$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f5b7222-7d03-358a-8153-c7097f0f2663.roa File: 4f5b7222-7d03-358a-8153-c7097f0f2663.roa (raw, json) Hash identifier: B1Lgrpm6sSFhyF1VxyaxeMzSGfHIBwF0h1Vt3UGkLS4= Subject key identifier: 0E:58:20:98:E2:00:52:64:50:18:6B:86:23:01:9F:90:0C:7A:30:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F2A33362FB60102A3380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f5b7222-7d03-358a-8153-c7097f0f2663.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396577 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f2:a3:33:62:fb:60:10:2a:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=4f6112c5-8ad5-4665-9a6f-6a30da234c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:6d:a8:49:16:a1:a4:db:6c:e5:ca:e5:6b: 04:d7:77:ee:1d:05:f7:8b:70:fb:79:ae:75:b1:ab: be:9c:c5:cd:2c:4f:5f:cc:8d:ce:a7:21:a4:bf:e3: 46:4c:2d:81:da:e3:5a:15:2b:a5:cb:59:69:1f:94: c1:b0:87:96:66:83:7a:1a:b9:e2:9a:71:c8:c3:d0: 87:97:8c:af:58:bd:eb:eb:e5:93:4a:d8:6f:61:81: ba:b4:b4:80:15:4b:56:32:d8:48:90:84:07:0f:fd: 3a:d7:ac:61:9e:2f:2b:c1:df:76:22:64:80:8e:b4: 6b:33:23:86:61:ab:4a:63:3a:7a:13:06:50:05:1f: 51:75:30:a5:45:13:a8:7c:64:e2:a1:8a:55:ba:86: c8:dd:d8:ef:af:05:57:1f:36:0b:5a:c3:a5:6c:49: de:f5:a2:19:0f:66:d6:5b:56:6d:f7:f3:60:d5:54: a3:51:d8:4c:f0:fa:2f:16:a3:ae:ff:5f:03:2f:f0: ae:ae:02:88:05:81:26:50:e8:94:57:07:99:0d:15: e2:f4:f9:8f:8a:c8:50:04:91:4b:89:c1:a2:6e:aa: ac:35:5b:4f:f7:ea:b5:0f:45:4a:0c:07:bd:7c:0b: bc:f2:03:f8:9f:bc:f9:cf:63:0f:c2:56:b4:84:1f: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:58:20:98:E2:00:52:64:50:18:6B:86:23:01:9F:90:0C:7A:30:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f5b7222-7d03-358a-8153-c7097f0f2663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:8a:47:45:5e:df:23:bf:c6:e7:90:28:aa:6a:7d:f7:4c:98: ad:03:ca:a7:db:0b:e4:34:7f:bf:d1:d9:29:10:39:1a:de:60: 47:05:fa:41:52:7d:6a:17:15:25:b0:6e:38:dd:95:81:7c:a2: e2:1d:50:99:7b:cc:42:e3:38:f3:5b:27:ab:1b:54:2f:3a:72: 74:3b:77:47:fc:b7:39:97:9f:54:be:96:e7:56:1f:7f:e3:39: ef:9d:19:b8:c8:5d:6f:6d:f9:05:92:1b:b3:2b:67:47:98:bf: 88:11:6c:69:56:a8:a3:ac:2e:22:20:e7:6b:ab:3c:60:ee:e6: 27:75:74:78:18:ca:43:46:f2:b2:d1:6d:14:5a:1c:fe:43:c6: 7b:52:f5:72:d8:55:82:b6:b6:27:a0:05:c2:49:7f:70:b1:0f: b4:b9:0e:d0:ad:0a:6e:cd:65:f6:cf:27:a0:f6:93:a8:b2:27: e6:a3:72:bf:97:a7:56:6c:01:96:57:45:bc:f6:b8:b7:ec:2e: 1c:90:8d:a1:b9:ec:23:b4:5c:8d:97:12:0e:2c:83:46:5b:ae: 46:d0:65:5c:54:b3:5e:e2:22:3e:15:6c:ad:31:18:3b:be:2d: 51:1f:16:ac:cd:86:91:56:4b:7c:a3:ce:4b:aa:10:9b:04:63: e2:dc:84:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfKjM2L7YBAqM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NGY2MTEyYzUtOGFkNS00NjY1LTlhNmYtNmEzMGRhMjM0Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJxtqEkWoaTbbOXK5WsE13fuHQX3i3D7ea51 sau+nMXNLE9fzI3OpyGkv+NGTC2B2uNaFSuly1lpH5TBsIeWZoN6GrnimnHIw9CH l4yvWL3r6+WTSthvYYG6tLSAFUtWMthIkIQHD/0616xhni8rwd92ImSAjrRrMyOG YatKYzp6EwZQBR9RdTClRROofGTioYpVuobI3djvrwVXHzYLWsOlbEne9aIZD2bW W1Zt9/Ng1VSjUdhM8PovFqOu/18DL/CurgKIBYEmUOiUVweZDRXi9PmPishQBJFL icGibqqsNVtP9+q1D0VKDAe9fAu88gP4n7z5z2MPwla0hB+9ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA5YIJjiAFJkUBhrhiMBn5AMejCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGY1YjcyMjItN2QwMy0z NThhLTgxNTMtYzcwOTdmMGYyNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqKR0Ve3yO/xueQKKpqffdMmK0DyqfbC+Q0f7/R2SkQORreYEcF +kFSfWoXFSWwbjjdlYF8ouIdUJl7zELjOPNbJ6sbVC86cnQ7d0f8tzmXn1S+ludW H3/jOe+dGbjIXW9t+QWSG7MrZ0eYv4gRbGlWqKOsLiIg52urPGDu5id1dHgYykNG 8rLRbRRaHP5DxntS9XLYVYK2tiegBcJJf3CxD7S5DtCtCm7NZfbPJ6D2k6iyJ+aj cr+Xp1ZsAZZXRbz2uLfsLhyQjaG57CO0XI2XEg4sg0ZbrkbQZVxUs17iIj4VbK0x GDu+LVEfFqzNhpFWS3yjzkuqEJsEY+LchKI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:35 2025 by rpki-client