$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab8b088a-65de-3723-a072-4772504b5cb3.roa File: ab8b088a-65de-3723-a072-4772504b5cb3.roa (raw, json) Hash identifier: wgLmMX+PP5XS5I+6caEmjgep8Guk06RH1Dtbwjp1eKE= Subject key identifier: 3E:4B:D9:DA:1D:15:90:C6:52:DC:E9:5F:BB:04:B8:8F:FD:A4:4E:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E5A33E2E0FFF867F9880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab8b088a-65de-3723-a072-4772504b5cb3.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396563 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e5:a3:3e:2e:0f:ff:86:7f:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=b1dbfc1d-c4de-4718-9bf7-25e2722b1546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:08:7e:b1:88:79:ff:2d:07:be:1b:1f:ba: 7e:18:b8:a7:21:3d:c9:7f:44:92:86:29:19:0c:93: fe:6d:c9:c5:e7:11:a0:eb:16:7e:28:cc:81:1a:b3: 5a:d8:83:f4:b7:c2:5d:4e:77:09:89:1f:d6:a8:74: e6:1c:5e:75:d7:5a:79:7e:69:bd:93:38:ac:28:0b: b4:b1:cd:50:b9:78:47:d2:cf:93:a3:e2:dc:1f:d4: 9e:0a:97:5f:de:ad:a1:ed:c8:2e:75:dc:98:02:e0: 06:fa:d4:50:40:fc:57:9d:4d:11:dc:0f:48:6d:aa: fe:74:11:4c:7a:72:2a:98:97:c2:2b:8e:94:72:fb: 5f:20:55:96:8f:c6:d9:a2:62:fe:98:ba:de:43:f5: 86:29:e2:cd:a7:c2:71:bd:7a:01:ae:8a:15:8f:e1: 4f:01:7a:f1:2e:f8:8a:ef:98:0d:e3:90:bd:eb:d2: 01:34:86:99:e5:b3:fa:30:33:ad:f5:4c:e7:e6:fd: 6e:fd:af:f6:fb:3b:63:28:5f:0a:f0:ba:b5:d6:0b: a1:b2:5b:e7:85:28:73:7e:33:6c:56:97:ee:7b:33: ef:ae:be:89:73:6d:4c:08:66:c0:93:df:23:1c:59: e5:ad:f5:20:87:b0:35:72:47:4f:11:37:35:31:a2: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4B:D9:DA:1D:15:90:C6:52:DC:E9:5F:BB:04:B8:8F:FD:A4:4E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab8b088a-65de-3723-a072-4772504b5cb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d9:80:57:72:60:ff:13:e0:19:7a:b4:b1:ea:3c:ae:37:cd: 17:24:34:0d:49:36:c8:32:94:fe:b5:e2:56:ad:1e:15:74:e7: f3:a8:36:dc:f2:f5:8d:d4:06:c7:62:fc:1f:ac:28:ec:8b:eb: 55:61:93:85:26:8e:f6:8f:df:ac:43:b8:d9:e5:be:45:ad:87: e5:fc:d7:39:c8:a6:63:03:ad:9e:c0:48:56:b1:a2:70:18:ae: 45:eb:7a:71:a9:5c:85:f6:d9:e1:4a:81:73:91:25:c4:28:27: 88:02:56:b5:0f:11:8c:f0:cf:b7:11:21:00:66:5e:d5:c4:30: a0:52:4d:4c:96:33:71:d7:59:2b:4b:33:fb:19:97:fc:f4:0e: bf:ae:5e:2c:aa:5b:22:7e:0c:3c:de:43:cb:fb:82:3b:4c:2a: 11:e3:08:46:ba:a2:01:df:b3:a0:d3:06:9f:83:82:c3:fa:8c: ff:63:32:61:b5:9a:43:a5:19:90:ee:f2:e7:0a:0b:35:cd:54: c7:18:c4:2e:8b:f7:03:fd:cf:b1:bb:b7:e6:b4:0f:2c:4a:02: 90:dd:ea:58:c5:47:30:13:8e:a4:36:de:ab:72:a8:3f:46:a8: 54:6c:7e:c1:f7:fa:e4:ba:f7:3b:ce:d5:6e:d9:2c:f3:2d:d9: 3d:48:93:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJeWjPi4P/4Z/mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YjFkYmZjMWQtYzRkZS00NzE4LTliZjctMjVlMjcyMmIxNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiMIfrGIef8tB74bH7p+GLinIT3Jf0SShikZ DJP+bcnF5xGg6xZ+KMyBGrNa2IP0t8JdTncJiR/WqHTmHF5111p5fmm9kzisKAu0 sc1QuXhH0s+To+LcH9SeCpdf3q2h7cguddyYAuAG+tRQQPxXnU0R3A9Ibar+dBFM enIqmJfCK46UcvtfIFWWj8bZomL+mLreQ/WGKeLNp8JxvXoBrooVj+FPAXrxLviK 75gN45C969IBNIaZ5bP6MDOt9Uzn5v1u/a/2+ztjKF8K8Lq11guhslvnhShzfjNs VpfuezPvrr6Jc21MCGbAk98jHFnlrfUgh7A1ckdPETc1MaJeewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5L2dodFZDGUtzpX7sEuI/9pE5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI4YjA4OGEtNjVkZS0z NzIzLWEwNzItNDc3MjUwNGI1Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLZgFdyYP8T4Bl6tLHqPK43zRckNA1JNsgylP614latHhV05/Oo Ntzy9Y3UBsdi/B+sKOyL61Vhk4UmjvaP36xDuNnlvkWth+X81znIpmMDrZ7ASFax onAYrkXrenGpXIX22eFKgXORJcQoJ4gCVrUPEYzwz7cRIQBmXtXEMKBSTUyWM3HX WStLM/sZl/z0Dr+uXiyqWyJ+DDzeQ8v7gjtMKhHjCEa6ogHfs6DTBp+DgsP6jP9j MmG1mkOlGZDu8ucKCzXNVMcYxC6L9wP9z7G7t+a0DyxKApDd6ljFRzATjqQ23qty qD9GqFRsfsH3+uS69zvO1W7ZLPMt2T1Ik2w= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:54 2025 by rpki-client