$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa File: 462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa (raw, json) Hash identifier: 0jDT5Z2e94e94BMSL6Tk+Q/Ll8m77ny/OuZMhyQZECM= Subject key identifier: 3E:0F:05:55:71:D3:D2:10:49:4C:CF:F4:01:50:EF:4E:31:63:AF:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F44B1B70E446B2260080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 36618 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f4:4b:1b:70:e4:46:b2:26:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=469de6a2-2e24-4468-9829-38cee9347fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:73:f7:af:c4:43:0e:5c:c3:94:49:05:b8: 35:3c:b1:73:49:af:b5:1f:25:ca:8a:8a:76:67:0f: b1:3d:23:0c:ef:0d:b2:89:74:e9:b9:07:91:71:7d: a8:ce:a0:b8:b3:23:e3:53:ba:8f:7f:3d:6d:72:21: e0:65:0c:2d:97:78:ca:14:43:7f:22:3e:69:55:cf: be:16:1d:16:6f:89:ed:30:c0:78:39:6d:2f:e5:43: 98:af:6b:ef:0e:d3:59:0a:be:e4:0b:11:31:2a:e7: c8:21:3a:89:2e:7a:74:f3:f0:90:5b:b8:60:ef:c5: cb:c9:5a:04:b1:63:43:09:f9:a7:a3:2a:92:92:bb: 7a:35:55:f2:26:86:50:4e:e8:6b:06:f9:b5:6a:9a: 80:32:8b:86:bb:4d:8f:d4:28:64:6c:0d:cc:ed:5e: b8:84:cc:e4:aa:ac:ef:ae:78:26:b9:ab:f1:de:c8: c3:72:ba:78:f2:29:c8:58:1f:1e:50:c0:ad:94:10: a7:72:ee:47:0c:c1:65:4a:2b:85:ad:ba:60:1a:95: 19:64:90:96:9b:c7:9f:49:e7:0a:7d:31:c3:45:7c: 16:7b:67:0c:fa:70:23:89:6e:87:27:9e:3a:5e:47: 7b:ee:a5:54:91:52:4a:c9:dc:f2:0c:f3:af:e6:6a: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0F:05:55:71:D3:D2:10:49:4C:CF:F4:01:50:EF:4E:31:63:AF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cb:f5:64:87:43:66:c8:85:2f:f4:3f:85:98:55:ce:0a:d3: 00:0b:89:d8:d0:39:0e:ac:e7:58:f5:99:b9:17:d4:8e:f8:6c: cd:30:68:c4:fa:d4:6e:bd:f4:04:12:1c:f2:67:f5:3f:72:df: e1:8e:b1:94:be:61:f2:97:df:19:e0:e5:45:99:79:58:de:c7: 42:de:09:c1:c3:32:7a:ca:ae:7a:42:b5:7b:29:6b:34:3f:d8: eb:46:df:2a:08:14:b5:16:91:85:06:9c:f3:f9:c7:fe:2c:8b: 30:2c:ae:f4:b0:f6:36:45:38:41:fc:65:07:54:1d:69:8d:40: 25:f5:af:9e:f6:8a:f2:12:56:d1:17:97:1b:b4:12:74:70:92: 62:1a:d7:69:7f:4a:db:84:65:7e:fc:1d:2d:21:c2:e5:6f:00: 96:bd:43:6a:0f:d9:36:28:f4:65:17:95:d9:10:93:42:54:88: 69:2f:b9:18:53:fc:13:b6:30:1d:af:ac:ee:df:1a:81:9d:b9: c4:b1:09:ca:6c:ab:6c:5e:87:85:67:d7:b6:ee:5e:a9:be:ef: 86:62:1c:da:28:35:af:8d:2f:44:87:0b:b0:b5:f6:e0:fe:4a: 46:ea:d7:b8:c9:c5:ab:55:78:de:7f:6a:99:c3:fe:06:22:29: ad:cc:14:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfRLG3DkRrImAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NDY5ZGU2YTItMmUyNC00NDY4LTk4MjktMzhjZWU5MzQ3ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHNz96/EQw5cw5RJBbg1PLFzSa+1HyXKiop2 Zw+xPSMM7w2yiXTpuQeRcX2ozqC4syPjU7qPfz1tciHgZQwtl3jKFEN/Ij5pVc++ Fh0Wb4ntMMB4OW0v5UOYr2vvDtNZCr7kCxExKufIITqJLnp08/CQW7hg78XLyVoE sWNDCfmnoyqSkrt6NVXyJoZQTuhrBvm1apqAMouGu02P1ChkbA3M7V64hMzkqqzv rngmuavx3sjDcrp48inIWB8eUMCtlBCncu5HDMFlSiuFrbpgGpUZZJCWm8efSecK fTHDRXwWe2cM+nAjiW6HJ546Xkd77qVUkVJKydzyDPOv5mreEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4PBVVx09IQSUzP9AFQ704xY6/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDYyZTdjZWItZTMyZC0z MGI5LTg1ZGUtYWM0ZDY5OGUzZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfL9WSHQ2bIhS/0P4WYVc4K0wALidjQOQ6s51j1mbkX1I74bM0w aMT61G699AQSHPJn9T9y3+GOsZS+YfKX3xng5UWZeVjex0LeCcHDMnrKrnpCtXsp azQ/2OtG3yoIFLUWkYUGnPP5x/4sizAsrvSw9jZFOEH8ZQdUHWmNQCX1r572ivIS VtEXlxu0EnRwkmIa12l/StuEZX78HS0hwuVvAJa9Q2oP2TYo9GUXldkQk0JUiGkv uRhT/BO2MB2vrO7fGoGducSxCcpsq2xeh4Vn17buXqm+74ZiHNooNa+NL0SHC7C1 9uD+Skbq17jJxatVeN5/apnD/gYiKa3MFGs= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:41 2025 by rpki-client