$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c4404d0-ecb5-3200-90bd-605884054ff9.roa File: 8c4404d0-ecb5-3200-90bd-605884054ff9.roa (raw, json) Hash identifier: aRmIVbYGg6X9oEZAMIzgXb2Grnap9scFYk5o3djsExc= Subject key identifier: EC:13:93:D5:3E:BC:45:67:21:F8:74:B3:08:FB:DC:43:7E:24:02:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F007DF7E9612D6E25800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c4404d0-ecb5-3200-90bd-605884054ff9.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 10515 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f0:07:df:7e:96:12:d6:e2:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=c54d4fd3-c425-4753-8b76-0a78c54df6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:bf:f5:33:35:2e:16:b9:e6:37:45:72:3f: fe:58:ea:78:58:35:d9:97:6e:6d:20:70:58:79:72: dc:cc:33:87:23:d7:f4:53:ab:6b:fe:45:15:c9:82: 8c:f2:3d:10:82:ef:d0:0e:3b:54:66:92:c0:19:16: 6e:6d:ce:c8:3a:06:12:0b:27:b9:0d:03:8e:9f:1e: ee:d4:2f:0f:a9:ae:f7:59:d7:f5:de:83:e6:81:0d: 63:b7:24:69:07:e7:de:65:08:51:00:fd:f7:af:52: 41:88:59:fb:0b:e9:e8:81:09:70:a5:fd:67:d9:45: ef:13:d8:67:b4:16:94:db:28:77:0f:82:bd:94:a5: 67:00:4f:29:f0:7d:cd:e0:fa:90:ed:01:0c:cf:3b: 2c:db:93:92:aa:62:e5:7c:52:17:b9:02:ad:1c:46: ef:19:f0:d2:8d:10:97:98:a3:62:c9:e2:dc:68:7a: 72:9c:3f:a8:b3:03:60:cf:21:f1:7f:1e:9a:d9:30: ea:51:c6:ba:cf:0d:80:69:44:c8:b0:8b:ea:46:2f: c6:d0:8e:9b:f6:2d:39:4a:33:95:39:d3:69:31:32: 75:ba:c6:d8:de:2c:aa:ba:24:53:2c:90:59:60:14: 1f:23:e3:c5:2f:f0:13:c4:ad:28:47:62:cc:bb:38: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:13:93:D5:3E:BC:45:67:21:F8:74:B3:08:FB:DC:43:7E:24:02:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c4404d0-ecb5-3200-90bd-605884054ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ad:c3:4c:3b:d2:bc:58:c8:5b:c9:8c:c2:b0:2b:83:97:41: 57:d3:88:90:02:68:4e:6b:2f:f6:58:f3:e8:b6:f4:86:9e:3f: 31:54:80:ef:bc:66:7a:db:f7:c7:cb:37:90:f7:b1:48:6b:57: ba:bf:10:df:be:f0:ef:71:66:0d:92:f5:ac:b9:ef:6d:0b:4a: 15:73:d2:91:38:68:7d:86:8c:48:bc:bd:8e:d8:7d:a8:cd:3f: 1c:94:ee:3e:64:54:d0:2a:5c:16:69:72:ff:b7:ce:e1:39:b1: 6f:a6:e2:87:ab:ec:6e:64:9b:7e:eb:64:9f:25:92:26:bc:2f: 6d:ff:f9:7d:6f:0e:c8:eb:83:37:cb:92:a6:8d:67:76:be:0e: a4:33:1a:63:d1:0e:82:54:fe:60:3a:62:55:a3:d1:10:d8:02: 2c:2d:cc:24:1a:9b:05:89:23:52:18:d4:99:12:f1:0d:cd:ac: 88:e4:43:1e:3e:ef:e5:6b:08:44:98:0f:7b:5a:67:41:79:07: 7f:73:59:1c:82:ff:53:6d:ff:df:bc:ed:99:a6:a0:53:bc:99: c3:b1:02:bf:95:83:87:96:c6:6b:f4:bf:f7:16:96:b5:b1:88: 8c:b5:5e:c4:ef:bf:98:b9:25:2a:e7:d3:32:e6:7f:e0:68:69: 01:86:66:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfAH336WEtbiWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YzU0ZDRmZDMtYzQyNS00NzUzLThiNzYtMGE3OGM1NGRmNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP2/9TM1Lha55jdFcj/+WOp4WDXZl25tIHBY eXLczDOHI9f0U6tr/kUVyYKM8j0Qgu/QDjtUZpLAGRZubc7IOgYSCye5DQOOnx7u 1C8Pqa73Wdf13oPmgQ1jtyRpB+feZQhRAP33r1JBiFn7C+nogQlwpf1n2UXvE9hn tBaU2yh3D4K9lKVnAE8p8H3N4PqQ7QEMzzss25OSqmLlfFIXuQKtHEbvGfDSjRCX mKNiyeLcaHpynD+oswNgzyHxfx6a2TDqUca6zw2AaUTIsIvqRi/G0I6b9i05SjOV OdNpMTJ1usbY3iyquiRTLJBZYBQfI+PFL/ATxK0oR2LMuzjTewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOwTk9U+vEVnIfh0swj73EN+JAI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGM0NDA0ZDAtZWNiNS0z MjAwLTkwYmQtNjA1ODg0MDU0ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHytw0w70rxYyFvJjMKwK4OXQVfTiJACaE5rL/ZY8+i29IaePzFU gO+8Znrb98fLN5D3sUhrV7q/EN++8O9xZg2S9ay5720LShVz0pE4aH2GjEi8vY7Y fajNPxyU7j5kVNAqXBZpcv+3zuE5sW+m4oer7G5km37rZJ8lkia8L23/+X1vDsjr gzfLkqaNZ3a+DqQzGmPRDoJU/mA6YlWj0RDYAiwtzCQamwWJI1IY1JkS8Q3NrIjk Qx4+7+VrCESYD3taZ0F5B39zWRyC/1Nt/9+87ZmmoFO8mcOxAr+Vg4eWxmv0v/cW lrWxiIy1XsTvv5i5JSrn0zLmf+BoaQGGZic= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:20 2025 by rpki-client