$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ee6db1-953f-3ff8-80c5-ca7f30d897d5.roa File: 71ee6db1-953f-3ff8-80c5-ca7f30d897d5.roa (raw, json) Hash identifier: 7klS3cZLNkyYtJV9EI4GJz4WBJVl/SGRiOL4RFzsp54= Subject key identifier: 03:2E:3B:5C:51:09:F3:7D:72:46:2C:92:3B:D4:6B:47:C1:BC:0A:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463625495CC002630F5300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ee6db1-953f-3ff8-80c5-ca7f30d897d5.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397199 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:36:25:49:5c:c0:02:63:0f:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=e3a0c2b5-1966-4630-99ab-afc79937de91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:b1:01:66:4f:ce:2c:88:91:a0:ab:37:0e: 7f:b2:fb:86:76:17:c8:99:57:7e:2d:88:4d:7d:25: 77:ee:38:ad:8b:2d:76:01:a4:f9:5c:48:f7:94:fa: 75:e3:1e:9d:f1:67:70:9b:93:14:f0:e8:9e:7d:c7: 6c:3e:24:b6:98:1e:b7:33:47:ed:87:20:ed:1c:ef: 31:41:6f:25:e9:a1:39:ce:e1:85:e2:73:98:83:d8: 77:10:a2:20:1f:f3:32:4a:3a:4d:91:6d:a6:80:a3: 99:69:4c:5a:a9:5c:a3:c7:ee:98:f8:0a:14:fc:53: 89:26:60:ee:b9:55:d3:ec:8c:42:57:46:ce:e0:3e: 98:64:9c:bc:74:1c:fe:72:e5:9a:bd:37:e4:30:98: 9c:4c:4f:d4:69:6b:03:b3:b0:45:7f:6e:09:d9:57: 2f:02:0e:a3:7d:4f:f0:cd:4b:25:2e:7c:a0:e3:08: ca:e1:de:40:ce:eb:92:d0:bf:7c:2a:dd:38:b1:66: 6d:ce:49:c4:16:51:10:33:06:1c:57:30:2d:8f:e2: db:f1:21:7b:12:f5:8b:41:5c:89:bd:fb:d0:d8:90: 1d:dc:28:8c:3c:e0:2a:ea:bf:ba:56:28:1c:7b:a4: a9:33:37:f4:6d:5b:8f:b5:06:25:5a:6e:c3:1a:b4: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2E:3B:5C:51:09:F3:7D:72:46:2C:92:3B:D4:6B:47:C1:BC:0A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ee6db1-953f-3ff8-80c5-ca7f30d897d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:62:c0:11:c8:7e:5b:22:3e:5a:fb:d3:30:01:99:36:56:54: fa:40:d5:5b:5f:92:d6:ad:25:02:ca:1a:7b:bf:56:4c:af:91: 3a:9c:1d:1b:35:7e:e9:96:10:1b:1c:40:f7:ff:73:12:bf:13: 8f:30:51:b5:3d:b7:c4:1e:23:71:90:2a:54:83:49:85:de:8d: a0:2c:25:8f:40:76:bf:46:bd:8a:59:fd:95:6d:cf:97:45:fc: 6d:b1:df:dc:93:3c:ee:96:8e:7c:9c:ab:77:20:35:e1:e3:bf: 4e:70:12:0a:05:eb:af:37:d6:1e:ee:9f:ab:a4:35:c8:5a:2c: 7e:8f:89:1e:98:90:49:7f:bc:fb:74:1c:c5:a4:a0:14:0e:62: 3c:ab:54:22:39:2b:f8:48:15:f2:0c:3c:95:ba:4c:79:5a:55: fe:60:f1:74:e6:56:65:d3:14:97:fd:92:29:8c:7b:fb:3a:56: 33:7b:02:a4:36:46:2b:7e:83:41:84:35:b2:4d:4b:a0:a0:30: 7b:fd:b7:78:fa:0d:dd:9e:05:99:06:69:a3:36:1e:39:d5:05: 4a:2c:20:85:e8:4e:a7:35:ec:55:86:b9:34:22:26:56:a9:19: ed:a7:aa:35:98:16:01:99:5c:8d:de:fa:6a:bc:6e:31:14:e5: b3:3f:29:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjYlSVzAAmMPUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTNhMGMyYjUtMTk2Ni00NjMwLTk5YWItYWZjNzk5MzdkZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhyxAWZPziyIkaCrNw5/svuGdhfImVd+LYhN fSV37jitiy12AaT5XEj3lPp14x6d8Wdwm5MU8OiefcdsPiS2mB63M0fthyDtHO8x QW8l6aE5zuGF4nOYg9h3EKIgH/MySjpNkW2mgKOZaUxaqVyjx+6Y+AoU/FOJJmDu uVXT7IxCV0bO4D6YZJy8dBz+cuWavTfkMJicTE/UaWsDs7BFf24J2VcvAg6jfU/w zUslLnyg4wjK4d5AzuuS0L98Kt04sWZtzknEFlEQMwYcVzAtj+Lb8SF7EvWLQVyJ vfvQ2JAd3CiMPOAq6r+6Vigce6SpMzf0bVuPtQYlWm7DGrTLjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAMuO1xRCfN9ckYskjvUa0fBvAqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzFlZTZkYjEtOTUzZi0z ZmY4LTgwYzUtY2E3ZjMwZDg5N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG5iwBHIflsiPlr70zABmTZWVPpA1VtfktatJQLKGnu/VkyvkTqc HRs1fumWEBscQPf/cxK/E48wUbU9t8QeI3GQKlSDSYXejaAsJY9Adr9GvYpZ/ZVt z5dF/G2x39yTPO6Wjnycq3cgNeHjv05wEgoF66831h7un6ukNchaLH6PiR6YkEl/ vPt0HMWkoBQOYjyrVCI5K/hIFfIMPJW6THlaVf5g8XTmVmXTFJf9kimMe/s6VjN7 AqQ2Rit+g0GENbJNS6CgMHv9t3j6Dd2eBZkGaaM2HjnVBUosIIXoTqc17FWGuTQi JlapGe2nqjWYFgGZXI3e+mq8bjEU5bM/KWQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:55 2025 by rpki-client