$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa File: a5c62b97-bfea-3f1c-889a-6053db0efd70.roa (raw, json) Hash identifier: siMG+EtPLNHHHCQ3v7ZMaxdyib6t1T/5yMY9lzj0ucY= Subject key identifier: D9:B8:48:8C:DF:A5:9B:C4:8B:A6:05:FA:3E:F1:B8:68:2A:2A:28:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146378B06C021D68FBCD224 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36622 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:8b:06:c0:21:d6:8f:bc:d2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=e0c4dc0d-c25c-4227-aa3d-700e4ae15d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:bc:b1:79:c8:5f:f5:e7:2f:65:2e:7e:05: df:e9:38:50:7a:9c:b3:e4:aa:fc:84:c8:1d:07:87: 03:1b:00:22:17:63:ae:61:06:06:19:2a:15:5a:7d: 38:b0:08:a8:42:d1:5d:30:4a:ed:63:7d:55:1b:f1: 16:4e:2e:12:43:73:06:77:4c:e6:90:78:35:94:64: b6:90:4c:fc:c8:88:04:1d:67:c3:91:55:5c:70:7b: 2e:be:dc:79:eb:d4:24:f1:7c:fe:ad:35:41:32:d0: dc:a3:04:5e:11:8b:7b:b0:cf:9f:6f:e7:64:e0:74: bf:e8:1c:bd:28:2b:1e:6f:d4:f9:94:11:99:79:f6: 4b:7d:8b:16:ab:8d:34:ce:5f:65:57:bd:bb:0b:cb: 26:a8:18:49:67:64:fb:9d:03:29:07:db:37:7b:bf: 05:97:c9:46:7c:da:c1:61:68:e3:37:67:8d:a2:34: 31:81:7a:f9:47:17:a5:30:d6:4d:d9:bf:0d:64:fe: a4:f0:a1:6e:28:f8:39:d5:3f:18:ac:6d:f8:89:99: 53:3f:2e:d8:51:e1:5c:4f:df:08:51:81:b0:30:7d: cc:38:e6:78:32:6c:ed:bb:45:1d:8e:16:0c:54:1d: f3:86:09:8e:63:78:d9:58:30:5e:f7:6d:3d:82:c9: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B8:48:8C:DF:A5:9B:C4:8B:A6:05:FA:3E:F1:B8:68:2A:2A:28:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6b:d0:2c:99:2b:4f:9a:f7:f1:c4:cc:11:c2:c7:11:6a:59: 66:96:d6:e1:5f:d6:8b:bb:b5:c1:64:89:fe:6f:3e:80:fd:c2: 95:a5:5f:fb:1d:48:1a:52:ed:f4:c7:32:7f:af:41:57:96:eb: 9a:d9:f7:b8:c6:99:fe:b2:52:86:b4:76:bb:bb:8f:35:83:07: f8:27:be:c0:20:19:81:d3:73:43:e5:f8:92:a3:51:c0:73:36: 0d:fb:85:2e:89:f3:ca:89:95:46:50:55:f9:89:81:3c:35:c5: e5:81:b4:b4:43:ed:34:f2:16:4c:c0:90:44:22:11:84:f4:ff: 2d:43:53:c6:46:e1:ff:2c:d1:d5:65:04:0c:b8:ec:a2:e4:8e: 27:1b:54:39:e6:97:75:7f:fc:58:80:95:ae:b0:92:8e:1e:67: 45:35:95:ae:9b:2c:d8:cf:ae:01:4c:58:0c:92:e6:b2:61:f5: 9b:59:b9:5a:6c:bb:c6:8c:16:85:90:fa:bb:cf:14:f4:72:fc: 95:be:8e:cb:c1:db:57:93:13:08:0d:1a:e8:7d:3c:5a:07:a2: 4e:0b:5e:6c:fb:6d:bc:c3:62:b5:6e:0d:ba:fe:ed:b5:4a:25: 71:ea:48:e0:8f:34:80:fd:f6:b7:a2:8d:bd:f5:c0:42:5a:09: b4:f6:2e:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjeLBsAh1o+80iQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTBjNGRjMGQtYzI1Yy00MjI3LWFhM2QtNzAwZTRhZTE1ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlti8sXnIX/XnL2UufgXf6ThQepyz5Kr8hMgd B4cDGwAiF2OuYQYGGSoVWn04sAioQtFdMErtY31VG/EWTi4SQ3MGd0zmkHg1lGS2 kEz8yIgEHWfDkVVccHsuvtx569Qk8Xz+rTVBMtDcowReEYt7sM+fb+dk4HS/6By9 KCseb9T5lBGZefZLfYsWq400zl9lV727C8smqBhJZ2T7nQMpB9s3e78Fl8lGfNrB YWjjN2eNojQxgXr5RxelMNZN2b8NZP6k8KFuKPg51T8YrG34iZlTPy7YUeFcT98I UYGwMH3MOOZ4Mmztu0UdjhYMVB3zhgmOY3jZWDBe9209gsllwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNm4SIzfpZvEi6YF+j7xuGgqKiiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTVjNjJiOTctYmZlYS0z ZjFjLTg4OWEtNjA1M2RiMGVmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdr0CyZK0+a9/HEzBHCxxFqWWaW1uFf1ou7tcFkif5vPoD9wpWl X/sdSBpS7fTHMn+vQVeW65rZ97jGmf6yUoa0dru7jzWDB/gnvsAgGYHTc0Pl+JKj UcBzNg37hS6J88qJlUZQVfmJgTw1xeWBtLRD7TTyFkzAkEQiEYT0/y1DU8ZG4f8s 0dVlBAy47KLkjicbVDnml3V//FiAla6wko4eZ0U1la6bLNjPrgFMWAyS5rJh9ZtZ uVpsu8aMFoWQ+rvPFPRy/JW+jsvB21eTEwgNGuh9PFoHok4LXmz7bbzDYrVuDbr+ 7bVKJXHqSOCPNID99reijb31wEJaCbT2Lso= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:00 2025 by rpki-client