$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa File: 2dc5c1b6-0ae9-388d-a815-6302292992c9.roa (raw, json) Hash identifier: 3xWbZY962JXoUVxBsT80GJMjlBeO2aXHtJoXhN651dk= Subject key identifier: 03:A2:8F:E8:FD:43:20:A5:88:71:38:FB:A4:76:65:F9:83:9B:FD:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825ED398FD1A00B93F71B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396613 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ed:39:8f:d1:a0:0b:93:f7:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=291785ce-24be-4abe-b548-3ca31f7cbb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:30:99:0b:91:8e:09:e7:c8:62:b6:14:7f: da:86:bb:30:61:a5:42:7b:c6:53:a6:62:1c:29:36: f5:a2:3f:63:1c:f2:e7:fb:39:5b:b9:1b:22:e5:24: ad:5b:46:3a:8f:02:4b:71:3e:35:21:c4:09:c1:1e: 05:2e:d1:3a:6a:91:48:1d:90:30:f7:45:1c:53:7c: ef:fa:88:0c:5d:35:fc:0d:33:4f:9b:7c:fc:d1:6c: c4:64:0a:c8:e7:50:35:4a:95:c4:06:f7:68:d3:05: ed:4e:62:96:4d:f3:5d:39:e9:4d:7c:16:b7:f9:4d: c8:4d:d6:32:01:42:f6:36:77:81:f4:81:2c:54:59: b6:81:27:4c:e7:cd:87:bd:5b:e7:39:d5:cc:2a:c7: 2d:d5:e5:21:45:7c:8e:c8:9a:a4:5a:b2:40:67:c0: 8e:b9:0e:31:4e:b7:58:36:3a:71:c0:0a:a7:24:be: 65:6b:25:70:75:7f:0e:af:67:0e:fe:17:48:2d:61: 80:04:0e:b6:3c:b1:ea:4a:5d:c6:95:f6:2d:b0:9d: c2:59:b1:e5:18:b7:24:b1:08:9c:15:17:28:d5:26: 69:56:a4:93:2c:99:04:a5:35:36:2a:7a:16:b0:f2: 68:80:ea:8c:de:6d:a3:b8:7f:41:36:cf:d4:b8:69: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A2:8F:E8:FD:43:20:A5:88:71:38:FB:A4:76:65:F9:83:9B:FD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8e:42:03:97:1a:12:5d:46:8a:f6:b7:c0:88:f1:6a:3c:33: 92:a3:d7:39:a1:48:81:fb:39:fa:16:94:ef:59:92:de:54:5a: 6e:1c:f5:20:a7:16:fd:95:cf:8f:dd:c6:99:9e:39:4b:1c:ec: 59:02:ce:a3:dd:58:e6:55:e1:b6:24:f8:1f:58:6e:37:10:6e: 07:e8:10:d1:fe:1d:d1:6a:bd:c7:ae:c1:80:d9:3b:e1:33:09: d2:19:91:54:99:f4:f6:b4:0f:a0:3c:de:76:51:73:74:af:38: e3:b4:69:93:7c:56:e6:bd:1a:2d:53:a6:ad:c2:b0:cd:04:c8: 16:29:ac:58:59:b8:fe:93:6b:a2:de:9c:47:77:5d:d6:05:1d: 8f:c0:48:86:a6:7d:a4:e8:2a:9f:77:e5:f9:da:02:6f:c9:ea: ab:f5:8f:a9:23:9c:be:eb:eb:cb:9c:42:a5:03:62:44:2d:e4: 65:63:4c:f1:8f:ed:a5:8e:cc:95:9f:e2:cc:8b:a5:91:55:a6: 20:23:fa:84:2d:f3:be:2b:cf:c8:de:af:1b:ce:f1:4b:3d:b3: 7d:0b:ed:60:03:de:c2:a1:95:3c:45:1c:15:98:f9:9f:8f:59: 8d:8a:77:a8:52:0e:6f:9e:e5:0b:67:58:f8:16:c4:3c:2c:ce: 68:c5:cc:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe05j9GgC5P3G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MjkxNzg1Y2UtMjRiZS00YWJlLWI1NDgtM2NhMzFmN2NiYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI8wmQuRjgnnyGK2FH/ahrswYaVCe8ZTpmIc KTb1oj9jHPLn+zlbuRsi5SStW0Y6jwJLcT41IcQJwR4FLtE6apFIHZAw90UcU3zv +ogMXTX8DTNPm3z80WzEZArI51A1SpXEBvdo0wXtTmKWTfNdOelNfBa3+U3ITdYy AUL2NneB9IEsVFm2gSdM582HvVvnOdXMKsct1eUhRXyOyJqkWrJAZ8COuQ4xTrdY NjpxwAqnJL5layVwdX8Or2cO/hdILWGABA62PLHqSl3GlfYtsJ3CWbHlGLcksQic FRco1SZpVqSTLJkEpTU2KnoWsPJogOqM3m2juH9BNs/UuGkmBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAOij+j9QyCliHE4+6R2ZfmDm/3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRjNWMxYjYtMGFlOS0z ODhkLWE4MTUtNjMwMjI5Mjk5MmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWOQgOXGhJdRor2t8CI8Wo8M5Kj1zmhSIH7OfoWlO9Zkt5UWm4c 9SCnFv2Vz4/dxpmeOUsc7FkCzqPdWOZV4bYk+B9YbjcQbgfoENH+HdFqvceuwYDZ O+EzCdIZkVSZ9Pa0D6A83nZRc3SvOOO0aZN8Vua9Gi1Tpq3CsM0EyBYprFhZuP6T a6LenEd3XdYFHY/ASIamfaToKp935fnaAm/J6qv1j6kjnL7r68ucQqUDYkQt5GVj TPGP7aWOzJWf4syLpZFVpiAj+oQt874rz8jerxvO8Us9s30L7WAD3sKhlTxFHBWY +Z+PWY2Kd6hSDm+e5QtnWPgWxDwszmjFzJY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:48 2025 by rpki-client