$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe4778a-2da1-3ee6-8066-110a1103b5ad.roa File: 4fe4778a-2da1-3ee6-8066-110a1103b5ad.roa (raw, json) Hash identifier: LAV7d8rCBdMSZ2XDO8I0sT9Xmg6lKWonSbTlUWIgsZk= Subject key identifier: 4E:21:7D:78:D3:AD:E8:15:31:BE:2B:B3:2A:23:C5:E9:EC:30:10:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E2C16EDFA40F2D88DC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe4778a-2da1-3ee6-8066-110a1103b5ad.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 36619 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e2:c1:6e:df:a4:0f:2d:88:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=cd7654c5-986c-4aff-ab4a-e8245f490e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:23:9a:20:80:c2:3b:88:60:27:96:20:e7:ad: 49:76:13:3b:ac:19:91:3c:3b:80:3e:ec:4c:1e:09: 7a:ee:88:24:cb:e7:04:f4:44:b9:c8:07:89:81:2f: 87:db:55:7b:43:8c:13:ea:ea:6d:97:e1:27:ec:5c: f4:f1:1e:3d:93:db:59:4b:26:9c:57:2b:68:bb:66: 24:5c:fa:45:73:66:46:7e:1f:9c:b8:f1:80:a2:1b: ea:4b:2e:7d:e8:e1:fb:6b:4f:9f:c4:7c:41:4e:66: 79:97:cc:d2:d1:45:ed:20:7f:a5:bb:00:0b:87:0f: 7b:d0:a1:e3:b0:47:f2:13:7c:94:23:b5:66:4d:99: 71:7a:d5:a7:f7:87:e7:cf:38:1e:b1:c8:c0:7a:38: 38:e6:c6:c3:aa:14:6f:31:54:07:e4:cf:02:1d:28: b5:76:59:26:47:26:3f:31:a8:f0:7a:d5:c3:7c:bc: 1a:fa:88:31:87:90:2d:3c:f0:ba:64:78:32:85:7d: 8f:5c:6a:71:5a:1f:de:10:82:c8:9d:91:8b:99:a7: ce:2c:12:3d:bd:f5:f3:66:a9:08:4b:55:68:05:1a: 0b:f5:a5:c9:56:ee:f2:d5:3f:e4:a8:fa:c1:0f:6b: fa:5a:fe:18:9c:7e:b1:0a:c5:ad:13:6d:3d:68:f5: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:21:7D:78:D3:AD:E8:15:31:BE:2B:B3:2A:23:C5:E9:EC:30:10:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe4778a-2da1-3ee6-8066-110a1103b5ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6f:fe:af:9e:37:bf:43:06:89:f7:25:7f:cb:0a:39:c9:ad: 8c:2b:d6:b1:87:0c:c7:90:88:72:2a:92:5b:10:ad:f8:99:9f: d8:a6:01:1e:5b:88:a9:0d:b6:45:75:25:73:88:45:dc:ce:79: f6:78:67:1d:ec:45:f6:82:73:38:f5:83:e0:7c:f9:50:7b:26: f0:86:24:2d:04:ef:01:1a:49:06:70:65:9c:81:35:a7:6b:f7: 9b:e3:21:37:9f:f9:d1:9c:5b:b1:dd:e4:b9:78:e7:40:58:54: 4e:ae:96:8d:65:5b:14:5d:ce:ba:76:eb:a8:54:07:10:d1:af: 3b:75:54:00:ac:ad:f1:7b:a8:f7:c1:52:69:75:26:39:fc:d3: 03:3c:f1:32:0d:f9:4a:94:ab:f5:f3:36:6f:9f:38:41:12:a8: 7f:f1:1d:f4:09:aa:4f:c2:11:dd:f9:04:cf:f9:fc:a2:48:8e: 7e:68:55:2e:cc:f1:d2:99:52:dc:94:cd:71:2c:a5:c7:a1:82: ac:fc:82:2f:da:42:43:36:ba:51:84:df:4b:fd:63:f0:60:0c: 0d:f5:0d:f5:7a:35:e1:87:23:46:81:63:78:7f:3b:06:2f:37: ea:dc:26:7a:16:49:03:4d:dc:2a:86:cd:3c:ac:c6:aa:df:7c: 2d:68:16:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJeLBbt+kDy2I3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk Y2Q3NjU0YzUtOTg2Yy00YWZmLWFiNGEtZTgyNDVmNDkwZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiOaIIDCO4hgJ5Yg561JdhM7rBmRPDuAPuxM Hgl67ogky+cE9ES5yAeJgS+H21V7Q4wT6uptl+En7Fz08R49k9tZSyacVytou2Yk XPpFc2ZGfh+cuPGAohvqSy596OH7a0+fxHxBTmZ5l8zS0UXtIH+luwALhw970KHj sEfyE3yUI7VmTZlxetWn94fnzzgescjAejg45sbDqhRvMVQH5M8CHSi1dlkmRyY/ MajwetXDfLwa+ogxh5AtPPC6ZHgyhX2PXGpxWh/eEILInZGLmafOLBI9vfXzZqkI S1VoBRoL9aXJVu7y1T/kqPrBD2v6Wv4YnH6xCsWtE209aPVZAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE4hfXjTregVMb4rsyojxensMBCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZlNDc3OGEtMmRhMS0z ZWU2LTgwNjYtMTEwYTExMDNiNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdv/q+eN79DBon3JX/LCjnJrYwr1rGHDMeQiHIqklsQrfiZn9im AR5biKkNtkV1JXOIRdzOefZ4Zx3sRfaCczj1g+B8+VB7JvCGJC0E7wEaSQZwZZyB Nadr95vjITef+dGcW7Hd5Ll450BYVE6ulo1lWxRdzrp266hUBxDRrzt1VACsrfF7 qPfBUml1Jjn80wM88TIN+UqUq/XzNm+fOEESqH/xHfQJqk/CEd35BM/5/KJIjn5o VS7M8dKZUtyUzXEspcehgqz8gi/aQkM2ulGE30v9Y/BgDA31DfV6NeGHI0aBY3h/ OwYvN+rcJnoWSQNN3CqGzTysxqrffC1oFjE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:51 2025 by rpki-client