$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/943e7fc0-5d17-3b35-96bd-71bdee45251c.roa File: 943e7fc0-5d17-3b35-96bd-71bdee45251c.roa (raw, json) Hash identifier: az1gvta6HlMHSZI4S2HCoey2sc9S44nUIqXeQ650v8g= Subject key identifier: B3:EC:08:BA:1B:C5:6E:B4:F3:6B:13:F2:47:5F:8C:A3:32:86:E9:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F26A45C25E46163B0900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/943e7fc0-5d17-3b35-96bd-71bdee45251c.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397199 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f2:6a:45:c2:5e:46:16:3b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=8b6aa253-ca5e-45c9-b6d9-c32837faf567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:55:29:63:7d:0e:1a:9a:e1:ea:2a:5c:8d: 27:28:48:77:f5:3d:20:3a:e7:8a:89:60:1c:b4:80: 18:ae:00:ee:db:bc:04:f5:24:f0:3a:57:24:a5:3d: 4c:04:ec:47:93:fd:39:bc:61:4e:c9:9e:db:78:24: f0:2b:d0:89:88:2a:79:00:d1:83:c3:96:5d:22:68: c6:97:81:b7:c4:86:8b:38:16:4a:69:a0:67:58:41: 8a:3f:6b:d2:fa:c8:78:0e:cb:48:63:ce:74:82:28: af:d1:8b:20:46:ec:80:ec:66:6f:20:16:e9:bc:9f: 43:c0:83:ce:1a:40:72:b4:50:db:bd:af:a1:13:48: 74:16:ee:50:d1:7b:8c:50:be:45:20:58:f3:c5:f2: e3:71:2a:e9:a7:cc:00:d8:2b:20:ef:91:6b:6f:2d: 06:ed:be:b5:b0:cf:6f:6f:52:fc:67:67:4d:0c:0d: f2:09:23:1c:c0:60:72:46:ba:c6:a0:aa:1d:e4:5a: 81:e5:d2:5b:0d:b1:c7:db:64:46:39:0e:45:ed:09: 52:3a:ad:b4:38:ba:9c:3f:89:43:47:01:58:9a:31: 62:36:9d:2b:a7:83:a0:f6:e2:94:fd:5b:2a:9b:5f: 91:83:82:59:c0:17:a9:0d:5b:da:65:1e:bf:1b:b0: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EC:08:BA:1B:C5:6E:B4:F3:6B:13:F2:47:5F:8C:A3:32:86:E9:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/943e7fc0-5d17-3b35-96bd-71bdee45251c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c8:af:cc:9d:6a:13:6d:88:29:39:2f:a3:29:4a:5d:9c:a5: 0b:2b:90:5f:d1:84:dd:68:38:f3:6e:54:c1:48:f7:a6:76:68: b1:e4:7c:ae:b3:ef:f3:26:3f:08:ac:53:f1:58:0a:93:aa:38: 63:a7:52:92:cb:42:04:e1:9d:69:42:7f:de:d9:a0:2e:07:1e: f5:52:5b:7b:b1:77:50:74:95:be:16:ab:3e:36:f7:d4:62:0c: 82:dc:c3:99:25:d1:20:10:b3:20:34:78:2e:ac:8a:ea:92:5c: 35:88:12:18:29:fd:8b:df:9d:76:a0:33:9d:b4:d2:f1:ba:97: e3:7d:b7:e8:f3:b5:0d:a5:20:c0:7d:08:4c:44:67:8f:ab:66: 5a:44:a5:88:83:60:84:1b:b5:55:78:50:4a:e4:60:8b:5c:64: 20:8f:f8:f0:75:a6:dd:d1:48:23:d1:ac:6d:b2:8d:03:f6:bb: 59:13:51:85:57:ad:9d:27:7b:1b:11:2e:41:be:f8:99:2f:99: 2b:89:e4:eb:4b:8a:f0:ab:53:b0:52:18:d9:85:2f:88:34:0a: b4:8b:89:4f:8b:6f:89:9c:70:86:0c:4d:55:9a:66:6b:c1:9d: ac:d2:d2:2f:78:d7:9e:3a:07:08:ef:52:41:43:a1:77:6a:8a: 2b:18:81:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfJqRcJeRhY7CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OGI2YWEyNTMtY2E1ZS00NWM5LWI2ZDktYzMyODM3ZmFmNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE1VKWN9Dhqa4eoqXI0nKEh39T0gOueKiWAc tIAYrgDu27wE9STwOlckpT1MBOxHk/05vGFOyZ7beCTwK9CJiCp5ANGDw5ZdImjG l4G3xIaLOBZKaaBnWEGKP2vS+sh4DstIY850giiv0YsgRuyA7GZvIBbpvJ9DwIPO GkBytFDbva+hE0h0Fu5Q0XuMUL5FIFjzxfLjcSrpp8wA2Csg75Frby0G7b61sM9v b1L8Z2dNDA3yCSMcwGByRrrGoKod5FqB5dJbDbHH22RGOQ5F7QlSOq20OLqcP4lD RwFYmjFiNp0rp4Og9uKU/Vsqm1+Rg4JZwBepDVvaZR6/G7A2twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLPsCLobxW6082sT8kdfjKMyhunlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQzZTdmYzAtNWQxNy0z YjM1LTk2YmQtNzFiZGVlNDUyNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjIr8ydahNtiCk5L6MpSl2cpQsrkF/RhN1oOPNuVMFI96Z2aLHk fK6z7/MmPwisU/FYCpOqOGOnUpLLQgThnWlCf97ZoC4HHvVSW3uxd1B0lb4Wqz42 99RiDILcw5kl0SAQsyA0eC6siuqSXDWIEhgp/YvfnXagM5200vG6l+N9t+jztQ2l IMB9CExEZ4+rZlpEpYiDYIQbtVV4UErkYItcZCCP+PB1pt3RSCPRrG2yjQP2u1kT UYVXrZ0nexsRLkG++JkvmSuJ5OtLivCrU7BSGNmFL4g0CrSLiU+Lb4mccIYMTVWa ZmvBnazS0i941546BwjvUkFDoXdqiisYgb8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:38 2025 by rpki-client