$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/787b98f7-6b3d-3f44-ba03-4b8adb0ee5ee.roa File: 787b98f7-6b3d-3f44-ba03-4b8adb0ee5ee.roa (raw, json) Hash identifier: IasDsRihMyDn5M/FKmgE8B4D3Z9BHkaJuH+dSBGXABw= Subject key identifier: 7F:2A:5B:43:52:F1:0A:8E:D7:E4:BA:28:B7:6E:22:B4:20:23:78:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463591D32006689BE22400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/787b98f7-6b3d-3f44-ba03-4b8adb0ee5ee.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396566 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:91:d3:20:06:68:9b:e2:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=bef28974-0ebc-4783-9853-4769761f7f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:59:de:08:17:0a:c9:91:81:44:b4:82:74:e5: 40:98:e7:ed:cb:ec:3c:75:df:94:34:65:65:67:aa: 56:a6:c6:67:8e:c4:cc:dd:84:48:39:55:bc:7e:a2: 3a:3e:ee:ea:c1:df:9b:0e:f1:b6:34:23:ec:6d:a9: b8:4c:6e:45:98:35:0e:a4:0e:da:d8:14:71:cd:81: 0c:78:67:53:c6:cd:14:f4:3d:29:b5:8a:9a:32:27: 5f:1d:53:0d:af:ed:ac:e5:2c:67:64:7f:52:b7:01: f4:55:93:cf:8f:67:b6:0c:26:06:38:50:87:37:8e: cb:06:d5:84:24:ac:94:42:60:02:19:e6:9b:c5:89: af:bf:8d:35:4f:7e:e9:eb:85:9d:4e:00:e4:93:e5: d1:b0:3c:ec:5e:02:cf:50:54:77:7d:0c:75:3a:a7: 26:a3:3f:51:32:28:6f:10:f6:93:f6:fe:83:8e:cb: a1:7e:af:ef:fa:12:96:0f:e1:65:4d:62:5f:78:94: 42:3a:02:41:4b:66:b1:3a:72:12:91:97:d6:6c:06: 2a:ce:c5:8c:a1:9c:2b:2c:41:b4:16:ca:1c:e6:2f: 72:00:a7:e9:25:a2:f5:ac:92:c0:4f:b1:5b:ba:31: cb:b9:77:f6:3c:77:e1:f5:44:8c:5c:10:c0:19:ee: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2A:5B:43:52:F1:0A:8E:D7:E4:BA:28:B7:6E:22:B4:20:23:78:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/787b98f7-6b3d-3f44-ba03-4b8adb0ee5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4a:0d:c2:89:f3:fc:41:64:a9:db:06:67:11:77:07:f6:b4: 7d:07:5e:21:d4:5d:d7:99:72:27:26:0e:0a:98:ba:1a:3b:02: 7f:52:a9:93:fa:c1:7f:cd:b2:d9:43:0c:7b:1e:56:5f:b3:27: 42:c9:29:7f:b2:3b:5a:be:27:a5:5c:85:0c:3a:3a:ac:d2:a6: 9b:d1:95:13:9a:b5:d4:5d:d3:37:23:0b:4b:b4:4a:4f:ac:8a: 5e:07:7a:79:a6:be:49:be:34:9f:9f:27:4f:13:36:82:52:3b: 91:3a:67:a9:21:69:03:54:a6:26:33:a4:cc:fd:ff:7c:b8:23: 97:72:7b:2e:a9:f9:32:5c:8f:50:ef:61:ca:59:c4:ba:62:20: 95:c3:93:ec:e6:fa:5e:aa:6f:ff:77:2c:4e:b5:46:a2:19:51: 7a:3f:d7:d9:99:5f:af:0a:28:6f:70:65:f8:ff:7f:90:a0:0b: 5a:d2:b4:65:3c:ca:e9:4e:2f:5a:d0:e5:9d:d2:bc:e2:7e:c1: 30:0b:65:7f:c3:91:d0:a6:e3:46:57:c9:ce:7b:e3:eb:bf:e9: d9:5a:29:3e:6d:62:55:de:23:e9:46:95:5b:ef:80:e8:dc:b8: 7c:03:a1:ae:be:f0:51:66:68:23:5a:5d:cb:cc:67:c8:0f:b7: ca:1b:29:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjWR0yAGaJviJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmVmMjg5NzQtMGViYy00NzgzLTk4NTMtNDc2OTc2MWY3Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1neCBcKyZGBRLSCdOVAmOfty+w8dd+UNGVl Z6pWpsZnjsTM3YRIOVW8fqI6Pu7qwd+bDvG2NCPsbam4TG5FmDUOpA7a2BRxzYEM eGdTxs0U9D0ptYqaMidfHVMNr+2s5SxnZH9StwH0VZPPj2e2DCYGOFCHN47LBtWE JKyUQmACGeabxYmvv401T37p64WdTgDkk+XRsDzsXgLPUFR3fQx1Oqcmoz9RMihv EPaT9v6Djsuhfq/v+hKWD+FlTWJfeJRCOgJBS2axOnISkZfWbAYqzsWMoZwrLEG0 Fsoc5i9yAKfpJaL1rJLAT7FbujHLuXf2PHfh9USMXBDAGe5hnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8qW0NS8QqO1+S6KLduIrQgI3hXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzg3Yjk4ZjctNmIzZC0z ZjQ0LWJhMDMtNGI4YWRiMGVlNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtKDcKJ8/xBZKnbBmcRdwf2tH0HXiHUXdeZcicmDgqYuho7An9S qZP6wX/NstlDDHseVl+zJ0LJKX+yO1q+J6VchQw6OqzSppvRlROatdRd0zcjC0u0 Sk+sil4Henmmvkm+NJ+fJ08TNoJSO5E6Z6khaQNUpiYzpMz9/3y4I5dyey6p+TJc j1DvYcpZxLpiIJXDk+zm+l6qb/93LE61RqIZUXo/19mZX68KKG9wZfj/f5CgC1rS tGU8yulOL1rQ5Z3SvOJ+wTALZX/DkdCm40ZXyc574+u/6dlaKT5tYlXeI+lGlVvv gOjcuHwDoa6+8FFmaCNaXcvMZ8gPt8obKWQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:44 2025 by rpki-client