$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa File: 4c22d199-24ad-3f30-bf94-3262d73626aa.roa (raw, json) Hash identifier: 9w+1jp0TrE6bHbnne2b2Rsj7JFCibAeOKPcPxSzkHWA= Subject key identifier: 53:57:D5:95:92:C4:37:6F:49:D3:2A:BB:B6:22:D1:49:C5:E9:BE:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F3FA57AC6BF5B439FD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 36625 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f3:fa:57:ac:6b:f5:b4:39:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=177ba9ed-a232-42a6-acbd-5175b06ad9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:6a:66:bd:75:25:a5:da:60:b5:51:18:f2: 2e:bc:e4:0c:18:eb:d5:bc:27:1c:87:75:44:2e:30: 34:f0:2a:43:09:06:22:8a:8a:a5:ac:2c:4a:f8:35: b2:fa:a9:e5:7b:95:a6:b6:74:87:44:8c:38:6f:f1: b8:69:ed:10:df:a3:d4:dd:2e:03:a0:c9:c1:e6:52: bb:a3:9a:4e:69:fe:9f:7c:40:93:ec:67:20:20:4e: 73:97:ce:d2:e9:3d:50:34:37:b9:01:e6:38:d0:6c: f9:ed:85:56:ba:9e:0d:a0:5d:6f:8d:40:b1:7b:9d: 35:91:57:da:6d:7a:17:4e:9d:1a:b7:36:6c:10:77: 93:3c:66:17:1b:ba:4c:01:2a:2d:e7:6b:d2:6a:f3: b0:84:16:f8:30:1b:6f:3b:b6:1c:40:db:d2:d1:17: 2e:13:ae:1c:6f:b9:e5:70:43:2a:fc:11:1e:31:73: 8f:95:22:11:60:31:e2:fd:99:bf:e1:78:e8:e2:4a: cb:ce:65:63:c0:2d:38:5c:f9:97:b5:2c:34:c8:ca: ba:a5:45:48:71:fc:af:99:0d:da:e3:25:85:77:8a: c5:a0:78:42:16:e1:e9:d8:6f:b4:b3:7b:6d:a5:5e: 4b:c1:f1:1a:39:af:55:7b:fa:62:46:3c:b1:59:46: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:57:D5:95:92:C4:37:6F:49:D3:2A:BB:B6:22:D1:49:C5:E9:BE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c2:06:c8:9e:e6:e3:3b:7c:f2:5e:39:a1:1f:47:1b:e1:ce: 00:33:f7:7a:59:ad:ee:a8:5f:50:cb:b2:43:9f:c8:e1:37:ee: 28:ed:94:35:b4:04:93:eb:4c:1c:86:20:e5:2e:a3:11:ad:b6: 75:da:54:40:c1:27:63:f7:e4:49:dd:bd:b5:61:d5:54:52:da: 25:a0:2e:77:32:8c:c2:51:9d:35:88:a4:16:7e:8c:35:8e:49: ee:2f:92:67:93:63:07:7a:a2:b9:70:9b:a0:d1:f9:58:87:50: d5:52:7e:f9:f0:17:55:9c:4b:f4:68:72:80:ab:d1:6b:34:2b: f2:9f:c7:61:15:2a:a3:04:3b:d6:85:a9:47:ac:6c:90:b3:73: e1:fd:cc:19:ad:42:89:2d:e0:84:5a:c9:fa:ac:21:a9:fc:3d: ab:b8:cc:a7:c2:bd:e9:23:78:15:76:f5:a9:03:1c:4b:4f:eb: ff:e7:91:f7:27:6b:05:9f:d5:53:ef:46:ba:de:3c:af:99:29: c7:0a:80:17:d9:75:9e:6d:12:fb:30:92:f7:7a:c6:73:46:c0: 2d:4f:80:8e:eb:15:f8:56:1b:25:94:2f:41:cc:83:21:28:2d: 20:06:66:a9:f5:5e:a9:8d:7d:4b:6c:02:3f:89:69:f1:63:c4: 47:c9:4d:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfP6V6xr9bQ5/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MTc3YmE5ZWQtYTIzMi00MmE2LWFjYmQtNTE3NWIwNmFkOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRNqZr11JaXaYLVRGPIuvOQMGOvVvCcch3VE LjA08CpDCQYiioqlrCxK+DWy+qnle5WmtnSHRIw4b/G4ae0Q36PU3S4DoMnB5lK7 o5pOaf6ffECT7GcgIE5zl87S6T1QNDe5AeY40Gz57YVWup4NoF1vjUCxe501kVfa bXoXTp0atzZsEHeTPGYXG7pMASot52vSavOwhBb4MBtvO7YcQNvS0RcuE64cb7nl cEMq/BEeMXOPlSIRYDHi/Zm/4Xjo4krLzmVjwC04XPmXtSw0yMq6pUVIcfyvmQ3a 4yWFd4rFoHhCFuHp2G+0s3ttpV5LwfEaOa9Ve/piRjyxWUYAxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNX1ZWSxDdvSdMqu7Yi0UnF6b4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMyMmQxOTktMjRhZC0z ZjMwLWJmOTQtMzI2MmQ3MzYyNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTCBsie5uM7fPJeOaEfRxvhzgAz93pZre6oX1DLskOfyOE37ijt lDW0BJPrTByGIOUuoxGttnXaVEDBJ2P35EndvbVh1VRS2iWgLncyjMJRnTWIpBZ+ jDWOSe4vkmeTYwd6orlwm6DR+ViHUNVSfvnwF1WcS/RocoCr0Ws0K/Kfx2EVKqME O9aFqUesbJCzc+H9zBmtQokt4IRayfqsIan8Pau4zKfCvekjeBV29akDHEtP6//n kfcnawWf1VPvRrrePK+ZKccKgBfZdZ5tEvswkvd6xnNGwC1PgI7rFfhWGyWUL0HM gyEoLSAGZqn1XqmNfUtsAj+JafFjxEfJTXA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:24 2025 by rpki-client