$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ab39e6-84cf-3447-b74c-0da93174d9d8.roa File: 61ab39e6-84cf-3447-b74c-0da93174d9d8.roa (raw, json) Hash identifier: CRkujjiOCa3Fn+myZNVRJbowhKfUFMtxd5AkXrio+HM= Subject key identifier: B2:30:76:A9:A2:73:27:0E:0F:E9:54:86:94:8F:4E:BF:54:2A:38:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463827B9A05A245CC07680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ab39e6-84cf-3447-b74c-0da93174d9d8.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36627 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:38:27:b9:a0:5a:24:5c:c0:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=76c94afc-1cf2-4e74-8ece-12db01a2e51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9f:61:73:40:80:9b:fd:e7:20:76:91:5e:bb: 3b:3c:75:b3:bc:7d:e0:4d:bf:d9:54:9a:2b:ac:a3: 3b:19:2a:12:e1:a1:de:ad:6b:9f:2b:ca:c6:bb:3e: fe:2d:bc:c7:8e:b1:f5:0e:25:1e:55:a4:60:0a:52: bd:52:96:bf:5e:1d:58:a9:fa:80:23:81:05:0e:1c: d0:c2:a6:e2:ac:49:9c:8b:3b:6e:c2:72:5c:e0:01: d7:48:48:6b:56:12:9a:64:7f:e5:bd:93:8a:9d:e3: bc:23:3d:1b:06:83:15:c1:92:50:63:90:c0:34:04: 37:a6:a8:0c:7a:80:1d:1b:71:2f:73:20:1f:e0:2d: d1:5c:72:09:f9:34:fd:80:7c:b1:f6:95:45:bf:d3: 45:ba:fd:00:a6:cc:a1:57:14:f1:ac:60:78:27:dd: 88:65:db:a3:ce:56:4a:f1:e5:93:3c:5c:61:a4:96: f5:b5:e1:e4:0c:9f:56:e0:8b:32:b8:f1:a1:2f:e4: 65:22:49:e3:c1:5c:8a:d8:e9:f0:d0:13:5e:6e:df: 82:df:97:1c:6d:0b:e8:d7:2a:60:47:9c:03:d4:2b: f7:f2:aa:09:82:76:fc:be:b4:c3:44:a2:04:fc:d6: db:49:05:03:5c:a4:21:99:1f:a0:4f:3c:40:d4:34: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:30:76:A9:A2:73:27:0E:0F:E9:54:86:94:8F:4E:BF:54:2A:38:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ab39e6-84cf-3447-b74c-0da93174d9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c5:0e:ae:e8:f1:ac:fc:0b:80:07:1b:2c:cb:71:91:32:fb: e0:bf:8c:5a:ac:5d:4f:ea:95:0f:df:09:f3:ff:dd:15:9e:d5: cf:b8:89:80:84:a7:cf:4d:84:4a:ad:24:02:63:31:09:1c:25: 1f:73:4e:96:e7:a8:4b:54:ca:9a:57:00:a9:96:79:fc:59:19: ae:5f:0f:c1:27:7a:14:1e:e4:ed:6d:6c:e7:b5:37:f6:76:d2: 0b:44:d8:cf:14:a1:e4:b5:db:83:2e:92:ac:c2:6c:cb:34:26: a0:1f:cf:2d:b2:26:99:65:d4:b6:1e:ef:98:ff:35:5f:31:a7: 4c:a2:81:5f:33:64:96:ae:fc:51:d2:6e:c0:6e:f0:16:68:84: 9c:15:a7:5b:28:02:d5:f6:60:69:6a:93:ca:85:e7:f6:e3:e1: e7:97:0b:26:6d:b0:ba:75:ba:ab:c7:4d:ea:37:fe:c1:3a:4a: 83:f6:1a:b9:3a:35:e2:4c:07:f3:11:6f:b3:9b:d4:41:65:69: 3b:21:92:21:51:6e:e1:f4:f3:1f:e8:07:72:43:b5:09:f0:ba: 1c:29:88:a1:cb:84:b6:30:23:34:ee:0a:9c:8a:32:c7:28:ce: 9e:f6:a6:7f:99:7a:40:c0:92:85:79:db:ed:47:26:b1:8a:5b: f8:ca:7f:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjgnuaBaJFzAdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzZjOTRhZmMtMWNmMi00ZTc0LThlY2UtMTJkYjAxYTJlNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p9hc0CAm/3nIHaRXrs7PHWzvH3gTb/ZVJor rKM7GSoS4aHerWufK8rGuz7+LbzHjrH1DiUeVaRgClK9Upa/Xh1YqfqAI4EFDhzQ wqbirEmciztuwnJc4AHXSEhrVhKaZH/lvZOKneO8Iz0bBoMVwZJQY5DANAQ3pqgM eoAdG3EvcyAf4C3RXHIJ+TT9gHyx9pVFv9NFuv0ApsyhVxTxrGB4J92IZdujzlZK 8eWTPFxhpJb1teHkDJ9W4IsyuPGhL+RlIknjwVyK2Onw0BNebt+C35ccbQvo1ypg R5wD1Cv38qoJgnb8vrTDRKIE/NbbSQUDXKQhmR+gTzxA1DRgJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLIwdqmicycOD+lUhpSPTr9UKjhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjFhYjM5ZTYtODRjZi0z NDQ3LWI3NGMtMGRhOTMxNzRkOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/FDq7o8az8C4AHGyzLcZEy++C/jFqsXU/qlQ/fCfP/3RWe1c+4 iYCEp89NhEqtJAJjMQkcJR9zTpbnqEtUyppXAKmWefxZGa5fD8EnehQe5O1tbOe1 N/Z20gtE2M8UoeS124MukqzCbMs0JqAfzy2yJpll1LYe75j/NV8xp0yigV8zZJau /FHSbsBu8BZohJwVp1soAtX2YGlqk8qF5/bj4eeXCyZtsLp1uqvHTeo3/sE6SoP2 Grk6NeJMB/MRb7Ob1EFlaTshkiFRbuH08x/oB3JDtQnwuhwpiKHLhLYwIzTuCpyK Mscozp72pn+ZekDAkoV52+1HJrGKW/jKfyI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:38 2025 by rpki-client