$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa File: 42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa (raw, json) Hash identifier: PJ58Ac1HarMS7n0awEjRMGPzpyQ1LwGjiDdI7ABByCA= Subject key identifier: A9:5A:76:32:EC:8C:65:20:FF:E5:D5:BD:9F:E4:D5:01:FE:2B:2E:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146344F476CFE5E5E15B280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396582 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:34:4f:47:6c:fe:5e:5e:15:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b28a700f-7739-4025-8657-0319373791b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5b:86:f8:54:f6:aa:f1:b6:ee:89:5c:a2:34: 3a:23:42:9e:29:df:8b:0f:52:e3:1d:74:f1:7e:df: 95:77:2e:96:ac:c3:03:de:65:fa:b9:f1:75:28:31: ce:d1:e0:6a:26:ae:08:52:a2:53:ca:6c:ba:ff:26: 91:12:9b:ef:6f:75:6f:91:4b:f9:c1:c3:3f:27:b9: f6:9a:72:de:8a:19:a1:23:d3:ed:c6:1b:e0:84:ae: 76:f6:16:8a:c5:9d:7b:aa:2c:be:ad:f9:b1:82:0d: cb:55:4a:4f:59:07:ad:6a:64:74:f9:26:4d:62:28: e3:77:94:49:2c:5a:85:eb:78:bb:68:f7:86:58:b5: 21:79:58:57:6b:0d:1e:26:36:ef:63:56:31:1a:a5: 9f:66:5c:2c:ea:d9:90:62:b8:c7:11:49:d1:f8:23: 5f:ae:29:42:76:10:40:a6:cf:d7:a0:17:78:dd:9a: 20:3c:67:63:b0:24:4f:be:8b:3b:e2:c0:86:ca:19: 28:de:21:1d:7d:f5:a1:26:b0:b4:4b:89:26:cd:80: e2:92:b6:8e:94:10:0c:4e:89:e1:b4:8d:7a:57:80: de:31:15:d6:2e:91:29:82:f6:95:6e:cc:6a:1d:ae: a4:02:da:12:9c:ab:c4:c2:1b:2b:67:5d:cb:53:48: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5A:76:32:EC:8C:65:20:FF:E5:D5:BD:9F:E4:D5:01:FE:2B:2E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:25:71:ab:f0:ed:5e:0b:2c:85:18:97:aa:3c:bd:be:22:e5: af:9b:c0:a7:c8:2d:1f:08:36:b2:ea:b9:dc:6f:7a:92:42:ad: d6:45:e1:57:a9:33:e3:8e:9b:b5:0a:ce:54:de:14:68:61:84: 29:ab:ec:b2:56:d1:5d:ea:cc:b3:b0:4b:e3:84:35:4f:94:6a: ec:55:2e:c4:3a:b7:78:b7:c4:80:f7:4c:42:d9:44:3a:8e:21: 9c:63:f3:ce:c8:eb:3a:a6:13:19:10:21:6f:3a:b4:1f:e3:fc: 8d:e8:35:31:79:23:d5:f3:50:20:3e:01:b8:26:df:1c:03:70: 75:62:a7:2c:a6:d3:63:99:53:3b:b1:7f:5a:61:47:65:66:12: b2:21:20:86:31:a8:a4:16:87:eb:19:02:36:bf:c8:f8:68:b2: e4:f7:3c:77:ea:19:52:e4:56:71:2d:1a:e3:f6:fc:58:0c:53: 65:86:d6:bf:62:10:e0:f6:29:e2:77:eb:be:66:f4:44:28:b6: 1d:0f:9d:e1:e8:5c:b4:47:9a:bd:b7:57:04:13:47:0c:7f:ab: a1:9b:8d:57:8b:77:0f:9d:2e:a2:d1:2d:ad:98:96:3f:7e:e9: d9:d0:25:9b:f6:a3:55:41:12:a9:26:e4:b0:eb:3b:fc:14:93: a1:d2:bc:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjRPR2z+Xl4VsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjI4YTcwMGYtNzczOS00MDI1LTg2NTctMDMxOTM3Mzc5MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgluG+FT2qvG27olcojQ6I0KeKd+LD1LjHXTx ft+Vdy6WrMMD3mX6ufF1KDHO0eBqJq4IUqJTymy6/yaREpvvb3VvkUv5wcM/J7n2 mnLeihmhI9PtxhvghK529haKxZ17qiy+rfmxgg3LVUpPWQetamR0+SZNYijjd5RJ LFqF63i7aPeGWLUheVhXaw0eJjbvY1YxGqWfZlws6tmQYrjHEUnR+CNfrilCdhBA ps/XoBd43ZogPGdjsCRPvos74sCGyhko3iEdffWhJrC0S4kmzYDikraOlBAMTonh tI16V4DeMRXWLpEpgvaVbsxqHa6kAtoSnKvEwhsrZ13LU0hPYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKladjLsjGUg/+XVvZ/k1QH+Ky77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJmM2Y4ZjUtY2Q0YS0z NDBjLWFmODktOWYyMTNhNmY5MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAIlcavw7V4LLIUYl6o8vb4i5a+bwKfILR8INrLqudxvepJCrdZF 4VepM+OOm7UKzlTeFGhhhCmr7LJW0V3qzLOwS+OENU+UauxVLsQ6t3i3xID3TELZ RDqOIZxj887I6zqmExkQIW86tB/j/I3oNTF5I9XzUCA+Abgm3xwDcHVipyym02OZ Uzuxf1phR2VmErIhIIYxqKQWh+sZAja/yPhosuT3PHfqGVLkVnEtGuP2/FgMU2WG 1r9iEOD2KeJ3675m9EQoth0PneHoXLRHmr23VwQTRwx/q6GbjVeLdw+dLqLRLa2Y lj9+6dnQJZv2o1VBEqkm5LDrO/wUk6HSvOY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:38 2025 by rpki-client