$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a54e294-5f3c-30cc-ace4-63947c41b131.roa File: 3a54e294-5f3c-30cc-ace4-63947c41b131.roa (raw, json) Hash identifier: W1X0OGY2SxSDWbxjadiLyt0/kdxWkUy33SXWdO/i8Ak= Subject key identifier: B1:55:92:A2:C6:30:5D:70:D7:5F:90:5C:6D:51:57:A3:9D:9D:3A:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814635F7BBA7BC21166DED40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a54e294-5f3c-30cc-ace4-63947c41b131.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397206 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:f7:bb:a7:bc:21:16:6d:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=4b64243e-6d82-4681-805f-d50f3b8a5127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0d:66:12:e0:18:7e:d7:26:63:23:43:08:a7: c5:3b:27:70:d1:f6:46:27:31:51:d8:12:00:e6:f8: 58:92:a8:3c:29:e0:6c:60:e3:26:4b:d2:49:a7:61: 13:b8:9d:f6:dc:b7:5c:d2:e5:85:00:f1:a1:71:e3: 5b:68:64:47:33:13:d9:ab:96:95:d9:28:ec:6d:0b: 42:33:5e:6a:5a:38:fe:ba:ba:1e:bc:29:8c:0f:6b: 1d:f6:e9:92:3a:22:ef:7d:19:97:77:96:ae:35:49: a7:b7:1f:8a:31:e7:a6:ea:8b:7d:4a:6b:bb:4a:c6: f5:ba:3c:98:e0:e4:65:1f:76:74:c6:52:ee:b8:86: 00:55:f5:5b:06:96:5f:2c:4f:70:32:8b:c6:ca:a3: cb:ee:93:b9:c6:58:a9:d3:c4:ee:4e:e0:b6:09:41: 9d:9e:b9:cf:00:10:35:87:6f:d1:11:31:2e:06:76: c4:5b:63:77:33:28:84:49:5f:be:8c:87:0e:ee:39: 8f:c0:d6:a0:29:16:79:60:c2:cc:dc:48:7d:3b:fc: 97:0d:c6:08:46:60:4f:dd:6b:d8:e3:82:32:40:cd: a9:32:8c:a8:5a:ae:0a:f6:6b:49:5f:3e:ee:1c:9d: b9:bb:ab:ef:65:31:37:81:1a:9e:e2:66:ee:7c:a3: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:55:92:A2:C6:30:5D:70:D7:5F:90:5C:6D:51:57:A3:9D:9D:3A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a54e294-5f3c-30cc-ace4-63947c41b131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fe:e1:98:03:b0:d2:51:56:5b:88:89:84:4a:bb:14:9a:b7: 5e:78:ad:1f:4e:13:c2:01:dd:79:8e:7c:5a:3d:55:c0:cb:ca: 88:80:29:c3:be:a6:fe:7c:ca:2e:51:95:fc:38:2b:6a:75:c6: fd:e6:d8:e8:63:fd:7b:b2:3c:1c:c4:0c:d4:a9:83:4c:c9:1c: 0b:3c:f3:f0:70:fd:16:dd:2d:a2:28:14:7a:a4:88:d9:ad:f9: e1:68:ed:4e:57:fc:9b:25:08:22:9f:3b:f8:d3:68:4f:c7:cd: 16:73:2d:d9:0e:a2:3d:70:d6:ea:50:c0:d0:8f:e7:11:cc:21: f2:7a:bd:b7:b0:bf:14:cf:04:31:18:74:ed:a5:03:69:77:0c: de:b8:3c:9a:55:99:21:71:d6:de:21:d6:24:24:16:cb:d4:75: dd:48:3f:9c:83:29:ae:7c:56:09:f7:09:1d:19:c0:d6:c0:ac: c9:8e:a8:09:3f:53:c7:9d:bc:b3:c5:00:58:51:cc:f3:4c:ac: d9:e9:75:66:93:4c:9e:68:38:d4:4c:93:66:5d:fd:0c:03:82: 3a:3f:99:4c:4f:4e:1e:e0:48:31:62:23:b4:94:57:c3:b5:60: e3:53:74:0e:12:13:03:5a:c9:4d:43:d3:29:a1:4e:46:8f:e5: ba:7e:f7:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjX3u6e8IRZt7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NGI2NDI0M2UtNmQ4Mi00NjgxLTgwNWYtZDUwZjNiOGE1MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog1mEuAYftcmYyNDCKfFOydw0fZGJzFR2BIA 5vhYkqg8KeBsYOMmS9JJp2ETuJ323Ldc0uWFAPGhceNbaGRHMxPZq5aV2SjsbQtC M15qWjj+uroevCmMD2sd9umSOiLvfRmXd5auNUmntx+KMeem6ot9Smu7Ssb1ujyY 4ORlH3Z0xlLuuIYAVfVbBpZfLE9wMovGyqPL7pO5xlip08TuTuC2CUGdnrnPABA1 h2/RETEuBnbEW2N3MyiESV++jIcO7jmPwNagKRZ5YMLM3Eh9O/yXDcYIRmBP3WvY 44IyQM2pMoyoWq4K9mtJXz7uHJ25u6vvZTE3gRqe4mbufKOjtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLFVkqLGMF1w11+QXG1RV6OdnTpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2E1NGUyOTQtNWYzYy0z MGNjLWFjZTQtNjM5NDdjNDFiMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAID+4ZgDsNJRVluIiYRKuxSat154rR9OE8IB3XmOfFo9VcDLyoiA KcO+pv58yi5Rlfw4K2p1xv3m2Ohj/XuyPBzEDNSpg0zJHAs88/Bw/RbdLaIoFHqk iNmt+eFo7U5X/JslCCKfO/jTaE/HzRZzLdkOoj1w1upQwNCP5xHMIfJ6vbewvxTP BDEYdO2lA2l3DN64PJpVmSFx1t4h1iQkFsvUdd1IP5yDKa58Vgn3CR0ZwNbArMmO qAk/U8edvLPFAFhRzPNMrNnpdWaTTJ5oONRMk2Zd/QwDgjo/mUxPTh7gSDFiI7SU V8O1YONTdA4SEwNayU1D0ymhTkaP5bp+91c= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:18 2025 by rpki-client