$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a93126d5-8006-3c1b-922d-8743fc5cbde3.roa File: a93126d5-8006-3c1b-922d-8743fc5cbde3.roa (raw, json) Hash identifier: nTJo7YuDQKiVWe+hOVQ7keQHtXhq+avavOoLsrx7mkg= Subject key identifier: 1B:48:6F:91:EA:2B:BC:5A:6A:9A:E2:DC:C9:BE:63:6F:48:87:24:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E6EE76A27543F5A01A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a93126d5-8006-3c1b-922d-8743fc5cbde3.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396583 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e6:ee:76:a2:75:43:f5:a0:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=8cd29538-c451-4494-b1e0-d2c8a1bbd8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:34:51:25:69:75:12:4f:39:67:37:d8:2b:e3: 79:63:de:ee:ba:c2:9f:4f:e8:24:e8:f3:22:e3:97: a9:0b:da:97:3c:cf:46:6a:91:f6:cf:cf:f1:83:b5: 62:6c:71:be:74:66:e6:21:d2:d3:17:b6:3c:12:07: 18:31:2c:90:ea:bf:6e:e3:57:fa:71:6d:f7:75:61: 78:2a:5b:9a:51:1d:3a:9a:96:3b:77:84:48:a6:7d: a3:4c:f4:43:5a:c8:08:c5:27:8f:83:1c:77:9c:4c: dd:30:73:e1:4b:63:b5:00:94:5a:0d:59:de:bc:a6: cd:0e:0c:8c:96:e3:04:3b:be:44:9a:5e:ed:71:12: 91:b3:4b:70:2d:fa:d0:b2:53:76:ef:9d:e3:ea:4e: 47:4a:cb:01:3c:40:2c:df:a5:7c:bf:08:35:10:f4: 53:95:25:f8:49:09:29:59:52:68:40:f4:1e:4f:dd: 04:89:1d:7b:49:a8:92:99:fa:7b:87:fd:d7:dd:15: ca:bf:9c:38:9d:86:e6:f7:13:2c:c8:32:ec:76:6d: 2b:31:93:a5:9e:6f:61:08:c5:7c:7c:39:b8:7d:94: dc:8d:88:e0:c3:86:62:fe:22:1c:f6:5f:71:43:fc: d1:90:a9:6f:26:50:ce:58:6d:ac:fd:63:63:19:61: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:48:6F:91:EA:2B:BC:5A:6A:9A:E2:DC:C9:BE:63:6F:48:87:24:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a93126d5-8006-3c1b-922d-8743fc5cbde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:29:4e:ab:92:5c:09:0f:ed:a5:0d:6e:39:8e:e3:6e:e9:a3: 6f:58:0b:12:af:1d:c5:e6:1b:a9:9c:a7:9c:d7:58:3c:bc:18: 5a:b9:a9:4b:f0:31:1c:6b:45:cd:5a:3e:ee:c7:cf:d4:3e:38: 30:a5:10:8d:7e:8f:0f:82:73:84:9b:c0:cf:76:4f:e3:7a:5b: 5a:b6:4d:b1:7b:a4:7f:93:f8:44:00:69:9d:65:37:12:cb:83: a6:c7:17:fd:49:1e:58:8f:7d:62:76:1b:b7:03:bd:77:51:38: fa:8a:fa:01:17:d2:85:2a:e4:c6:ed:41:1e:a1:73:9a:21:ae: 9e:0a:a9:d5:8d:e1:f3:65:4d:5e:6a:db:18:1a:05:60:25:66: 55:f1:eb:c2:6b:e0:e6:6a:1f:df:8b:64:c2:0c:91:5a:8b:dd: 37:01:e2:e1:33:69:6b:c2:be:9f:e1:6e:67:19:2e:b5:68:8c: 52:0c:98:af:23:fe:b8:f7:ec:29:21:4c:6a:29:42:63:89:a2: 31:9c:a5:2f:1f:c6:8d:35:7b:c7:04:75:20:b8:6b:6d:6c:8f: c1:4a:dd:b1:47:61:70:4d:b8:45:3c:c1:ae:6b:95:7f:4e:8c: 42:f8:35:d1:cf:c2:cc:73:dc:a3:c4:70:3c:00:fb:39:40:0c: 62:a9:9a:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJebudqJ1Q/WgGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OGNkMjk1MzgtYzQ1MS00NDk0LWIxZTAtZDJjOGExYmJkOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zRRJWl1Ek85ZzfYK+N5Y97uusKfT+gk6PMi 45epC9qXPM9GapH2z8/xg7VibHG+dGbmIdLTF7Y8EgcYMSyQ6r9u41f6cW33dWF4 KluaUR06mpY7d4RIpn2jTPRDWsgIxSePgxx3nEzdMHPhS2O1AJRaDVnevKbNDgyM luMEO75Eml7tcRKRs0twLfrQslN2753j6k5HSssBPEAs36V8vwg1EPRTlSX4SQkp WVJoQPQeT90EiR17SaiSmfp7h/3X3RXKv5w4nYbm9xMsyDLsdm0rMZOlnm9hCMV8 fDm4fZTcjYjgw4Zi/iIc9l9xQ/zRkKlvJlDOWG2s/WNjGWGntwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBtIb5HqK7xaapri3Mm+Y29IhyRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTkzMTI2ZDUtODAwNi0z YzFiLTkyMmQtODc0M2ZjNWNiZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUpTquSXAkP7aUNbjmO427po29YCxKvHcXmG6mcp5zXWDy8GFq5 qUvwMRxrRc1aPu7Hz9Q+ODClEI1+jw+Cc4SbwM92T+N6W1q2TbF7pH+T+EQAaZ1l NxLLg6bHF/1JHliPfWJ2G7cDvXdROPqK+gEX0oUq5MbtQR6hc5ohrp4KqdWN4fNl TV5q2xgaBWAlZlXx68Jr4OZqH9+LZMIMkVqL3TcB4uEzaWvCvp/hbmcZLrVojFIM mK8j/rj37CkhTGopQmOJojGcpS8fxo01e8cEdSC4a21sj8FK3bFHYXBNuEU8wa5r lX9OjEL4NdHPwsxz3KPEcDwA+zlADGKpmqk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:40 2025 by rpki-client