$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa File: 4044adc4-038e-35a2-8aca-cfea792550c3.roa (raw, json) Hash identifier: kRRajGQfXJdQvnLQC8obJae+YkChBfIWON+0KouwOFc= Subject key identifier: 11:5A:77:D8:C9:57:9B:F9:B8:32:FC:C1:41:B0:B5:0E:F1:5F:6B:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463469D14DF6EDD9D38940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36618 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:34:69:d1:4d:f6:ed:d9:d3:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=4201a2d5-0bec-45d0-a9b0-444e03a3bc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:51:3c:32:c5:fd:4c:f2:4d:98:aa:b0:d9:ad: ec:a6:63:bc:18:d4:4f:8a:24:03:87:be:f6:2b:86: d7:97:1b:96:28:2d:ec:2d:b7:f9:1a:54:46:20:92: 05:f8:f0:a8:26:b0:d5:7b:1a:78:80:37:53:a2:85: c7:fd:0c:29:ee:c5:20:dd:48:67:69:8f:70:a8:52: c0:82:d4:ef:a7:4c:f5:3b:16:a8:b6:ef:8c:f9:95: b5:46:f0:d0:e4:33:0d:b5:b2:df:d1:57:8b:ca:f2: 3e:0f:68:15:85:68:94:bb:ec:5d:c5:88:7b:00:fa: f2:e5:de:6c:93:f2:b9:94:d1:02:aa:bb:0a:2d:53: e4:30:ab:82:03:77:22:01:78:59:55:ef:99:d4:ce: 85:e8:d5:96:38:15:14:d4:82:a7:e1:25:3c:a6:89: 5f:dc:c2:ac:e0:d2:53:96:4d:85:21:df:a7:f8:eb: 25:13:aa:1f:b6:b6:c1:32:0f:67:48:6d:e3:f8:8c: ab:8f:f5:69:d3:1f:50:bb:e9:88:19:ba:e1:0a:4e: 9e:e9:c3:bb:05:56:fa:a5:37:c5:b4:b3:26:b2:3f: f2:e4:0d:ed:75:5f:69:80:2e:ff:df:87:02:1e:1c: 04:c7:08:b6:3e:7a:3a:33:fb:ce:fe:36:32:6a:e6: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:77:D8:C9:57:9B:F9:B8:32:FC:C1:41:B0:B5:0E:F1:5F:6B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8b:4b:bc:da:9a:de:ef:5d:3b:2f:29:95:75:38:e1:b4:b4: bb:09:cb:9f:76:76:17:34:0f:c9:91:0b:da:46:4a:26:57:a2: 3e:21:03:c9:9f:a9:2a:19:23:3a:b9:17:e2:ea:11:ae:6f:d4: 75:ce:65:26:5e:8a:4a:2e:14:ee:19:fa:ac:a4:6c:12:3b:24: 75:0e:8f:d1:79:98:eb:0c:46:13:38:b6:46:3b:74:86:69:da: 05:90:11:5d:73:20:bb:0d:a6:60:71:4d:29:44:99:cb:1f:02: 7c:e8:63:a4:e3:bd:d9:29:d0:f1:95:1f:d8:2d:50:49:08:c7: 3e:2d:4d:bd:f9:11:36:04:e9:3c:58:09:08:93:58:c7:7d:b9: e5:e2:9d:44:fd:0d:8c:0c:74:37:0b:4c:94:b9:c8:58:85:2c: e9:bc:df:95:bf:7a:81:2b:36:cb:79:d1:f1:d0:01:11:95:d8: 5d:23:d6:af:7e:82:ba:69:99:52:c4:ad:b7:8d:c3:04:ce:b7: cb:b7:fa:cf:a9:cf:6f:1d:da:74:25:ef:6f:9f:19:52:1e:29: 0e:20:20:59:3c:a8:bd:dd:c0:96:47:66:08:e4:e3:bb:f4:19: cb:30:c7:10:07:33:ab:f3:ca:6f:d6:fb:69:eb:69:09:49:84: 16:64:95:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjRp0U327dnTiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NDIwMWEyZDUtMGJlYy00NWQwLWE5YjAtNDQ0ZTAzYTNiYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1E8MsX9TPJNmKqw2a3spmO8GNRPiiQDh772 K4bXlxuWKC3sLbf5GlRGIJIF+PCoJrDVexp4gDdTooXH/Qwp7sUg3UhnaY9wqFLA gtTvp0z1Oxaotu+M+ZW1RvDQ5DMNtbLf0VeLyvI+D2gVhWiUu+xdxYh7APry5d5s k/K5lNECqrsKLVPkMKuCA3ciAXhZVe+Z1M6F6NWWOBUU1IKn4SU8polf3MKs4NJT lk2FId+n+OslE6oftrbBMg9nSG3j+Iyrj/Vp0x9Qu+mIGbrhCk6e6cO7BVb6pTfF tLMmsj/y5A3tdV9pgC7/34cCHhwExwi2Pno6M/vO/jYyauaE3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFad9jJV5v5uDL8wUGwtQ7xX2u6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA0NGFkYzQtMDM4ZS0z NWEyLThhY2EtY2ZlYTc5MjU1MGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOLS7zamt7vXTsvKZV1OOG0tLsJy592dhc0D8mRC9pGSiZXoj4h A8mfqSoZIzq5F+LqEa5v1HXOZSZeikouFO4Z+qykbBI7JHUOj9F5mOsMRhM4tkY7 dIZp2gWQEV1zILsNpmBxTSlEmcsfAnzoY6Tjvdkp0PGVH9gtUEkIxz4tTb35ETYE 6TxYCQiTWMd9ueXinUT9DYwMdDcLTJS5yFiFLOm835W/eoErNst50fHQARGV2F0j 1q9+grppmVLErbeNwwTOt8u3+s+pz28d2nQl72+fGVIeKQ4gIFk8qL3dwJZHZgjk 47v0GcswxxAHM6vzym/W+2nraQlJhBZkle4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:00 2025 by rpki-client