$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa File: 32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa (raw, json) Hash identifier: xm57hq6Rd+RqWcmjbjKDX5AJOk+1XqfFzj7SEdvTGsE= Subject key identifier: 2B:E0:D6:99:B1:07:2A:99:CB:81:4E:8E:7C:C3:50:BA:ED:2C:C9:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F20FBAEBDEC70C7D1240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396617 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f2:0f:ba:eb:de:c7:0c:7d:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=2b6f4d75-9cc0-4a31-9d34-db55f3af3368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:55:7c:74:4b:ad:4d:d9:be:3c:bc:a3:c2:43: 70:6a:f4:67:81:a4:84:cc:8d:a5:21:4f:62:1f:c3: 73:6c:4d:a1:bd:9a:46:4c:fe:98:1b:2f:cb:89:ae: 04:b3:51:6c:42:8d:cd:8b:fc:d5:33:c3:a3:ec:cb: d6:0f:ef:14:a5:a8:b1:89:0d:9f:fe:6c:fa:20:c8: e2:f0:20:b0:b9:02:16:f0:8a:c4:66:51:ab:6c:58: c0:2a:79:91:97:e7:7e:9c:94:23:88:9a:d6:4c:6b: ac:7a:22:d9:c6:91:3c:3b:b2:57:72:b9:d6:09:af: 6f:95:b7:54:ff:08:ed:9e:d3:80:dd:42:c2:8c:93: ae:fd:c6:90:97:55:23:2b:17:7b:6a:f7:85:58:2b: 4b:da:48:fe:f4:ed:55:c6:b9:ed:31:c5:ae:ea:e8: 76:a8:29:59:fc:0f:57:c0:aa:e9:fe:95:0b:24:b4: cc:4b:65:48:2e:e9:b8:fd:89:f6:94:09:8a:0e:72: d7:c4:78:c8:70:43:79:24:0a:69:bf:c9:2b:31:91: 86:97:40:3b:73:21:2b:f1:66:ff:96:a4:ed:51:b6: e7:11:db:fd:a0:de:db:5d:48:2c:8b:df:fa:73:16: 96:64:8b:48:10:46:e9:31:2a:7d:38:fd:be:04:8a: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:D6:99:B1:07:2A:99:CB:81:4E:8E:7C:C3:50:BA:ED:2C:C9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32d1ae39-2aee-3cce-8bf3-e1ea45a9f504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c7:ae:92:61:be:94:cf:64:8f:3e:48:58:93:04:6c:42:42: 37:0e:a5:f7:3f:58:6f:03:1a:99:2a:09:1b:ab:ad:8f:11:ee: 29:92:8a:bd:a5:8a:12:bc:eb:fa:3b:91:b8:54:b2:c0:21:65: 8d:6f:81:ed:f8:28:af:ec:e5:68:25:4e:22:63:05:a5:0c:21: 37:a5:d3:74:84:bd:13:c7:74:3e:06:ab:e9:8c:4b:13:8a:f2: 01:da:77:40:30:c8:35:4b:3b:8d:2d:9b:84:49:29:47:71:9b: 08:80:97:23:f8:9f:c0:b5:61:a1:40:93:eb:6b:c9:1e:77:f3: 24:87:36:1e:6e:2c:2c:41:e8:e5:a0:54:26:4a:84:dc:49:1d: 41:21:02:4f:62:b5:37:cf:24:c4:d4:06:41:57:69:48:39:c2: 1d:ac:44:aa:54:e7:47:6b:a2:14:ca:6a:08:64:86:92:3c:d8: e0:35:36:e5:fb:1a:a6:21:2b:02:e1:69:37:63:21:34:cd:38: 0e:7f:67:0e:37:7f:8d:21:f6:e4:a2:56:c1:f9:bb:4a:25:1b: f4:18:49:3a:0e:9c:9f:93:4c:50:95:87:af:25:c0:46:91:dc: 10:90:80:e7:ae:7e:fd:1c:23:a9:69:ad:ac:ce:f8:ff:a3:cb: 37:5b:10:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfIPuuvexwx9EkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MmI2ZjRkNzUtOWNjMC00YTMxLTlkMzQtZGI1NWYzYWYzMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1V8dEutTdm+PLyjwkNwavRngaSEzI2lIU9i H8NzbE2hvZpGTP6YGy/Lia4Es1FsQo3Ni/zVM8Oj7MvWD+8UpaixiQ2f/mz6IMji 8CCwuQIW8IrEZlGrbFjAKnmRl+d+nJQjiJrWTGuseiLZxpE8O7JXcrnWCa9vlbdU /wjtntOA3ULCjJOu/caQl1UjKxd7aveFWCtL2kj+9O1VxrntMcWu6uh2qClZ/A9X wKrp/pULJLTMS2VILum4/Yn2lAmKDnLXxHjIcEN5JAppv8krMZGGl0A7cyEr8Wb/ lqTtUbbnEdv9oN7bXUgsi9/6cxaWZItIEEbpMSp9OP2+BIqHfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCvg1pmxByqZy4FOjnzDULrtLMmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJkMWFlMzktMmFlZS0z Y2NlLThiZjMtZTFlYTQ1YTlmNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXHrpJhvpTPZI8+SFiTBGxCQjcOpfc/WG8DGpkqCRurrY8R7imS ir2lihK86/o7kbhUssAhZY1vge34KK/s5WglTiJjBaUMITel03SEvRPHdD4Gq+mM SxOK8gHad0AwyDVLO40tm4RJKUdxmwiAlyP4n8C1YaFAk+tryR538ySHNh5uLCxB 6OWgVCZKhNxJHUEhAk9itTfPJMTUBkFXaUg5wh2sRKpU50drohTKaghkhpI82OA1 NuX7GqYhKwLhaTdjITTNOA5/Zw43f40h9uSiVsH5u0olG/QYSToOnJ+TTFCVh68l wEaR3BCQgOeufv0cI6lprazO+P+jyzdbELE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:19 2025 by rpki-client