$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa File: 60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa (raw, json) Hash identifier: cAyvgCqhRMzI+i1BxJNLgDfUBeLlFttLzBdQ93uSj/A= Subject key identifier: C6:86:78:EA:01:10:06:A2:B7:F9:82:C3:F7:66:E6:F4:FB:07:BB:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814631DEC2E2E51B430F8540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396578 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:31:de:c2:e2:e5:1b:43:0f:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=08a8c3fc-90a7-4c91-aad9-32d3f392bdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:df:0d:03:e7:29:11:ef:a0:82:15:35:3a: cd:94:ce:8a:62:7c:23:7a:f0:0b:72:b7:9d:b6:c0: d3:15:39:8c:f0:97:63:80:98:9c:8d:89:b3:e4:b2: 6f:c1:74:ab:18:cd:c2:76:ca:7d:0b:7c:b8:78:97: 24:1c:31:99:16:f3:17:e7:22:ac:1c:a8:72:cf:6b: 48:e9:79:a5:03:b9:ee:36:9e:8a:56:c1:e0:ca:0c: 96:1e:c2:34:08:d5:0c:b5:0d:7c:78:d4:d6:14:37: cc:af:ab:76:7e:51:0b:68:60:0f:95:08:f8:c1:22: a8:25:6e:9f:ae:77:c7:55:78:44:f7:e1:a5:f5:2b: e7:3d:14:a0:5c:de:f0:86:27:15:34:fe:3c:d3:1d: bc:76:94:8a:5c:cf:cf:4b:68:f6:f8:09:7e:3b:a9: 0d:57:27:f7:fc:ce:1c:0a:5d:03:6d:cb:1d:a6:9b: cc:d9:0b:2a:04:37:24:f9:e3:d0:a4:08:b5:7c:f3: 05:c0:5f:ee:31:b2:67:4e:cb:1e:06:78:d1:3a:64: 69:90:57:d1:99:c7:98:2b:5d:76:ac:9d:91:21:d7: 49:48:33:16:38:6c:f7:6b:63:97:63:96:20:fc:fd: a3:bd:e4:94:a1:a4:ca:00:eb:f0:0f:88:51:3a:10: b9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:86:78:EA:01:10:06:A2:B7:F9:82:C3:F7:66:E6:F4:FB:07:BB:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3d:be:86:ed:79:64:fd:95:ad:04:a5:a3:6a:2c:c2:c4:02: a7:fe:bf:66:e7:6a:45:67:d5:47:4d:d6:3a:7a:ab:b7:57:a6: b8:81:2d:23:c4:b0:89:2b:33:a0:03:68:44:71:e4:57:33:41: 84:7b:9b:29:58:23:4a:1e:7a:54:e1:0d:06:93:d2:01:7b:8b: b3:89:bf:f3:17:a9:61:11:eb:5c:2b:cd:1b:66:b6:fe:e0:9d: 68:03:c3:8a:2e:77:c4:bc:83:8d:d5:3e:d7:58:25:34:50:39: 46:01:ee:fd:ab:87:60:42:22:8b:d6:16:24:ab:b9:3d:34:89: 67:f8:ea:c5:a2:98:31:44:d5:dd:a2:3a:02:65:f9:3b:a3:a6: fd:df:52:88:8e:1f:4a:ba:64:65:4d:85:70:33:7a:08:6c:18: 36:22:b5:b0:00:7d:b7:8f:2e:2a:f9:f1:1f:b2:cb:9e:60:e0: 24:2e:4f:42:3b:ec:8e:0d:8e:05:81:d9:dc:58:46:52:10:ce: 6c:52:ad:33:e1:fc:bc:28:71:b2:70:9e:da:01:c8:b8:49:3a: 9c:32:1a:75:45:ad:e2:75:6c:18:82:f0:c5:29:6d:69:01:9c: 1d:a6:e9:86:2b:d6:a8:27:14:22:12:39:5c:ec:de:90:c8:12: c7:35:d7:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjHewuLlG0MPhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MDhhOGMzZmMtOTBhNy00YzkxLWFhZDktMzJkM2YzOTJiZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvnfDQPnKRHvoIIVNTrNlM6KYnwjevALcred tsDTFTmM8JdjgJicjYmz5LJvwXSrGM3Cdsp9C3y4eJckHDGZFvMX5yKsHKhyz2tI 6XmlA7nuNp6KVsHgygyWHsI0CNUMtQ18eNTWFDfMr6t2flELaGAPlQj4wSKoJW6f rnfHVXhE9+Gl9SvnPRSgXN7whicVNP480x28dpSKXM/PS2j2+Al+O6kNVyf3/M4c Cl0DbcsdppvM2QsqBDck+ePQpAi1fPMFwF/uMbJnTsseBnjROmRpkFfRmceYK112 rJ2RIddJSDMWOGz3a2OXY5Yg/P2jveSUoaTKAOvwD4hROhC5gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMaGeOoBEAait/mCw/dm5vT7B7v0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBiYWVlMGUtZmI0ZC0z MDdiLWFiYjktNmZkYmZjZWE3NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAw9vobteWT9la0EpaNqLMLEAqf+v2bnakVn1UdN1jp6q7dXpriB LSPEsIkrM6ADaERx5FczQYR7mylYI0oeelThDQaT0gF7i7OJv/MXqWER61wrzRtm tv7gnWgDw4oud8S8g43VPtdYJTRQOUYB7v2rh2BCIovWFiSruT00iWf46sWimDFE 1d2iOgJl+Tujpv3fUoiOH0q6ZGVNhXAzeghsGDYitbAAfbePLir58R+yy55g4CQu T0I77I4NjgWB2dxYRlIQzmxSrTPh/LwocbJwntoByLhJOpwyGnVFreJ1bBiC8MUp bWkBnB2m6YYr1qgnFCISOVzs3pDIEsc11xI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:32 2025 by rpki-client