$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa File: 28e5bcba-df81-3e05-af86-6daead68d7c5.roa (raw, json) Hash identifier: /Zi/JXoqr/w/oLCw/5oBNcfMVJ9VXPgeaQYIAQErQM8= Subject key identifier: 4E:CA:CA:3A:B8:4D:49:03:D1:F9:7F:01:D5:02:EF:0B:69:82:58:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E763031746E88F5C9300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 36621 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e7:63:03:17:46:e8:8f:5c:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=8774d54a-1bde-491f-b708-3b66ed46fa7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:21:c2:ad:fa:07:db:ee:2e:6c:e1:0d:3d: b2:04:26:85:45:0e:36:d7:1e:84:1e:c5:7d:39:d4: e3:af:6b:ce:98:a7:c2:83:bb:df:bd:75:20:f2:16: 60:99:05:cf:fa:a0:04:a1:78:d4:38:19:e5:cc:69: 1a:f6:a5:d2:0d:a6:21:a2:42:f0:e1:1a:c1:03:da: 0d:e2:7d:e4:88:c3:fc:76:46:46:10:8f:58:e9:de: 33:d4:23:5c:c3:93:f3:a3:a8:18:e5:31:12:92:60: 30:89:09:7e:44:03:a4:2d:af:7a:f9:b2:98:d2:e5: d3:41:e8:2c:b0:d7:d6:ba:4f:70:64:33:d8:37:b9: 0f:e5:77:0f:11:df:96:68:47:04:fe:d7:17:40:3b: 33:2a:78:45:ea:76:15:74:c3:04:73:a0:37:fb:84: cc:30:2f:1c:78:e9:5c:48:f9:df:6b:d9:2d:e5:ea: 36:c4:a5:3b:d1:7a:28:72:44:83:43:e2:d6:6d:fe: 6f:fe:c7:a8:80:dd:a6:ee:58:79:aa:7f:06:4f:9e: c7:45:c8:18:72:37:5e:0a:9e:46:ff:14:02:5e:9d: 99:b2:20:7a:2f:d1:72:02:d9:2d:96:85:7f:22:44: f3:21:21:fb:a1:d2:55:0a:48:6f:3c:da:e7:24:f5: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:CA:3A:B8:4D:49:03:D1:F9:7F:01:D5:02:EF:0B:69:82:58:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3a:81:a8:ae:19:a4:97:d4:7d:de:43:70:10:10:dc:c4:cb: 93:7e:8c:97:11:da:a2:75:d1:9f:6b:88:98:af:45:b0:bd:1e: 98:8e:5b:65:59:8b:f1:6c:ab:40:93:4a:61:64:f2:e0:78:22: e1:14:42:51:7e:38:a4:b3:d6:ae:01:c7:37:4e:10:ad:fd:6a: ca:09:d0:ac:a8:53:3d:3d:b3:cc:90:98:3e:96:6e:a1:cf:6f: 6e:9c:ff:f9:f3:2a:e7:1e:45:78:19:1a:80:c0:88:1d:f0:6f: 12:79:b7:33:87:1d:09:29:7b:60:d9:47:8c:9a:07:91:91:c3: 47:10:98:f7:79:e6:4e:6f:ce:87:fb:c6:04:96:18:90:98:1e: ac:2e:75:17:c7:05:09:11:0e:d8:5e:90:37:23:e5:47:1f:ea: a8:64:e0:e8:4b:49:01:4b:e9:40:5b:81:45:e1:7f:60:82:2a: 47:5f:13:47:14:55:62:30:25:ce:3e:b5:aa:2d:8a:94:09:09: 54:6e:e8:2d:b1:82:25:e7:78:9f:c5:47:a9:6b:bb:7c:73:1a: dd:9f:8f:e4:0f:a9:dc:94:7b:be:e8:3c:10:2d:7f:1c:8a:a7: f7:c2:b8:af:b9:70:00:10:62:ad:68:00:bb:43:ad:47:57:1c: 2e:78:1c:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJedjAxdG6I9ckwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ODc3NGQ1NGEtMWJkZS00OTFmLWI3MDgtM2I2NmVkNDZmYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hUhwq36B9vuLmzhDT2yBCaFRQ421x6EHsV9 OdTjr2vOmKfCg7vfvXUg8hZgmQXP+qAEoXjUOBnlzGka9qXSDaYhokLw4RrBA9oN 4n3kiMP8dkZGEI9Y6d4z1CNcw5Pzo6gY5TESkmAwiQl+RAOkLa96+bKY0uXTQegs sNfWuk9wZDPYN7kP5XcPEd+WaEcE/tcXQDszKnhF6nYVdMMEc6A3+4TMMC8ceOlc SPnfa9kt5eo2xKU70XoockSDQ+LWbf5v/seogN2m7lh5qn8GT57HRcgYcjdeCp5G /xQCXp2ZsiB6L9FyAtktloV/IkTzISH7odJVCkhvPNrnJPVa4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE7Kyjq4TUkD0fl/AdUC7wtpgljVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNWJjYmEtZGY4MS0z ZTA1LWFmODYtNmRhZWFkNjhkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABM6gaiuGaSX1H3eQ3AQENzEy5N+jJcR2qJ10Z9riJivRbC9HpiO W2VZi/Fsq0CTSmFk8uB4IuEUQlF+OKSz1q4BxzdOEK39asoJ0KyoUz09s8yQmD6W bqHPb26c//nzKuceRXgZGoDAiB3wbxJ5tzOHHQkpe2DZR4yaB5GRw0cQmPd55k5v zof7xgSWGJCYHqwudRfHBQkRDthekDcj5Ucf6qhk4OhLSQFL6UBbgUXhf2CCKkdf E0cUVWIwJc4+taotipQJCVRu6C2xgiXneJ/FR6lru3xzGt2fj+QPqdyUe77oPBAt fxyKp/fCuK+5cAAQYq1oALtDrUdXHC54HEM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:05 2025 by rpki-client