$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa File: 69222725-8683-36f9-af8b-fa06924ec7d4.roa (raw, json) Hash identifier: XqD31JwsC24vNXhMiTWsnFUWCAhpJt54TW+BBTXqqh4= Subject key identifier: 01:04:B0:8B:83:E8:5B:52:EF:9B:A5:14:06:01:D9:FC:37:B4:90:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146370CC3FEC93FB0664E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396580 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:0c:c3:fe:c9:3f:b0:66:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=e51676e1-11d3-4a67-992f-51fd73761edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:78:81:47:62:08:a6:85:ea:db:82:07:19:6b: f1:b9:b2:94:1f:76:ea:6f:55:54:d3:a8:09:7c:6e: 3f:2d:4d:f0:32:6b:05:40:71:ef:88:a4:2b:f3:73: 61:07:ff:e6:49:93:ec:9d:c1:54:15:63:da:b9:46: d9:5d:92:cd:60:bd:6e:17:8d:16:dc:eb:df:7e:f3: da:07:90:d0:2e:18:fa:46:1e:85:f9:75:8b:5b:e8: 6e:d9:1a:a6:96:03:36:60:da:0c:f2:b4:19:dd:74: e2:04:0e:0c:53:0b:5c:a3:ce:3c:23:f5:b6:50:a9: f4:06:62:54:6f:54:ba:72:0f:50:c3:8d:cd:c4:36: ea:9e:dc:f9:31:e4:b4:41:30:f0:0c:ac:5f:93:dd: f0:d0:86:b6:2e:9d:46:8b:3e:32:2f:19:4f:5e:54: a8:36:ab:74:e3:8a:f3:d9:f3:3e:f0:a7:cc:5a:d5: a0:68:9f:be:1c:77:c4:52:10:c3:fc:3a:d0:70:98: 87:76:b2:69:6e:be:8e:36:ef:6b:e2:f3:19:f7:0d: 93:be:a4:dd:8e:d8:4a:60:3c:9c:40:1e:5c:f3:ca: d6:2b:cf:ea:c8:28:a3:56:7e:f6:cc:4b:f5:55:c2: 35:6c:e8:07:76:41:ac:45:b6:f8:d9:88:81:c6:c6: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:04:B0:8B:83:E8:5B:52:EF:9B:A5:14:06:01:D9:FC:37:B4:90:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:38:82:f0:bb:40:fc:e2:08:b5:d5:63:57:36:a8:d9:ee:78: ed:3e:7f:d1:02:4a:9b:11:98:1b:98:04:97:0f:e6:5e:6e:6c: a3:bd:a3:76:63:cc:29:72:e7:6c:d8:e3:6b:94:41:0a:be:96: b3:d4:b4:1f:0c:dc:44:b8:d9:a8:cf:94:7e:cf:0c:15:b0:82: de:6e:af:ee:af:e8:ee:0c:4c:23:2c:97:30:73:8c:7a:42:ea: ed:e1:33:e0:db:62:e1:6c:d9:ad:c6:22:d4:54:11:7f:1a:03: 46:c2:88:de:48:6e:ce:64:f9:39:16:27:28:63:50:81:70:13: 71:dc:1d:7b:84:82:3a:3e:c4:64:61:39:d1:1b:d9:6f:c9:dd: 8e:81:91:06:3b:71:0f:af:3c:6d:29:a6:d9:38:ab:ae:cf:04: 3c:d4:4a:87:a5:d2:7b:fd:70:32:e6:4f:f9:f7:d2:6c:32:18: 3f:ec:ea:c4:d6:21:d9:f8:5b:1e:08:f4:01:a1:d5:52:38:1c: 51:55:06:d4:07:9b:51:16:27:9e:c0:4c:25:45:40:c2:cb:35: 20:a6:0a:c2:eb:b8:d4:12:93:9a:63:7b:37:dd:fc:07:ce:99: ff:46:93:f6:99:c3:f3:ae:00:bc:b5:9a:ae:c8:e7:78:6c:79: 85:36:d5:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjcMw/7JP7BmToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTUxNjc2ZTEtMTFkMy00YTY3LTk5MmYtNTFmZDczNzYxZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73iBR2IIpoXq24IHGWvxubKUH3bqb1VU06gJ fG4/LU3wMmsFQHHviKQr83NhB//mSZPsncFUFWPauUbZXZLNYL1uF40W3OvffvPa B5DQLhj6Rh6F+XWLW+hu2RqmlgM2YNoM8rQZ3XTiBA4MUwtco848I/W2UKn0BmJU b1S6cg9Qw43NxDbqntz5MeS0QTDwDKxfk93w0Ia2Lp1Giz4yLxlPXlSoNqt044rz 2fM+8KfMWtWgaJ++HHfEUhDD/DrQcJiHdrJpbr6ONu9r4vMZ9w2TvqTdjthKYDyc QB5c88rWK8/qyCijVn72zEv1VcI1bOgHdkGsRbb42YiBxsb62wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEEsIuD6FtS75ulFAYB2fw3tJBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjkyMjI3MjUtODY4My0z NmY5LWFmOGItZmEwNjkyNGVjN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI84gvC7QPziCLXVY1c2qNnueO0+f9ECSpsRmBuYBJcP5l5ubKO9 o3ZjzCly52zY42uUQQq+lrPUtB8M3ES42ajPlH7PDBWwgt5ur+6v6O4MTCMslzBz jHpC6u3hM+DbYuFs2a3GItRUEX8aA0bCiN5Ibs5k+TkWJyhjUIFwE3HcHXuEgjo+ xGRhOdEb2W/J3Y6BkQY7cQ+vPG0pptk4q67PBDzUSoel0nv9cDLmT/n30mwyGD/s 6sTWIdn4Wx4I9AGh1VI4HFFVBtQHm1EWJ57ATCVFQMLLNSCmCsLruNQSk5pjezfd /AfOmf9Gk/aZw/OuALy1mq7I53hseYU21Yg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:34 2025 by rpki-client