$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44f15422-3ddb-35da-85dd-596f8c136df7.roa File: 44f15422-3ddb-35da-85dd-596f8c136df7.roa (raw, json) Hash identifier: eWLUgWcCeJDjR+Irsp+qTSfPUOdxgDmdbWMk7HCoU+k= Subject key identifier: 01:AB:74:06:53:0D:FE:F2:D9:2F:57:E7:29:55:06:8B:A3:D6:9A:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EAA082494D4D315EBC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44f15422-3ddb-35da-85dd-596f8c136df7.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 21313 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ea:a0:82:49:4d:4d:31:5e:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e5479f56-3f82-492e-9612-b7c6ea1b04bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:ba:f1:e5:ee:69:85:d5:05:91:90:bc:72: 43:43:ae:c4:c7:49:67:e9:d0:e3:7a:c1:34:67:5a: 04:95:85:4a:68:93:76:fe:98:c6:c1:92:cb:18:6e: 8d:0d:e6:e6:dc:62:24:31:bd:dc:93:4d:e5:c3:68: eb:20:31:e3:05:2d:a3:ed:14:3b:cd:ae:28:44:5a: 6a:6b:45:d7:6a:4b:84:d8:3f:38:92:f9:64:7e:05: 0e:d7:ee:e4:2d:f9:96:60:f5:b2:ab:12:9d:a0:96: bb:cb:e5:18:6e:6f:e8:ca:d4:ba:ec:69:1d:81:25: cb:b0:a0:8c:35:2a:82:f3:13:a2:b2:a2:1e:4e:91: 08:ab:d2:b3:9e:00:ac:ea:00:95:7d:df:f7:f9:f1: f9:b1:9c:29:b0:87:08:20:4c:a3:23:10:0b:2a:06: 43:84:d6:d6:83:f1:eb:58:11:da:3b:f2:48:59:3c: 1c:bd:11:60:78:1a:e9:43:40:46:24:c3:62:02:8e: 59:68:04:ff:70:f6:d4:b3:2e:3b:1f:ab:e3:a5:29: 4e:c5:60:a8:a5:e6:ea:2c:5a:0b:8c:4d:35:95:62: 44:69:11:d6:97:47:de:6c:d0:7f:c4:9d:9d:2f:d3: 65:84:a1:f1:fd:c7:2d:ee:a3:3a:b9:8d:a1:60:42: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AB:74:06:53:0D:FE:F2:D9:2F:57:E7:29:55:06:8B:A3:D6:9A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44f15422-3ddb-35da-85dd-596f8c136df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:aa:de:9a:b8:70:33:e0:7a:44:69:3f:7a:67:9e:75:b1:97: ab:21:c0:af:bd:53:48:19:07:d6:9c:35:20:4c:21:1b:3a:f5: cc:d5:fa:41:6e:86:dc:ce:d8:07:69:26:e8:8f:2e:7e:17:e7: 60:51:ab:e4:7f:50:f3:5a:73:b6:a3:66:35:80:7e:ac:88:a0: b0:26:8b:65:96:ac:27:5d:e6:06:fd:66:f0:f2:40:86:7d:bb: ad:4c:6d:9b:59:51:3c:c7:96:04:5b:1f:c4:ce:fb:56:d4:80: 7f:9f:9d:9e:b1:61:fe:2e:5c:4c:6a:ab:59:31:e9:e8:98:5f: 24:a5:78:9e:cd:a2:a7:8b:40:d6:8b:b4:01:03:31:6f:54:bd: 02:bc:75:32:f4:63:04:e8:2a:f3:ef:aa:3b:d5:1d:df:41:80: dc:a9:5f:6b:a1:b9:fc:86:64:8d:bc:a8:de:9e:70:cb:9c:27: ad:fb:bd:f7:aa:ef:4d:af:dd:49:c9:8e:3f:9e:d0:26:e9:aa: 97:7b:9f:99:bc:7d:5a:6e:a0:d0:a8:1e:12:27:9b:08:7f:15: bd:76:4f:13:ba:73:93:66:5e:80:62:0d:33:a4:85:c3:d7:bf: d3:a3:30:ba:d4:60:af:f1:4d:05:0c:3f:56:af:12:ba:80:a8: 1c:af:34:b8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOqggklNTTFevIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTU0NzlmNTYtM2Y4Mi00OTJlLTk2MTItYjdjNmVhMWIwNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/K68eXuaYXVBZGQvHJDQ67Ex0ln6dDjesE0 Z1oElYVKaJN2/pjGwZLLGG6NDebm3GIkMb3ck03lw2jrIDHjBS2j7RQ7za4oRFpq a0XXakuE2D84kvlkfgUO1+7kLfmWYPWyqxKdoJa7y+UYbm/oytS67GkdgSXLsKCM NSqC8xOisqIeTpEIq9KzngCs6gCVfd/3+fH5sZwpsIcIIEyjIxALKgZDhNbWg/Hr WBHaO/JIWTwcvRFgeBrpQ0BGJMNiAo5ZaAT/cPbUsy47H6vjpSlOxWCopebqLFoL jE01lWJEaRHWl0febNB/xJ2dL9NlhKHx/cct7qM6uY2hYEIjlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAGrdAZTDf7y2S9X5ylVBouj1pogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDRmMTU0MjItM2RkYi0z NWRhLTg1ZGQtNTk2ZjhjMTM2ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCAqt6auHAz4HpEaT96Z551sZerIcCvvVNIGQfW nDUgTCEbOvXM1fpBbobcztgHaSbojy5+F+dgUavkf1DzWnO2o2Y1gH6siKCwJotl lqwnXeYG/Wbw8kCGfbutTG2bWVE8x5YEWx/EzvtW1IB/n52esWH+LlxMaqtZMeno mF8kpXiezaKni0DWi7QBAzFvVL0CvHUy9GME6Crz76o71R3fQYDcqV9robn8hmSN vKjennDLnCet+733qu9Nr91JyY4/ntAm6aqXe5+ZvH1abqDQqB4SJ5sIfxW9dk8T unOTZl6AYg0zpIXD17/TozC61GCv8U0FDD9WrxK6gKgcrzS4 -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:28 2025 by rpki-client