$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa File: 8a471311-857d-3cf9-8b32-779e318296f8.roa (raw, json) Hash identifier: /TOEE6eyjC5dFku9ROP+xQR9UDiLsVgCJs+x1BOLOzo= Subject key identifier: 68:68:06:3E:E5:DC:5D:CA:8A:8F:2B:4F:46:29:34:26:97:C3:F5:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EFD4E6515DF3C945EC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 36632 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ef:d4:e6:51:5d:f3:c9:45:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=e2830484-712f-4f76-9725-73e89016ed12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:6f:27:59:33:00:c6:83:41:b1:6e:31:51: ba:99:3f:20:f9:1a:48:e1:c3:48:49:a3:f2:6e:c2: b0:ab:b1:2b:ad:cf:31:c2:62:3c:32:1c:16:58:62: 92:8a:79:21:1e:58:77:cf:9f:97:55:b8:15:10:09: ed:cb:22:f8:93:ac:67:16:c9:2e:61:2f:a2:82:2a: d4:02:27:d8:82:5a:e8:b1:3c:57:72:18:4b:4d:0e: 61:b6:03:bd:13:1e:bd:92:ca:80:4e:ee:2b:fe:9b: 81:76:62:ee:1d:df:94:44:e8:b6:2b:a2:d6:e6:15: 5f:6e:0f:47:d7:a8:64:67:a5:ef:b1:47:41:47:ed: b9:65:c6:8b:e7:28:27:cf:26:0b:5d:d5:af:08:60: 51:75:4e:f4:05:ae:91:92:e3:4c:29:40:e8:be:2f: aa:20:d5:4e:a1:af:96:76:00:98:a5:47:df:34:91: b3:28:00:4e:6d:ca:84:12:7f:b3:a8:5e:44:cf:68: 83:a8:53:54:43:17:7d:fa:0b:ac:41:20:75:68:63: 7b:44:a7:b5:af:4c:ea:fe:d1:8f:a4:a8:9a:c6:65: 8b:ad:0c:fa:39:96:b5:cf:0a:fc:4b:75:e6:7c:db: 79:f8:ce:e6:6f:eb:5d:40:08:71:05:83:8f:21:58: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:68:06:3E:E5:DC:5D:CA:8A:8F:2B:4F:46:29:34:26:97:C3:F5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2e:d4:f8:0d:a1:11:ff:c6:58:d1:b0:4d:ac:b1:85:0d:3e: 43:80:ed:3a:ee:96:ac:e7:c2:37:e5:f2:52:a7:29:72:4f:58: ad:13:f2:c8:df:21:41:f9:9e:86:0b:31:67:be:69:ce:b2:b3: ba:b4:7d:81:88:ca:67:18:23:b2:32:9c:7f:e4:70:a4:1d:79: 66:e4:57:15:a3:1c:b6:c7:b4:4f:5d:17:6a:63:39:bb:20:f4: 72:c2:b9:1d:43:10:6b:f5:6a:04:92:bf:c8:55:bd:17:87:b5: 1d:db:ea:89:0b:cf:64:2a:27:41:f9:b3:a0:ec:4a:79:9b:83: 93:c1:6b:9e:4e:0d:cc:fc:d5:e6:34:79:d4:b9:55:60:93:38: fb:3d:12:43:97:df:0b:d9:78:9f:ee:24:42:9d:e9:68:bf:8d: b5:af:30:21:12:8e:2e:81:e1:b4:24:dc:fc:f6:cf:53:55:2e: 3e:6f:2a:dd:35:ab:bc:0b:36:28:67:d5:bd:94:91:c5:3b:14: 04:27:64:87:ad:cc:95:10:b8:75:68:18:3c:0f:56:6e:57:00: a8:95:55:3d:3e:21:b2:78:02:2c:42:d7:35:43:d9:06:d8:da: 83:01:7a:ae:f4:fe:43:14:5a:27:8d:16:b6:42:a6:25:1b:94: d4:88:ad:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe/U5lFd88lF7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZTI4MzA0ODQtNzEyZi00Zjc2LTk3MjUtNzNlODkwMTZlZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRJvJ1kzAMaDQbFuMVG6mT8g+RpI4cNISaPy bsKwq7Errc8xwmI8MhwWWGKSinkhHlh3z5+XVbgVEAntyyL4k6xnFskuYS+igirU AifYglrosTxXchhLTQ5htgO9Ex69ksqATu4r/puBdmLuHd+UROi2K6LW5hVfbg9H 16hkZ6XvsUdBR+25ZcaL5ygnzyYLXdWvCGBRdU70Ba6RkuNMKUDovi+qINVOoa+W dgCYpUffNJGzKABObcqEEn+zqF5Ez2iDqFNUQxd9+gusQSB1aGN7RKe1r0zq/tGP pKiaxmWLrQz6OZa1zwr8S3XmfNt5+M7mb+tdQAhxBYOPIVj2dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGhoBj7l3F3Kio8rT0YpNCaXw/XgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGE0NzEzMTEtODU3ZC0z Y2Y5LThiMzItNzc5ZTMxODI5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYu1PgNoRH/xljRsE2ssYUNPkOA7Trulqznwjfl8lKnKXJPWK0T 8sjfIUH5noYLMWe+ac6ys7q0fYGIymcYI7IynH/kcKQdeWbkVxWjHLbHtE9dF2pj Obsg9HLCuR1DEGv1agSSv8hVvReHtR3b6okLz2QqJ0H5s6DsSnmbg5PBa55ODcz8 1eY0edS5VWCTOPs9EkOX3wvZeJ/uJEKd6Wi/jbWvMCESji6B4bQk3Pz2z1NVLj5v Kt01q7wLNihn1b2UkcU7FAQnZIetzJUQuHVoGDwPVm5XAKiVVT0+IbJ4AixC1zVD 2QbY2oMBeq70/kMUWieNFrZCpiUblNSIrQM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:46 2025 by rpki-client