$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3846d144-b851-340e-adb8-61519a15aa55.roa File: 3846d144-b851-340e-adb8-61519a15aa55.roa (raw, json) Hash identifier: HiNcIU3bb7RTJz3aSJbnnWzTV1KanUp37MDGIKSlPY0= Subject key identifier: 28:C1:D4:B5:3F:B9:3B:E7:C7:EE:27:22:4C:80:A8:BF:27:BD:FB:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814635BB0A2D5A5B70D11F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3846d144-b851-340e-adb8-61519a15aa55.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396554 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:bb:0a:2d:5a:5b:70:d1:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=15de63e4-b844-431a-a17f-e14b2801db2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:84:cd:53:d7:62:ae:35:97:72:da:3b:00:11: 5e:4c:73:b2:9b:ff:55:62:d2:82:69:57:41:98:95: 35:0e:5d:68:4d:ff:aa:73:9b:f6:f2:09:58:37:42: 99:c2:57:f9:8f:82:f9:ad:2b:e1:3f:45:75:ec:24: 30:a5:fd:b0:21:ad:e3:9f:ce:29:c3:0e:85:ba:7e: 6a:81:0e:b5:fe:0b:9f:7a:2f:ae:b0:88:d5:4b:a1: 45:18:cd:3e:aa:47:d9:4e:1b:41:86:13:ab:3f:a7: 7e:c6:78:34:6f:8f:a5:f1:52:a1:dd:cb:8d:db:4c: 9f:e2:ec:23:1c:0f:fc:51:e4:70:6d:19:42:05:cb: 33:2f:df:9e:49:68:f6:b7:6a:b5:57:20:50:7f:2a: d5:b1:30:e7:9b:89:3f:7c:3d:be:41:2e:b0:9f:5c: c0:e5:d1:fa:b0:f0:73:d7:e7:ce:16:f5:b1:d5:b6: e2:29:df:1b:2b:50:2e:bd:e2:80:7b:44:91:c3:58: 8a:9c:ba:64:9d:77:f4:bf:43:e3:b3:e1:d6:e1:36: 53:9a:7e:a9:54:01:72:9f:84:ed:cd:5d:29:21:ec: 6a:ca:a9:f8:aa:c3:0f:23:55:70:d3:46:35:2d:2e: 64:51:90:0a:bb:0b:43:5a:bb:93:cc:d5:90:67:95: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C1:D4:B5:3F:B9:3B:E7:C7:EE:27:22:4C:80:A8:BF:27:BD:FB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3846d144-b851-340e-adb8-61519a15aa55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:14:c5:42:3c:62:c4:75:14:d3:03:ec:97:14:0e:b1:8c:e6: 97:d3:7a:01:65:ee:83:65:d4:f5:42:d0:27:12:7c:63:bd:79: 32:be:13:79:1c:80:de:d7:f2:1e:3e:f0:0a:ff:ce:a7:f3:84: b5:c0:0f:41:67:5b:4e:29:6d:31:27:45:2c:12:d8:b9:d5:10: e8:27:a3:4e:58:f0:c2:b2:54:0b:ff:eb:07:d8:88:a7:6c:2a: 8b:62:78:15:8f:99:19:4d:99:1c:e6:cc:55:17:1d:5b:c9:9e: 24:3b:cd:d5:ca:ef:80:ed:9d:70:73:27:1c:74:38:aa:c1:55: 9b:d8:11:c7:8d:83:82:ca:66:d9:29:b9:d2:92:ae:cd:62:7e: a6:a8:04:48:01:9a:a3:0d:e2:6f:fa:a5:99:8a:f2:73:40:08: a1:6e:20:27:a3:92:00:0f:b5:49:87:a1:55:05:0f:3c:24:7e: aa:34:52:ea:ec:51:de:82:90:d4:f9:3e:b4:ea:ce:75:91:56: 4b:13:b6:90:44:d7:b6:fd:2d:d1:b1:05:af:5b:46:55:41:51: 06:44:13:54:99:9b:0d:41:38:3b:ca:d6:0f:f9:60:08:b7:41: 02:40:b7:f8:2a:2d:29:3f:63:9e:ed:fd:86:fc:3b:4a:ed:56: bc:8d:62:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjW7Ci1aW3DRHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MTVkZTYzZTQtYjg0NC00MzFhLWExN2YtZTE0YjI4MDFkYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlITNU9dirjWXcto7ABFeTHOym/9VYtKCaVdB mJU1Dl1oTf+qc5v28glYN0KZwlf5j4L5rSvhP0V17CQwpf2wIa3jn84pww6Fun5q gQ61/gufei+usIjVS6FFGM0+qkfZThtBhhOrP6d+xng0b4+l8VKh3cuN20yf4uwj HA/8UeRwbRlCBcszL9+eSWj2t2q1VyBQfyrVsTDnm4k/fD2+QS6wn1zA5dH6sPBz 1+fOFvWx1bbiKd8bK1AuveKAe0SRw1iKnLpknXf0v0Pjs+HW4TZTmn6pVAFyn4Tt zV0pIexqyqn4qsMPI1Vw00Y1LS5kUZAKuwtDWruTzNWQZ5VfmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCjB1LU/uTvnx+4nIkyAqL8nvfszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg0NmQxNDQtYjg1MS0z NDBlLWFkYjgtNjE1MTlhMTVhYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYUxUI8YsR1FNMD7JcUDrGM5pfTegFl7oNl1PVC0CcSfGO9eTK+ E3kcgN7X8h4+8Ar/zqfzhLXAD0FnW04pbTEnRSwS2LnVEOgno05Y8MKyVAv/6wfY iKdsKotieBWPmRlNmRzmzFUXHVvJniQ7zdXK74DtnXBzJxx0OKrBVZvYEceNg4LK ZtkpudKSrs1ifqaoBEgBmqMN4m/6pZmK8nNACKFuICejkgAPtUmHoVUFDzwkfqo0 UursUd6CkNT5PrTqznWRVksTtpBE17b9LdGxBa9bRlVBUQZEE1SZmw1BODvK1g/5 YAi3QQJAt/gqLSk/Y57t/Yb8O0rtVryNYq0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:04 2025 by rpki-client