$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b394f078-30ab-3099-bca3-d281d10a1e38.roa File: b394f078-30ab-3099-bca3-d281d10a1e38.roa (raw, json) Hash identifier: uqOGVsI783t/w/Azsl85imbAQVSrU0+nhulu/FNU9z4= Subject key identifier: 54:F8:42:47:29:52:43:5E:24:D8:80:EF:5A:D5:9A:FE:4B:A3:E8:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814631F9E37D920D4EB62000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b394f078-30ab-3099-bca3-d281d10a1e38.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397197 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:31:f9:e3:7d:92:0d:4e:b6:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d51bf1d0-cc96-494e-94a5-924980cb0e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:84:8b:32:db:91:d1:9d:ae:c9:71:7b:d9: f7:e0:f9:e7:2f:fc:57:a3:90:ce:a9:3b:46:aa:bb: b2:f6:3d:b2:7f:3a:02:0f:80:09:47:9b:64:c3:2d: 77:89:a4:f4:08:b9:26:d9:5e:60:d2:36:dd:d0:cb: a2:58:51:31:74:38:aa:fd:9b:a7:5d:76:2c:da:2e: 3f:07:8d:7d:ee:6e:bf:21:ab:c1:6c:ae:e5:06:ee: 76:3a:b1:e7:ff:3e:82:6c:5d:12:8f:8a:c0:22:17: 25:00:97:de:65:ab:83:94:fe:ef:df:72:c9:0a:2c: 7d:3d:e6:e5:3c:0c:95:e3:79:30:88:57:43:da:de: ab:e9:32:ad:83:72:5d:22:62:6f:f8:e4:af:57:01: 85:4a:ae:83:63:18:5e:51:b6:3e:24:e1:8e:51:77: 9e:cd:00:5a:a6:c3:87:3d:3b:d4:57:7f:86:17:2f: f4:08:9c:74:d6:70:b3:a9:17:93:14:c4:68:92:06: 9a:e7:4b:6b:15:49:fa:68:15:e8:04:d7:ee:96:e5: 88:c3:c7:dd:01:a8:25:d2:3f:61:18:ad:92:3d:b8: 1f:96:fd:7e:bb:75:b6:2f:3e:fd:03:92:63:28:f3: 85:e5:69:ec:8d:60:10:68:8f:39:60:38:a0:cc:94: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F8:42:47:29:52:43:5E:24:D8:80:EF:5A:D5:9A:FE:4B:A3:E8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b394f078-30ab-3099-bca3-d281d10a1e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:21:83:3e:36:f7:ef:4f:21:0b:12:14:fb:8b:ae:84:d0:90: 5f:c5:af:65:bd:9e:c7:89:1a:e6:75:2e:21:ef:3c:1a:77:88: 75:52:b8:82:17:e3:67:13:fd:ee:7d:87:be:4f:84:9f:39:9a: 30:99:ce:49:fa:09:e9:14:b5:83:4a:e0:10:0d:52:71:c1:d9: 53:a8:1a:6e:ed:30:18:9f:5f:c7:b8:fa:5a:74:0c:0b:6e:ac: f2:73:5b:9d:6a:5b:a8:f5:00:42:c2:87:e5:62:64:8d:1b:fb: 5c:fb:39:82:d4:fb:40:46:6a:0d:19:b9:b2:86:e0:e3:49:c3: 78:55:d2:a1:30:5d:03:c2:89:04:8c:55:62:f5:1b:53:31:7a: d3:ce:23:bb:55:a9:17:cd:0a:89:bf:1c:37:75:01:e1:17:c9: ea:e6:e9:42:dd:42:aa:1c:ea:40:60:af:8c:b1:d2:14:ac:97: 86:b4:85:45:53:21:33:e2:21:f3:4c:d2:e7:c4:db:cb:72:71: c0:23:a6:ec:61:3e:08:61:1d:a3:04:f2:2f:dc:31:53:57:31: 3f:23:b1:c4:10:17:69:10:ea:e0:bf:d5:e0:41:5b:ef:66:e7: d5:8d:b1:ad:5e:a5:ae:9c:a0:db:fd:ad:e6:ef:03:4e:b4:ee: a7:57:a5:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjH5432SDU62IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDUxYmYxZDAtY2M5Ni00OTRlLTk0YTUtOTI0OTgwY2IwZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsmEizLbkdGdrslxe9n34PnnL/xXo5DOqTtG qruy9j2yfzoCD4AJR5tkwy13iaT0CLkm2V5g0jbd0MuiWFExdDiq/ZunXXYs2i4/ B4197m6/IavBbK7lBu52OrHn/z6CbF0Sj4rAIhclAJfeZauDlP7v33LJCix9Pebl PAyV43kwiFdD2t6r6TKtg3JdImJv+OSvVwGFSq6DYxheUbY+JOGOUXeezQBapsOH PTvUV3+GFy/0CJx01nCzqReTFMRokgaa50trFUn6aBXoBNfuluWIw8fdAagl0j9h GK2SPbgflv1+u3W2Lz79A5JjKPOF5WnsjWAQaI85YDigzJT9yQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFT4QkcpUkNeJNiA71rVmv5Lo+gcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM5NGYwNzgtMzBhYi0z MDk5LWJjYTMtZDI4MWQxMGExZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE0hgz429+9PIQsSFPuLroTQkF/Fr2W9nseJGuZ1LiHvPBp3iHVS uIIX42cT/e59h75PhJ85mjCZzkn6CekUtYNK4BANUnHB2VOoGm7tMBifX8e4+lp0 DAturPJzW51qW6j1AELCh+ViZI0b+1z7OYLU+0BGag0ZubKG4ONJw3hV0qEwXQPC iQSMVWL1G1MxetPOI7tVqRfNCom/HDd1AeEXyerm6ULdQqoc6kBgr4yx0hSsl4a0 hUVTITPiIfNM0ufE28tyccAjpuxhPghhHaME8i/cMVNXMT8jscQQF2kQ6uC/1eBB W+9m59WNsa1epa6coNv9rebvA0607qdXpYE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:10 2025 by rpki-client