:f8:af:61:43:b1:2b:ec:b2: a3:43:cd:6b:af:f3:9c:4c:30:77:9e:5e:ae:5d:86: 57:29:a3:ea:9c:dc:05:65:03:56:b8:eb:6c:d7:98: a2:a0:2b:3f:2c:aa:ef:9f:47:fb:bf:ba:d3:72:41: 8b:6b:71:d8:ed:66:63:74:31:ed:f5:9d:0d:5a:b2: c4:a8:2b:39:c5:8e:7b:d7:73:e2:22:4e:26:bd:39: 52:b4:a7:66:d2:4b:d1:45:90:17:de:80:40:c3:9e: 35:18:5c:67:62:eb:e6:b7:e0:e1:51:da:45:fe:3a: e7:99:b5:19:54:3a:61:cc:1b:c3:19:78:8f:b9:bd: 13:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F7:15:77:AA:26:9E:7A:34:82:49:7B:A4:11:3F:17:D5:56:DD:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/276f3a29-7198-379a-ac90-1cb0f786575c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1c:18:b9:af:af:cb:56:61:04:09:49:29:04:53:0d:6f:04: 4e:8c:6b:b4:bc:10:a1:59:6e:16:e3:1a:f8:ac:83:7d:5d:a3: 10:48:b3:fe:08:e9:b1:47:9f:b9:25:d8:2a:3d:95:2e:62:4a: 74:f5:b3:a3:c6:99:97:38:fb:97:68:35:ff:1b:79:11:29:a0: 19:df:a6:0e:f9:67:63:73:2b:ba:e4:64:2a:a1:6a:c1:3d:30: 19:a6:16:3e:68:1a:67:e5:49:fc:4f:87:cd:43:82:1c:43:7a: 81:38:e9:86:14:79:7f:9d:fd:18:ba:5b:64:0e:97:53:fa:17: e5:29:b4:0a:f2:2a:96:4a:fb:af:ad:21:f5:2d:46:3d:77:b7: 7c:ac:e3:90:d4:1e:eb:ec:37:64:c6:4b:1f:9a:47:6d:17:f9: 0b:56:72:f5:01:cb:99:ca:44:87:38:af:3e:b1:87:af:63:8c: 92:26:aa:35:d8:b6:e7:ff:50:d4:14:1a:4e:13:5b:e7:f2:da: 77:0d:9b:b0:f8:29:2e:ee:da:e2:7b:e8:79:f4:53:60:b0:ae: cc:5e:a2:81:7d:3c:36:98:cf:3f:c2:c1:d3:d7:ee:ff:7e:89: d8:8e:80:33:ce:7b:b1:82:8e:6a:ed:82:ef:bf:bb:44:6b:62: 6f:80:cb:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjUbnY7ygMO2kvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzhhNjVmMTAtZmQ3OS00OWFmLTkwNDItODI2YWRhZDgxNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllnC0Zf2qgtayv6KRwfOWgzYKKIHeljO56Xj Z/HQSmUDqFEHyMZ/XovrAQ0Id9FrLHa0xhYFdK7U/ZoBNBQkh6QtIQ7Mczl4D7qg NTUQpplnQh2AXwLbfwuRwbd0Y+sgDsXj2lOyY1M1j8u12F4gylh6qcVbQqsUqp15 64aG+K9hQ7Er7LKjQ81rr/OcTDB3nl6uXYZXKaPqnNwFZQNWuOts15iioCs/LKrv n0f7v7rTckGLa3HY7WZjdDHt9Z0NWrLEqCs5xY5713PiIk4mvTlStKdm0kvRRZAX 3oBAw541GFxnYuvmt+DhUdpF/jrnmbUZVDphzBvDGXiPub0TiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/3FXeqJp56NIJJe6QRPxfVVt2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjc2ZjNhMjktNzE5OC0z NzlhLWFjOTAtMWNiMGY3ODY1NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFocGLmvr8tWYQQJSSkEUw1vBE6Ma7S8EKFZbhbjGvisg31doxBI s/4I6bFHn7kl2Co9lS5iSnT1s6PGmZc4+5doNf8beREpoBnfpg75Z2NzK7rkZCqh asE9MBmmFj5oGmflSfxPh81DghxDeoE46YYUeX+d/Ri6W2QOl1P6F+UptAryKpZK +6+tIfUtRj13t3ys45DUHuvsN2TGSx+aR20X+QtWcvUBy5nKRIc4rz6xh69jjJIm qjXYtuf/UNQUGk4TW+fy2ncNm7D4KS7u2uJ76Hn0U2CwrsxeooF9PDaYzz/CwdPX 7v9+idiOgDPOe7GCjmrtgu+/u0RrYm+AyyQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:17 2025 by rpki-client