$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa File: 85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa (raw, json) Hash identifier: 5zOyytkiw13yle3BJcBr5mZOG5IMbjg4c1D6OmTpuf8= Subject key identifier: 7D:6B:9A:27:BD:0C:1D:9A:69:BB:EC:25:07:F2:C3:3D:48:6F:3F:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463884646B2555002F5020 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396573 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:38:84:64:6b:25:55:00:2f:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b02688f7-4553-419c-b17b-e6540204e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:99:33:31:a5:c6:19:d6:43:8e:14:f3:06: dc:f1:77:7e:a2:51:24:5d:a1:50:e1:22:9f:40:bb: ea:85:f7:49:bb:53:e9:34:a3:72:19:43:b4:0e:2c: aa:6c:ad:cb:93:25:2c:83:4d:37:55:ec:8f:3e:45: 9b:e0:ec:7e:c2:f5:1b:0b:85:d0:35:f4:bd:46:16: 0e:28:c6:10:4a:9c:18:7e:8a:fa:f3:bb:42:98:0c: c0:6c:48:f6:03:d0:54:c0:eb:80:14:d6:cf:ee:01: fa:45:60:69:56:60:56:82:a7:50:4e:b3:19:74:53: 65:66:a9:84:75:88:8b:3b:23:86:a9:93:61:4b:78: 24:b1:c9:9a:da:de:e4:5f:96:2f:75:55:75:97:da: 7d:18:de:02:18:bc:fd:1d:42:ab:dc:95:1a:50:b7: 94:0d:de:e2:2e:1e:8f:dc:4e:f1:63:ee:0c:9d:e2: ab:5e:84:e3:61:84:dc:e3:31:4d:f2:90:3d:67:42: 79:56:8a:ff:2d:7b:33:44:da:1f:ce:65:8b:38:d9: 82:43:02:87:9b:dd:30:84:4d:81:8b:6b:c0:cc:bb: cc:82:0e:77:e1:8a:45:58:0b:6f:82:ad:ee:5c:3b: cd:ee:ab:9b:5e:07:cf:53:10:36:6b:0a:bb:f9:3e: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6B:9A:27:BD:0C:1D:9A:69:BB:EC:25:07:F2:C3:3D:48:6F:3F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:07:e8:dc:1d:fc:06:93:50:d5:73:17:83:e3:aa:70:51:c2: 13:fe:7f:1d:fb:d7:aa:d7:0f:30:93:73:3f:66:c1:b5:73:37: 6e:35:17:9b:61:77:e7:75:0f:dc:37:32:f0:7b:dc:9d:9d:42: 67:58:8a:81:39:03:28:70:32:32:60:36:d7:bb:19:19:f5:ce: fd:10:37:28:73:a9:a2:b0:5c:43:2f:1a:38:71:44:83:4c:b2: e6:d2:9d:fb:4c:c8:57:24:46:a3:02:b9:25:46:4c:60:c4:55: 16:c1:1d:91:bd:b7:cd:8a:c3:b4:5c:a2:e4:34:25:f2:b9:96: 0c:c2:82:17:d4:90:0c:b8:16:67:3e:7c:8d:0b:03:0c:d6:5d: 93:95:ce:77:12:50:a7:83:56:1b:b7:a1:41:71:05:a7:b7:86: 3a:02:58:77:be:95:10:03:e0:cb:19:e8:3e:37:c3:4e:a4:c7: 8f:ea:a7:9f:c2:38:0b:9d:77:55:9e:69:3e:be:23:06:f1:53: ad:5d:25:ba:a9:3d:71:92:c4:cc:89:cc:90:36:48:08:55:46: 3f:59:c5:a2:1b:43:02:4f:ca:37:6e:55:1a:cb:eb:7f:87:15: bf:a7:25:1d:fc:80:9b:f1:6f:59:79:72:1e:a0:7f:ed:75:4e: 54:4f:5e:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjiEZGslVQAvUCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjAyNjg4ZjctNDU1My00MTljLWIxN2ItZTY1NDAyMDRlOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1saZMzGlxhnWQ44U8wbc8Xd+olEkXaFQ4SKf QLvqhfdJu1PpNKNyGUO0DiyqbK3LkyUsg003VeyPPkWb4Ox+wvUbC4XQNfS9RhYO KMYQSpwYfor687tCmAzAbEj2A9BUwOuAFNbP7gH6RWBpVmBWgqdQTrMZdFNlZqmE dYiLOyOGqZNhS3gkscma2t7kX5YvdVV1l9p9GN4CGLz9HUKr3JUaULeUDd7iLh6P 3E7xY+4MneKrXoTjYYTc4zFN8pA9Z0J5Vor/LXszRNofzmWLONmCQwKHm90whE2B i2vAzLvMgg534YpFWAtvgq3uXDvN7qubXgfPUxA2awq7+T4/LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH1rmie9DB2aabvsJQfywz1Ibz/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVhM2FjNGEtODNmMy0z ZjYwLTkwZmEtZTUwMmU4M2Y3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgH6Nwd/AaTUNVzF4PjqnBRwhP+fx3716rXDzCTcz9mwbVzN241 F5thd+d1D9w3MvB73J2dQmdYioE5AyhwMjJgNte7GRn1zv0QNyhzqaKwXEMvGjhx RINMsubSnftMyFckRqMCuSVGTGDEVRbBHZG9t82Kw7RcouQ0JfK5lgzCghfUkAy4 Fmc+fI0LAwzWXZOVzncSUKeDVhu3oUFxBae3hjoCWHe+lRAD4MsZ6D43w06kx4/q p5/COAudd1WeaT6+IwbxU61dJbqpPXGSxMyJzJA2SAhVRj9ZxaIbQwJPyjduVRrL 63+HFb+nJR38gJvxb1l5ch6gf+11TlRPXgY= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:32 2025 by rpki-client