$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa File: 672bd727-d3cf-3f4c-b729-8e92852e3e14.roa (raw, json) Hash identifier: t5pjatuy3aIVz3qhC2lfrGwJlOgDqI4rPCRGh1M3lFw= Subject key identifier: 89:86:BA:11:23:CF:A5:39:CF:48:89:90:BD:14:B8:2F:45:90:B6:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463441B5443982052A6300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36624 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:34:41:b5:44:39:82:05:2a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=ec42a305-7f30-44ca-894b-15fbe5da896b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:67:e6:9f:2c:92:6e:04:78:d1:0d:29:f4: 18:68:dd:ae:84:b1:ce:51:ae:29:6e:9d:8e:b8:68: 93:cf:17:ea:a8:18:2a:4e:49:fe:d6:08:ea:9b:58: 87:2c:f5:6f:35:f4:91:4f:87:86:99:a0:61:0e:76: 3a:ab:8b:73:5f:d2:76:dd:f0:f8:8e:15:76:4f:0a: 7c:c9:07:21:38:8f:95:21:4e:91:66:62:08:a7:d0: 44:69:61:14:ef:eb:d7:da:43:12:de:15:ae:91:16: 85:07:50:73:fc:e6:2c:ec:38:c9:d1:0b:61:77:50: 75:a6:82:15:35:bf:39:74:f1:01:cd:02:8f:8e:9b: 19:c0:1b:b4:dd:70:d6:c9:62:1d:ec:13:07:f4:56: 29:8b:64:4c:d9:8c:80:69:38:e3:26:3c:1c:c2:5e: 5f:68:4c:4f:d0:99:f6:9c:b1:08:0d:02:91:90:57: 73:d2:20:45:2f:79:3d:af:7b:ed:ad:e9:cc:82:35: fd:43:d6:54:75:c9:e5:d1:2b:dd:97:a9:ce:07:f6: a9:cc:0c:4a:35:5e:8c:4a:d6:75:0b:4c:19:37:e0: d0:c7:99:da:17:a0:7e:29:1a:5c:d5:db:3d:61:91: ac:88:e4:dc:d2:90:85:38:5e:8a:f2:2a:c6:9d:13: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:86:BA:11:23:CF:A5:39:CF:48:89:90:BD:14:B8:2F:45:90:B6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b8:90:9a:05:66:08:fb:f2:1b:93:40:2c:54:cf:02:f2:09: 8b:04:86:50:65:b7:6b:ec:cd:f1:ab:3b:8d:24:55:0e:bc:68: 49:0f:0a:33:57:e0:2c:4d:83:24:1f:85:17:88:25:cd:e5:8d: f5:88:e9:28:5d:ea:fb:72:98:80:72:a6:c2:66:67:f2:b5:88: f1:59:a4:9e:c9:39:3d:a2:54:da:c1:34:df:14:c8:f0:a6:7b: b1:75:74:48:1a:bb:7a:94:8e:c3:37:25:e2:7d:f6:4c:11:1f: bd:16:00:c7:ab:11:64:9f:68:37:85:b1:e6:99:b0:91:09:83: af:85:60:e2:42:f3:49:17:ed:68:71:4c:f7:77:5f:7b:20:15: 97:2e:79:9e:42:57:21:ec:cb:27:75:71:cd:44:0f:f1:e0:e1: b7:a2:c3:37:f2:49:cf:d1:9f:e2:36:7b:0a:fc:5c:33:de:28: 78:4b:8c:32:1c:44:cd:33:7a:9c:ae:92:a9:2d:d8:ec:22:dc: 68:79:7b:40:29:0d:18:cd:47:79:e8:11:46:f6:09:38:7c:68: a3:ef:f7:55:a8:33:af:12:fb:e5:8f:d8:82:51:9f:ec:c2:01: f9:75:78:35:34:bb:5b:d5:ad:b6:66:92:01:87:eb:bd:31:57: a8:a8:3b:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjRBtUQ5ggUqYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZWM0MmEzMDUtN2YzMC00NGNhLTg5NGItMTVmYmU1ZGE4OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Bn5p8skm4EeNENKfQYaN2uhLHOUa4pbp2O uGiTzxfqqBgqTkn+1gjqm1iHLPVvNfSRT4eGmaBhDnY6q4tzX9J23fD4jhV2Twp8 yQchOI+VIU6RZmIIp9BEaWEU7+vX2kMS3hWukRaFB1Bz/OYs7DjJ0Qthd1B1poIV Nb85dPEBzQKPjpsZwBu03XDWyWId7BMH9FYpi2RM2YyAaTjjJjwcwl5faExP0Jn2 nLEIDQKRkFdz0iBFL3k9r3vtrenMgjX9Q9ZUdcnl0Svdl6nOB/apzAxKNV6MStZ1 C0wZN+DQx5naF6B+KRpc1ds9YZGsiOTc0pCFOF6K8irGnRO+lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImGuhEjz6U5z0iJkL0UuC9FkLYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjcyYmQ3MjctZDNjZi0z ZjRjLWI3MjktOGU5Mjg1MmUzZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIm4kJoFZgj78huTQCxUzwLyCYsEhlBlt2vszfGrO40kVQ68aEkP CjNX4CxNgyQfhReIJc3ljfWI6Shd6vtymIBypsJmZ/K1iPFZpJ7JOT2iVNrBNN8U yPCme7F1dEgau3qUjsM3JeJ99kwRH70WAMerEWSfaDeFseaZsJEJg6+FYOJC80kX 7WhxTPd3X3sgFZcueZ5CVyHsyyd1cc1ED/Hg4beiwzfySc/Rn+I2ewr8XDPeKHhL jDIcRM0zepyukqkt2Owi3Gh5e0ApDRjNR3noEUb2CTh8aKPv91WoM68S++WP2IJR n+zCAfl1eDU0u1vVrbZmkgGH670xV6ioOwA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:29 2025 by rpki-client