$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa File: 4339716f-1035-3a93-8a86-6a2a6d14ef21.roa (raw, json) Hash identifier: 17xjSOYAC7VZfjjRF0irbkufXMFGFff0kCVvgVB1rLM= Subject key identifier: D9:BB:21:38:A0:BD:A2:74:4A:86:98:97:2B:E9:2B:B3:84:5C:A8:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814637381EDF480F4D0A9480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396543 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:38:1e:df:48:0f:4d:0a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2c87da41-8aa0-4517-954b-dba715999d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:de:08:47:5f:a0:b5:c7:1a:1b:b9:35:ea:16: 8d:d5:56:93:1d:10:e4:aa:4f:55:75:b9:d0:a3:8b: 64:b2:ef:fe:d1:82:6e:38:6a:78:44:a7:4e:ea:0c: b0:83:91:0f:8d:3e:ae:23:dc:42:84:e5:a7:82:fa: 8a:88:58:86:8b:68:7b:b3:80:f8:b8:00:df:f2:b9: 84:7d:70:ae:e0:c1:46:9e:92:e3:a7:32:9a:ea:72: fa:a4:54:17:d7:64:7d:4a:f6:5f:ac:7b:3d:ec:65: 01:a7:85:ae:e1:cd:c7:c7:6e:9f:e4:a9:be:89:2f: e4:6e:f5:6e:22:79:69:c3:61:3e:4b:a9:7b:f0:02: 64:08:37:b2:9c:87:1b:8c:ea:bd:35:c9:da:ae:86: 34:6f:83:90:3a:7a:15:a3:72:c4:94:fb:dc:d8:9d: 5d:70:84:dd:8a:fc:a8:82:1e:b6:f1:58:4a:8a:f3: 1c:c1:d9:2d:80:5a:63:3e:4e:31:36:03:89:a5:31: 52:b7:93:c1:f0:2c:ad:26:2a:ab:c3:47:21:df:40: 29:45:a7:7d:ac:4b:e2:d7:67:75:24:ee:a8:a4:de: 2d:0d:e7:49:a9:b7:19:0a:52:66:c1:93:63:e3:2a: a1:5c:3a:d0:2b:5b:22:50:a3:47:0c:c2:c1:e3:c8: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:21:38:A0:BD:A2:74:4A:86:98:97:2B:E9:2B:B3:84:5C:A8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8f:b1:47:6c:25:6a:1b:36:fe:a8:ac:cf:73:6f:a0:3c:bc: 76:9b:ae:c8:21:9a:31:bf:bd:b2:cf:63:d1:45:8f:09:81:b2: cf:be:0f:d6:b5:3f:86:e1:c4:6e:a4:da:5a:c4:bf:95:99:47: 57:04:05:19:52:e1:55:6c:b8:9c:39:a1:86:09:24:3c:86:fc: bd:f8:db:9d:a2:c1:d1:94:0e:05:d8:bb:bf:45:ab:e4:fd:53: 17:8c:5d:22:db:4f:22:a3:68:1a:78:e2:c7:71:0a:45:5c:e7: 8f:1a:c8:ba:a3:26:a5:bb:d4:38:8f:23:0c:0d:b3:d4:48:09: 35:e6:32:a2:3f:0e:06:49:69:7d:ae:41:c4:73:0f:4d:85:b5: 2a:ad:2a:63:13:f2:6d:f0:7e:aa:fd:de:21:7e:cc:1a:5b:9f: df:4c:79:ed:59:4d:ac:25:01:a4:a7:2f:b1:b5:7d:90:b2:d8: 20:97:3b:d1:88:85:54:d6:1c:60:df:19:81:a4:40:eb:1d:96: de:67:d6:4a:39:50:4c:9b:9b:ee:15:22:95:88:b6:71:61:e8: 2e:78:43:41:57:55:a0:c2:b2:5c:89:4a:bb:8c:81:fc:38:78: d5:63:cd:c1:54:da:6f:e1:e1:2b:a6:90:f2:21:2a:83:3a:db: 7b:fe:8c:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjc4Ht9ID00KlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmM4N2RhNDEtOGFhMC00NTE3LTk1NGItZGJhNzE1OTk5ZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN4IR1+gtccaG7k16haN1VaTHRDkqk9VdbnQ o4tksu/+0YJuOGp4RKdO6gywg5EPjT6uI9xChOWngvqKiFiGi2h7s4D4uADf8rmE fXCu4MFGnpLjpzKa6nL6pFQX12R9SvZfrHs97GUBp4Wu4c3Hx26f5Km+iS/kbvVu Inlpw2E+S6l78AJkCDeynIcbjOq9NcnaroY0b4OQOnoVo3LElPvc2J1dcITdivyo gh628VhKivMcwdktgFpjPk4xNgOJpTFSt5PB8CytJiqrw0ch30ApRad9rEvi12d1 JO6opN4tDedJqbcZClJmwZNj4yqhXDrQK1siUKNHDMLB48hoVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNm7ITigvaJ0SoaYlyvpK7OEXKjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzOTcxNmYtMTAzNS0z YTkzLThhODYtNmEyYTZkMTRlZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKPsUdsJWobNv6orM9zb6A8vHabrsghmjG/vbLPY9FFjwmBss++ D9a1P4bhxG6k2lrEv5WZR1cEBRlS4VVsuJw5oYYJJDyG/L34252iwdGUDgXYu79F q+T9UxeMXSLbTyKjaBp44sdxCkVc548ayLqjJqW71DiPIwwNs9RICTXmMqI/DgZJ aX2uQcRzD02FtSqtKmMT8m3wfqr93iF+zBpbn99Mee1ZTawlAaSnL7G1fZCy2CCX O9GIhVTWHGDfGYGkQOsdlt5n1ko5UEybm+4VIpWItnFh6C54Q0FXVaDCslyJSruM gfw4eNVjzcFU2m/h4SumkPIhKoM623v+jDM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:13 2025 by rpki-client