$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa File: 4251f11c-dc39-3d28-9d64-da12cafe6bec.roa (raw, json) Hash identifier: C1HHbC8CwJoyO+L2qIWmHSx+iVoYm46Lcop55+sLzko= Subject key identifier: 06:39:BC:A1:32:69:93:36:87:01:4D:A5:68:77:62:07:33:BF:32:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814632C04784E9B6F6806640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397208 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:32:c0:47:84:e9:b6:f6:80:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=37e1536b-ec75-4c7a-9cac-19ea9a67242b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:f0:f0:63:0d:59:d5:04:c0:a1:e6:a4:cc: 3e:d7:b5:7b:16:59:5e:9c:97:0e:f7:3c:d8:42:f7: 1a:88:1e:b3:84:f0:79:12:c1:ab:8b:4e:7e:7f:cb: 19:68:15:43:e9:36:50:f0:42:89:be:21:07:e0:e5: 30:ce:b3:bf:7d:75:6d:24:d8:ff:9d:b3:5b:99:fa: 1d:83:c6:e5:20:8d:84:db:ce:7c:5a:43:f2:1c:ac: 4e:13:86:b2:87:e0:f7:75:76:c8:f0:32:b4:67:66: 96:79:31:da:c2:95:c2:74:ab:bf:1f:a7:d5:c2:ef: f9:98:40:4f:93:71:d9:df:55:46:bc:5e:74:16:33: 7c:ca:a4:1c:2d:3a:1b:fd:2f:59:af:4a:9a:ad:71: 8a:90:43:cd:0a:95:7b:cd:0a:a6:9f:1d:fd:09:63: 33:4a:06:d1:ed:cc:d7:8e:be:d6:ba:f0:54:7c:f2: 48:80:b7:83:8d:40:2f:4e:f9:61:a2:52:ce:ff:d1: a7:e4:1b:f9:5b:7a:e9:a1:72:7f:87:61:74:bb:70: ce:68:0c:aa:22:45:b3:cc:b4:30:bd:df:2f:fb:e7: 42:e3:bc:a3:b5:c0:93:22:67:f1:b6:d2:b1:03:57: e3:74:40:a7:4c:86:65:3a:68:04:ba:cc:36:8f:3c: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:39:BC:A1:32:69:93:36:87:01:4D:A5:68:77:62:07:33:BF:32:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5f:cf:1d:0b:ff:d3:71:e6:8d:2c:5d:95:40:8d:1a:9f:6e: 8b:1c:23:fd:e0:9b:60:01:a5:b8:16:67:68:0e:72:2f:ea:d3: 52:f4:0f:41:d5:b7:29:44:95:6f:75:91:eb:66:2a:13:07:90: 85:1e:d5:95:1f:0f:4c:35:a3:e6:90:7e:7f:5b:6b:19:d4:11: a8:c5:4f:bf:28:30:6f:bc:e3:ef:53:6d:3c:f9:8b:f6:0f:78: 2d:c7:93:4c:7a:07:c9:46:7e:81:f4:0d:25:9a:75:0f:6f:7f: 5b:f7:03:b7:06:1c:0c:f4:a1:96:5d:a2:38:59:3b:b0:79:57: bc:c9:fa:00:61:c4:a5:3c:3f:3e:ec:11:39:43:cc:68:3d:45: e2:f9:d7:80:84:8d:1a:9c:a1:0f:b9:9f:cf:c4:a4:05:30:af: fc:d7:50:32:ab:46:4e:fc:ba:77:89:19:63:08:07:64:d2:be: b5:28:0e:fc:88:f8:f8:6b:a5:d2:0f:af:f0:bd:7e:c3:f2:32: d1:8c:65:c7:d1:a9:23:76:37:f7:90:f4:cc:e4:90:74:43:22: 17:92:be:f2:36:d7:77:06:16:51:2c:a4:a1:9b:53:dc:c9:1e: 18:91:6a:4c:17:fd:54:85:0b:d4:e2:18:15:c2:58:64:f7:9f: ba:0e:d0:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjLAR4TptvaAZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzdlMTUzNmItZWM3NS00YzdhLTljYWMtMTllYTlhNjcyNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVvw8GMNWdUEwKHmpMw+17V7FllenJcO9zzY QvcaiB6zhPB5EsGri05+f8sZaBVD6TZQ8EKJviEH4OUwzrO/fXVtJNj/nbNbmfod g8blII2E2858WkPyHKxOE4ayh+D3dXbI8DK0Z2aWeTHawpXCdKu/H6fVwu/5mEBP k3HZ31VGvF50FjN8yqQcLTob/S9Zr0qarXGKkEPNCpV7zQqmnx39CWMzSgbR7czX jr7WuvBUfPJIgLeDjUAvTvlholLO/9Gn5Bv5W3rpoXJ/h2F0u3DOaAyqIkWzzLQw vd8v++dC47yjtcCTImfxttKxA1fjdECnTIZlOmgEusw2jzyM0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAY5vKEyaZM2hwFNpWh3YgczvzKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI1MWYxMWMtZGMzOS0z ZDI4LTlkNjQtZGExMmNhZmU2YmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdfzx0L/9Nx5o0sXZVAjRqfboscI/3gm2ABpbgWZ2gOci/q01L0 D0HVtylElW91ketmKhMHkIUe1ZUfD0w1o+aQfn9baxnUEajFT78oMG+84+9TbTz5 i/YPeC3Hk0x6B8lGfoH0DSWadQ9vf1v3A7cGHAz0oZZdojhZO7B5V7zJ+gBhxKU8 Pz7sETlDzGg9ReL514CEjRqcoQ+5n8/EpAUwr/zXUDKrRk78uneJGWMIB2TSvrUo DvyI+PhrpdIPr/C9fsPyMtGMZcfRqSN2N/eQ9MzkkHRDIheSvvI213cGFlEspKGb U9zJHhiRakwX/VSFC9TiGBXCWGT3n7oO0AI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:13 2025 by rpki-client