$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a60c7f2-bd29-3f81-b246-434634385d0d.roa File: 9a60c7f2-bd29-3f81-b246-434634385d0d.roa (raw, json) Hash identifier: xnkRQgVxUfcMQLTxtLIzDjjzUgiMu/jguvIbR7iqank= Subject key identifier: DA:ED:A7:90:FD:03:DB:0D:B8:F9:F3:7A:96:E0:7F:A1:BC:2B:3C:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814632DD0866344A3C580500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a60c7f2-bd29-3f81-b246-434634385d0d.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36620 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:32:dd:08:66:34:4a:3c:58:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=c6992666-ee56-4a3e-a346-9906d59d4b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:5d:4d:54:aa:47:3e:54:69:5a:3b:d9:0e: 7a:05:cf:15:45:42:aa:cb:74:11:84:02:b7:10:43: 91:77:c5:fa:3f:7e:f1:b7:41:eb:27:46:3c:d9:39: ed:8c:38:3f:5e:f1:29:d8:07:5b:0c:d8:91:e2:f7: 2d:ab:2a:f5:61:1f:26:f6:5e:8d:51:92:18:d6:ca: 4c:8b:f3:e1:f4:fb:10:23:e8:1b:2b:f1:15:19:c4: 1c:8e:25:79:42:0e:54:d8:ea:fb:78:40:4b:59:93: 15:6a:b2:a2:93:21:e4:a8:32:c4:72:c4:6a:bf:38: 83:d1:19:58:2e:69:69:a8:40:24:91:9c:52:b6:69: 8e:6e:d4:e5:05:6d:1a:de:eb:7d:b1:64:e2:76:a9: 9d:89:ef:08:ae:18:7e:ca:17:56:86:90:aa:05:4c: 96:de:ca:9e:e7:9e:dc:5f:5b:57:10:c0:d5:42:f7: bb:4d:56:fb:8a:b6:d1:50:db:d8:56:0a:8b:5c:c6: 85:b1:27:0f:07:98:ef:c6:4d:e5:c0:a6:0d:32:e6: e4:7f:73:93:91:27:d5:48:ec:d5:88:f2:ac:ac:8b: c6:48:6f:69:ec:3f:46:f2:b7:2d:f4:82:69:1d:49: c8:3f:8a:07:74:34:9a:fa:6d:3b:07:5f:f2:13:1b: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:ED:A7:90:FD:03:DB:0D:B8:F9:F3:7A:96:E0:7F:A1:BC:2B:3C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a60c7f2-bd29-3f81-b246-434634385d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:49:de:f8:37:2b:f3:66:54:a7:aa:6f:47:8e:b5:71:91:32: 50:32:b5:1c:b7:d3:a7:80:4e:04:f8:d6:79:4f:6d:69:3a:79: ec:8f:e2:01:d9:f3:69:23:09:6c:4e:09:38:cc:f0:7d:d0:1a: 41:f3:8a:9f:cd:69:4c:7a:00:b8:d4:a6:b1:52:e9:3d:93:d4: d4:76:65:3a:bc:f1:39:6d:ae:2d:33:32:d8:e3:59:d9:d6:96: ee:eb:ca:26:be:e1:c0:81:6d:09:82:1d:0e:bb:f1:9c:5f:e7: 94:cb:5b:f8:b3:ac:42:14:76:8d:1f:5b:9b:f0:c3:23:2e:8a: 70:72:16:81:37:93:48:9b:13:08:24:5a:2e:6a:1b:f4:9b:6b: 90:e2:92:fb:3a:4b:a3:39:1c:9d:94:2d:95:01:cf:11:42:4c: 05:9d:4c:8b:85:5a:9b:b1:d5:33:76:d9:09:4c:be:b6:a0:58: 3f:8b:b9:d8:4f:c5:e3:59:97:bd:31:ec:7d:b8:cb:d4:c5:d2: f0:ea:a0:b3:69:a8:77:b3:3e:5b:3f:12:90:cc:41:5b:de:e8: 9e:07:3d:e5:9b:d4:23:12:ca:68:38:67:22:e7:cb:ab:63:a7: 83:41:5c:6c:05:5b:86:47:e8:d3:fa:06:05:fb:5f:6b:f3:6f: c4:69:45:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjLdCGY0SjxYBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YzY5OTI2NjYtZWU1Ni00YTNlLWEzNDYtOTkwNmQ1OWQ0YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH9dTVSqRz5UaVo72Q56Bc8VRUKqy3QRhAK3 EEORd8X6P37xt0HrJ0Y82TntjDg/XvEp2AdbDNiR4vctqyr1YR8m9l6NUZIY1spM i/Ph9PsQI+gbK/EVGcQcjiV5Qg5U2Or7eEBLWZMVarKikyHkqDLEcsRqvziD0RlY LmlpqEAkkZxStmmObtTlBW0a3ut9sWTidqmdie8Irhh+yhdWhpCqBUyW3sqe557c X1tXEMDVQve7TVb7irbRUNvYVgqLXMaFsScPB5jvxk3lwKYNMubkf3OTkSfVSOzV iPKsrIvGSG9p7D9G8rct9IJpHUnIP4oHdDSa+m07B1/yExuZNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNrtp5D9A9sNuPnzepbgf6G8KzxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWE2MGM3ZjItYmQyOS0z ZjgxLWIyNDYtNDM0NjM0Mzg1ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGJJ3vg3K/NmVKeqb0eOtXGRMlAytRy306eATgT41nlPbWk6eeyP 4gHZ82kjCWxOCTjM8H3QGkHzip/NaUx6ALjUprFS6T2T1NR2ZTq88Tltri0zMtjj WdnWlu7ryia+4cCBbQmCHQ678Zxf55TLW/izrEIUdo0fW5vwwyMuinByFoE3k0ib EwgkWi5qG/Sba5Dikvs6S6M5HJ2ULZUBzxFCTAWdTIuFWpux1TN22QlMvragWD+L udhPxeNZl70x7H24y9TF0vDqoLNpqHezPls/EpDMQVve6J4HPeWb1CMSymg4ZyLn y6tjp4NBXGwFW4ZH6NP6BgX7X2vzb8RpRao= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:41 2025 by rpki-client