$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76961f72-9ce3-30d4-81d5-14e5cf78b392.roa File: 76961f72-9ce3-30d4-81d5-14e5cf78b392.roa (raw, json) Hash identifier: S23vVLWlRjDBHuMb/zCBeaSX/QnfKeTDwqlT4H+PxX8= Subject key identifier: 14:F5:9E:30:F0:7D:AC:1A:DF:21:DD:48:EF:0C:25:7A:11:05:12:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EDB49E33B62129242C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76961f72-9ce3-30d4-81d5-14e5cf78b392.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396549 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ed:b4:9e:33:b6:21:29:24:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=b43ef02a-24a4-4452-afce-f2e1de9357c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:5e:a6:aa:41:02:62:39:cf:0e:b8:a4:48: 30:79:70:93:99:00:10:20:0c:1a:32:05:4e:36:46: 8a:b3:99:45:de:3f:e9:a0:04:54:af:d9:bc:b3:30: e1:bf:7b:38:68:1b:5c:b1:3f:2a:5c:da:64:88:84: dd:4a:c4:94:d2:a2:ba:34:c6:02:fb:1f:4f:21:d4: 46:d1:ce:88:a3:39:11:fe:f1:c6:d3:57:d8:72:9b: 2a:e3:f1:a9:6b:f5:78:71:b2:10:3d:30:98:7f:5f: 7f:a9:08:bf:6e:3b:ec:ac:97:0f:bd:40:5e:11:34: cb:2b:99:88:a8:34:e6:fd:25:62:81:76:e2:2f:08: 0d:39:fe:76:51:9c:e2:c3:df:14:20:dd:4f:d5:51: b2:4a:cd:71:11:06:a5:19:68:38:01:41:08:0d:85: 42:88:76:08:b4:57:13:b5:ca:7d:49:94:c3:c5:9b: 84:3a:5d:6f:a3:c5:5a:fc:f8:1e:3b:82:a6:22:ca: fe:8c:8e:33:af:42:0d:cd:37:0c:b4:72:65:39:29: b2:5b:a6:9e:54:a9:f6:26:ee:2a:35:bc:48:ad:32: f9:63:99:26:0f:a3:f9:47:46:4e:55:a5:85:92:13: 1c:87:34:61:d8:61:de:5d:23:1d:f2:e7:28:f5:14: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F5:9E:30:F0:7D:AC:1A:DF:21:DD:48:EF:0C:25:7A:11:05:12:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76961f72-9ce3-30d4-81d5-14e5cf78b392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:da:06:2d:57:d6:3f:33:40:ea:15:10:69:00:c4:1a:6c:f4: 8d:2a:2a:1a:da:1d:ed:c7:dc:0e:e7:93:cb:92:27:10:69:23: 77:ea:df:66:18:01:70:33:38:b4:83:a8:ff:92:50:a0:8e:8b: 8c:a9:ae:b8:3d:fd:47:4f:b2:fa:de:40:a4:be:8d:b5:81:37: 09:64:90:7b:b7:71:5b:40:6e:2a:5a:ea:25:0e:b4:69:fc:69: 1f:8a:a1:8d:6b:dc:62:12:6c:64:37:4e:67:9d:4f:bf:49:a7: 22:a5:91:ed:7d:74:10:aa:f9:27:ca:fe:04:71:b0:3e:02:d8: 1f:f9:30:72:63:b6:a9:c0:42:b7:83:0d:a6:63:72:7f:3e:ba: e2:2a:80:c2:d1:76:5f:97:22:43:e9:3e:a7:2d:3c:84:e5:9e: 4c:39:4e:23:05:8b:13:f5:7b:c5:66:47:fc:21:7a:b4:55:63: d9:b8:78:2b:4b:1a:5b:80:8b:8a:eb:99:16:7e:d2:31:96:4d: 98:4b:91:da:4f:ce:78:17:7e:49:04:c9:7d:ea:40:52:3e:af: 28:8c:e9:f6:06:8e:bb:da:c1:da:83:07:0a:1e:a9:56:fc:b2: ef:24:4f:1c:aa:e7:dc:fe:b0:02:e2:0c:c1:ef:f4:47:f5:7f: d3:cf:e7:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe20njO2ISkkLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YjQzZWYwMmEtMjRhNC00NDUyLWFmY2UtZjJlMWRlOTM1N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSZepqpBAmI5zw64pEgweXCTmQAQIAwaMgVO NkaKs5lF3j/poARUr9m8szDhv3s4aBtcsT8qXNpkiITdSsSU0qK6NMYC+x9PIdRG 0c6IozkR/vHG01fYcpsq4/Gpa/V4cbIQPTCYf19/qQi/bjvsrJcPvUBeETTLK5mI qDTm/SVigXbiLwgNOf52UZziw98UIN1P1VGySs1xEQalGWg4AUEIDYVCiHYItFcT tcp9SZTDxZuEOl1vo8Va/PgeO4KmIsr+jI4zr0INzTcMtHJlOSmyW6aeVKn2Ju4q NbxIrTL5Y5kmD6P5R0ZOVaWFkhMchzRh2GHeXSMd8uco9RRlgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBT1njDwfawa3yHdSO8MJXoRBRLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzY5NjFmNzItOWNlMy0z MGQ0LTgxZDUtMTRlNWNmNzhiMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAATaBi1X1j8zQOoVEGkAxBps9I0qKhraHe3H3A7nk8uSJxBpI3fq 32YYAXAzOLSDqP+SUKCOi4yprrg9/UdPsvreQKS+jbWBNwlkkHu3cVtAbipa6iUO tGn8aR+KoY1r3GISbGQ3TmedT79JpyKlke19dBCq+SfK/gRxsD4C2B/5MHJjtqnA QreDDaZjcn8+uuIqgMLRdl+XIkPpPqctPITlnkw5TiMFixP1e8VmR/wherRVY9m4 eCtLGluAi4rrmRZ+0jGWTZhLkdpPzngXfkkEyX3qQFI+ryiM6fYGjrvawdqDBwoe qVb8su8kTxyq59z+sALiDMHv9Ef1f9PP55o= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:25 2025 by rpki-client