$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa File: b34e06af-905e-3aa4-a640-0b0ae99465a6.roa (raw, json) Hash identifier: Y0RUtz8k4salI+DepZDAL6+x9ki0Rd2bAV0iIt/oX/8= Subject key identifier: 66:FE:87:B4:BC:B1:AC:02:55:94:D3:B8:7B:8D:60:F4:EC:53:98:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F1B30859B5EF942F3280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396595 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f1:b3:08:59:b5:ef:94:2f:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=40db567d-eee2-4e18-99b6-06d3cfb874a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:fd:8f:ce:71:5d:a1:7d:96:73:ee:02:16: 75:78:ed:70:21:b9:ca:25:fb:5b:78:c3:40:77:c4: c6:15:e7:0b:5b:28:a6:6b:d1:7c:90:c3:e5:7e:e9: e2:4b:96:a7:b5:f7:b7:7c:ce:5f:f3:93:12:a6:e0: c5:a8:24:ae:bc:e8:09:91:5c:a2:ad:08:69:6a:bd: ef:51:77:78:66:87:63:10:46:53:cd:a2:9a:70:e0: ef:d0:cd:fc:c6:e5:5e:55:3c:a2:20:5d:83:1b:42: 5c:33:19:bc:22:a7:13:c0:ce:39:2e:a2:55:6b:b2: ce:3a:61:5b:73:ab:73:40:19:7c:72:c9:9c:05:10: f0:e8:0b:64:d7:71:b6:90:81:d5:2c:fe:95:d2:cb: 37:df:73:a5:eb:7d:a2:77:81:54:cc:97:f7:39:de: 7b:3b:8e:73:e1:48:e2:31:5a:70:8f:46:d6:8f:22: 60:67:be:c7:9e:63:5b:a2:d3:f0:04:2f:b5:ff:a3: bb:37:e3:69:cc:41:fd:94:d6:58:21:93:d8:76:ba: ad:33:1c:67:16:fa:61:e9:a0:31:7c:96:59:14:84: 98:ef:23:a4:a2:c9:7d:25:81:b1:1a:82:09:1d:68: 2d:17:0e:c3:50:88:ac:df:bf:cd:88:2a:1a:d0:cb: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:87:B4:BC:B1:AC:02:55:94:D3:B8:7B:8D:60:F4:EC:53:98:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9d:e7:4b:09:b8:0a:72:35:c3:d3:fa:3e:1b:3f:92:c7:23: b5:1e:d7:c0:fd:b5:80:a6:56:bb:8a:84:33:2e:c3:54:1c:97: 06:fd:34:87:8a:20:30:17:28:42:15:2d:f3:5a:d9:bb:15:6c: 87:d5:5d:f1:e6:75:8e:2b:e7:d7:f7:62:af:d1:51:6a:c0:af: 8d:f4:e4:00:52:d5:14:98:c2:15:71:c9:f2:10:a4:60:c3:a4: 9a:e5:49:de:de:3d:81:42:89:3d:fc:d5:e3:c2:33:60:2c:9d: 98:f7:94:5e:c1:12:a8:d2:f4:61:1a:e4:a2:89:7d:73:1e:af: 64:96:ce:7d:25:d8:62:ff:51:42:80:33:34:5f:f9:db:a1:17: 21:85:0d:e8:7b:1a:3e:a3:d3:33:0f:da:0d:b1:ad:10:fd:c5: 22:a3:92:a0:45:2b:a4:ce:e9:f3:7c:d8:a6:ec:73:e2:7d:21: 0e:6c:b7:08:b7:41:3d:2d:18:0e:90:cf:22:48:29:7d:21:9c: 70:a8:a0:f8:6c:34:f9:55:54:78:6e:ce:aa:34:d2:9b:02:94: 89:d9:d2:66:89:40:66:fb:a9:57:4f:ec:48:54:67:30:52:3f: 45:90:2a:d4:bd:0b:0a:57:6b:d3:12:d4:48:31:b2:dc:eb:8e: 74:db:de:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfGzCFm175QvMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NDBkYjU2N2QtZWVlMi00ZTE4LTk5YjYtMDZkM2NmYjg3NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwX9j85xXaF9lnPuAhZ1eO1wIbnKJftbeMNA d8TGFecLWyima9F8kMPlfuniS5antfe3fM5f85MSpuDFqCSuvOgJkVyirQhpar3v UXd4ZodjEEZTzaKacODv0M38xuVeVTyiIF2DG0JcMxm8IqcTwM45LqJVa7LOOmFb c6tzQBl8csmcBRDw6Atk13G2kIHVLP6V0ss333Ol632id4FUzJf3Od57O45z4Uji MVpwj0bWjyJgZ77HnmNbotPwBC+1/6O7N+NpzEH9lNZYIZPYdrqtMxxnFvph6aAx fJZZFISY7yOkosl9JYGxGoIJHWgtFw7DUIis37/NiCoa0MuCYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGb+h7S8sawCVZTTuHuNYPTsU5h8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM0ZTA2YWYtOTA1ZS0z YWE0LWE2NDAtMGIwYWU5OTQ2NWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADid50sJuApyNcPT+j4bP5LHI7Ue18D9tYCmVruKhDMuw1Qclwb9 NIeKIDAXKEIVLfNa2bsVbIfVXfHmdY4r59f3Yq/RUWrAr4305ABS1RSYwhVxyfIQ pGDDpJrlSd7ePYFCiT381ePCM2AsnZj3lF7BEqjS9GEa5KKJfXMer2SWzn0l2GL/ UUKAMzRf+duhFyGFDeh7Gj6j0zMP2g2xrRD9xSKjkqBFK6TO6fN82Kbsc+J9IQ5s twi3QT0tGA6QzyJIKX0hnHCooPhsNPlVVHhuzqo00psClInZ0maJQGb7qVdP7EhU ZzBSP0WQKtS9CwpXa9MS1EgxstzrjnTb3so= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:23 2025 by rpki-client