$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa File: 5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa (raw, json) Hash identifier: OvBTwQcGjgaXREpWG0UlV3RVXQ3PN3czu7QJZ3s57NA= Subject key identifier: 0E:34:FC:E9:DC:D4:AA:79:7D:E5:97:F4:A0:7B:7D:D7:BB:B5:FD:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EF090C747DF8DA313F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 36627 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ef:09:0c:74:7d:f8:da:31:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5630cdca-0359-4ebc-9dc1-697960979967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:8b:0c:65:2d:0e:92:30:f7:43:e2:86:b6: d9:66:cb:74:ca:f9:4c:f7:cb:85:84:97:36:2b:5f: 3c:75:2c:2f:c5:e5:51:0e:e0:73:4e:27:00:d1:19: d5:58:5f:8c:0f:21:15:37:e9:bc:3e:69:2b:1f:ce: 2a:8e:23:09:33:d0:d1:cb:ef:28:ce:a2:7f:23:ea: 61:b1:97:7d:8d:5c:b8:80:1d:0b:e6:0b:85:b5:58: b0:0e:ee:91:5d:22:8e:cb:74:cd:7c:be:b1:18:92: 31:a4:03:28:bd:77:dd:c9:cf:a0:5c:d9:a9:0b:d8: bb:89:93:19:05:c9:f4:af:26:49:8c:d7:dd:21:69: 95:32:24:67:46:72:78:b4:83:f9:dd:4b:2a:f4:dc: f5:84:c5:08:87:54:02:7e:9d:98:f5:d2:f8:b5:68: ff:e4:d3:11:7a:3d:57:fa:fb:1a:d6:0d:87:fe:77: 42:2b:5d:bf:26:25:5d:ae:11:d9:de:37:d0:33:bb: c8:b0:07:d4:e2:b2:ff:81:9b:c2:d6:c3:4b:e7:7c: 98:5b:df:1a:2e:8f:25:ed:10:d4:3b:78:76:2d:5a: 01:55:c6:3b:cf:a4:70:0d:33:9e:93:b8:3f:70:94: 3f:99:b7:1a:08:78:6a:8d:96:c1:9e:b5:7d:26:38: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:34:FC:E9:DC:D4:AA:79:7D:E5:97:F4:A0:7B:7D:D7:BB:B5:FD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3e:0e:da:c3:d4:72:1a:11:8d:1e:26:99:54:49:e8:cb:27: f9:29:67:84:31:84:69:f0:3d:be:2d:a8:2b:ce:3d:2a:08:4b: 12:17:b6:af:04:9e:52:da:70:06:ef:63:04:68:b8:4b:4d:21: 09:a8:e9:9f:7f:7d:d6:99:78:98:16:3c:97:df:30:61:53:b4: 84:8f:73:cf:7b:cd:f2:f6:a7:56:64:ec:ea:ec:93:43:ba:1c: 3a:dc:b2:91:1a:58:23:f5:11:bc:24:c7:fb:5a:32:34:54:72: d3:d8:00:c5:b0:03:2d:7f:6f:8c:9d:3a:2b:c4:ac:ca:80:c0: aa:85:01:d7:7d:be:65:46:22:34:bc:8f:7a:3c:67:74:2e:94: 77:43:e3:0f:83:61:69:03:1a:e1:8f:84:87:14:1f:56:c5:46: eb:66:c8:f8:56:32:cb:ad:49:c7:8d:35:c4:80:96:da:23:69: f8:0c:03:9a:58:74:ab:fc:e8:ec:5c:a0:4b:dd:38:cf:4c:ca: 5f:04:59:a4:6b:81:81:c3:9b:81:26:02:75:8d:70:9f:c0:95: ad:4d:79:dd:60:1a:4c:bd:34:80:6a:ba:08:83:23:8f:84:b1: b1:f8:a3:41:f5:fe:1a:24:0a:25:a4:aa:04:c0:c1:59:fc:d2: 61:38:4d:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe8JDHR9+NoxP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTYzMGNkY2EtMDM1OS00ZWJjLTlkYzEtNjk3OTYwOTc5OTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL6LDGUtDpIw90PihrbZZst0yvlM98uFhJc2 K188dSwvxeVRDuBzTicA0RnVWF+MDyEVN+m8PmkrH84qjiMJM9DRy+8ozqJ/I+ph sZd9jVy4gB0L5guFtViwDu6RXSKOy3TNfL6xGJIxpAMovXfdyc+gXNmpC9i7iZMZ Bcn0ryZJjNfdIWmVMiRnRnJ4tIP53Usq9Nz1hMUIh1QCfp2Y9dL4tWj/5NMRej1X +vsa1g2H/ndCK12/JiVdrhHZ3jfQM7vIsAfU4rL/gZvC1sNL53yYW98aLo8l7RDU O3h2LVoBVcY7z6RwDTOek7g/cJQ/mbcaCHhqjZbBnrV9JjgfewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA40/Onc1Kp5feWX9KB7fde7tf2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWM4ZGM5YzEtMGE1Mi0z NDRlLWFhZDgtMWVmYzY2ZmJlMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEI+DtrD1HIaEY0eJplUSejLJ/kpZ4QxhGnwPb4tqCvOPSoISxIX tq8EnlLacAbvYwRouEtNIQmo6Z9/fdaZeJgWPJffMGFTtISPc897zfL2p1Zk7Ors k0O6HDrcspEaWCP1Ebwkx/taMjRUctPYAMWwAy1/b4ydOivErMqAwKqFAdd9vmVG IjS8j3o8Z3QulHdD4w+DYWkDGuGPhIcUH1bFRutmyPhWMsutSceNNcSAltojafgM A5pYdKv86OxcoEvdOM9Myl8EWaRrgYHDm4EmAnWNcJ/Ala1Ned1gGky9NIBqugiD I4+EsbH4o0H1/hokCiWkqgTAwVn80mE4TQA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:54 2025 by rpki-client