$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa File: 95492b19-4cda-3a63-86f3-5869625ae3b8.roa (raw, json) Hash identifier: HgJBiIhSMUQot+YgezF2aKVFyP7r+ol5cZUx1x5e7Aw= Subject key identifier: 26:FB:A0:69:E3:75:67:2E:8B:00:4B:20:A6:07:A9:CD:CD:0C:C2:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A7350BEFD6EF1B0AA681D9880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:be:fd:6e:f1:b0:aa:68:1d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=8798dd3c-7820-4ead-bb2c-57c6faea9314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:97:32:54:a8:5e:8f:09:c6:3b:5e:05:f1: 1b:93:94:83:16:53:24:6d:a9:dd:67:e1:f7:41:1f: e1:ea:d4:5e:0e:57:f1:38:7a:ad:07:b3:e4:04:58: 69:b9:3c:99:e2:29:7c:44:25:de:9d:3f:1d:d7:75: 7a:8e:64:87:25:8f:de:f9:c0:6e:cf:52:b1:d6:2e: 69:a7:4a:80:65:2a:5f:c5:bd:25:1a:62:f7:cf:c9: a3:bf:49:4d:59:1c:0d:17:fd:ac:34:45:84:0e:84: 4c:a6:1e:74:44:00:04:5f:7a:8e:13:b0:13:f3:69: 8c:40:2c:a3:42:c9:b2:91:27:b5:99:04:2d:ff:86: ca:11:f1:21:1d:29:f4:c4:02:e6:0f:26:59:b3:31: 18:9c:f8:94:ea:a3:79:69:81:c8:62:cc:62:3a:cc: 37:92:38:c2:91:d5:02:f0:06:57:43:1c:9c:33:91: 5f:bb:34:ba:44:e0:11:9f:e1:0d:a6:a1:51:66:73: df:ef:0f:0f:a2:ba:58:2c:48:ad:e9:55:b3:67:da: 43:db:9b:85:49:48:c7:af:a0:ba:2d:a6:2d:76:38: 3b:d1:5a:98:ad:dd:01:4d:ae:bf:74:70:b4:03:93: 30:29:b5:ac:07:16:b7:30:be:86:88:94:51:e5:0c: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FB:A0:69:E3:75:67:2E:8B:00:4B:20:A6:07:A9:CD:CD:0C:C2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:40:0c:23:e7:67:94:7b:e2:94:0e:06:d5:bc:0c:96:49:18: c9:f3:10:3b:8b:ec:44:f3:0e:37:51:8f:c1:3e:c5:04:5f:8c: 0e:b3:92:f9:26:83:12:a0:96:64:ae:f0:f3:50:6f:b6:00:d8: 16:03:2d:d7:2d:64:12:7b:d6:de:2a:0e:17:d9:7c:31:be:33: a5:9e:02:eb:4f:9a:6f:4e:c1:43:f3:3c:ae:05:b1:1c:76:f5: 72:42:73:59:db:9a:a8:e4:7b:4b:c5:f4:f5:9f:25:77:f6:ff: 7f:05:d3:5a:7a:1d:87:4f:bc:dc:2c:c0:7b:bf:a5:6d:91:c1: 36:9f:81:20:d1:77:71:36:66:1a:d2:87:4b:69:a3:94:f9:af: 01:3d:20:38:73:04:60:8d:43:8f:d3:08:30:23:7a:ba:5e:0a: cd:ee:a3:48:8c:25:b6:f8:90:65:3b:9b:74:a3:fb:98:49:aa: db:3d:b4:ec:1a:d2:29:fc:d2:09:74:f8:9f:dd:7e:8f:da:3d: fb:72:9e:80:15:7f:e6:0a:29:2a:e3:e6:82:ea:e2:ed:6c:2f: 4e:ee:05:2c:e4:cc:b7:b9:77:3b:c9:94:c5:a5:e5:79:93:bf: b7:39:69:99:5c:39:d5:74:bd:b5:e9:78:3a:7c:c5:c4:a5:2d: 1a:88:80:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzUL79bvGwqmgdmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ODc5OGRkM2MtNzgyMC00ZWFkLWJiMmMtNTdjNmZhZWE5MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIGXMlSoXo8JxjteBfEbk5SDFlMkbandZ+H3 QR/h6tReDlfxOHqtB7PkBFhpuTyZ4il8RCXenT8d13V6jmSHJY/e+cBuz1Kx1i5p p0qAZSpfxb0lGmL3z8mjv0lNWRwNF/2sNEWEDoRMph50RAAEX3qOE7AT82mMQCyj QsmykSe1mQQt/4bKEfEhHSn0xALmDyZZszEYnPiU6qN5aYHIYsxiOsw3kjjCkdUC 8AZXQxycM5FfuzS6ROARn+ENpqFRZnPf7w8PorpYLEit6VWzZ9pD25uFSUjHr6C6 LaYtdjg70VqYrd0BTa6/dHC0A5MwKbWsBxa3ML6GiJRR5QxNBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCb7oGnjdWcuiwBLIKYHqc3NDMI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU0OTJiMTktNGNkYS0z YTYzLTg2ZjMtNTg2OTYyNWFlM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVADCPnZ5R74pQOBtW8DJZJGMnzEDuL7ETzDjdRj8E+xQRfjA6z kvkmgxKglmSu8PNQb7YA2BYDLdctZBJ71t4qDhfZfDG+M6WeAutPmm9OwUPzPK4F sRx29XJCc1nbmqjke0vF9PWfJXf2/38F01p6HYdPvNwswHu/pW2RwTafgSDRd3E2 ZhrSh0tpo5T5rwE9IDhzBGCNQ4/TCDAjerpeCs3uo0iMJbb4kGU7m3Sj+5hJqts9 tOwa0in80gl0+J/dfo/aPftynoAVf+YKKSrj5oLq4u1sL07uBSzkzLe5dzvJlMWl 5XmTv7c5aZlcOdV0vbXpeDp8xcSlLRqIgGw= -----END CERTIFICATE-----Generated at Tue Jul 22 20:06:22 2025 by rpki-client