$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa File: b3eef609-149f-3bcf-b888-57b9229f7002.roa (raw, json) Hash identifier: C756E3Ac+ey8uO9++9EBHAhGoX3oW1O0hA2HLBbm2Gc= Subject key identifier: 99:72:0B:23:F4:13:E5:74:C5:72:0C:D5:AF:F8:CB:EC:54:FB:8F:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A96369A9B6FD4AB521CC107E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 7342 IP address blocks: 2620:74:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:9a:9b:6f:d4:ab:52:1c:c1:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0c98866a-0b83-45e8-9fa9-00e3be5d3ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:15:c7:cd:1d:51:29:09:1b:57:11:31:46: ef:94:6a:df:3e:35:c0:01:8e:d3:48:1c:6f:13:68: fd:85:70:9e:9b:14:6d:5d:c5:d7:3c:9a:67:0c:13: 60:cb:cf:6e:73:41:df:c8:06:25:1d:61:7d:e4:be: e4:0c:6b:4d:f3:40:4e:3b:ef:0e:c6:f2:9f:6f:05: 49:2d:ca:9c:fd:83:9a:7e:83:fe:08:d9:90:1b:53: 16:a9:dd:6d:c2:46:9a:47:56:78:57:62:df:e8:3e: 9f:61:bc:23:46:33:7b:38:98:4b:62:54:a7:52:fc: c1:ff:4f:0e:90:2a:b8:6b:ea:8a:4f:aa:ef:3d:34: ee:44:a1:bf:34:60:ee:1a:1e:02:8c:36:44:ee:cd: 21:24:ee:a5:72:a2:65:38:bb:f7:cc:cc:54:52:13: 88:16:ed:6d:0f:64:e0:8e:b2:96:c3:73:b8:ee:b1: 10:67:d2:ed:5e:69:ee:d9:65:71:5c:51:28:16:ee: 75:4b:04:b2:3b:9f:ec:06:94:ec:a8:df:33:da:5e: 71:71:6d:39:e7:88:27:30:ec:de:37:f7:79:d3:79: aa:3e:74:a0:b3:30:43:e5:78:ac:88:24:2d:3d:56: 0c:42:1c:84:a1:27:f4:24:a0:91:c0:da:0b:3b:ab: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:0B:23:F4:13:E5:74:C5:72:0C:D5:AF:F8:CB:EC:54:FB:8F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8e:c5:fb:de:fe:5a:9e:70:8b:27:e8:01:bb:3a:8f:15:1a: f3:b2:18:8c:ac:15:8d:bf:92:04:60:64:0a:b2:75:10:94:2c: 91:17:af:e9:df:e3:05:bf:87:34:7f:2a:34:d0:62:a8:63:49: f6:ea:49:e8:c8:83:10:89:7d:69:cb:96:d7:4e:2b:a5:3f:b2: f8:4e:c1:57:62:e2:3c:20:26:ff:57:2e:11:42:d3:bf:7a:80: 51:8d:3c:9d:38:f1:6a:fd:ff:2b:b1:35:af:ba:5c:be:81:3a: 8b:06:c8:cf:ab:e5:48:50:b1:b1:ec:59:de:61:ed:3f:8b:6e: 97:aa:8a:a9:7d:97:58:3e:76:a8:bd:23:07:b0:42:9d:2e:75: 29:f8:2f:7d:fd:99:8c:a5:da:b6:fa:b4:ea:b9:11:f1:ab:c5: de:72:1d:e2:cd:3c:7f:59:9e:07:79:e9:bd:c2:74:e0:51:91: 4e:14:49:86:94:2d:e2:0c:c0:5c:0d:b7:e5:3e:67:6b:20:a6: 39:84:37:4e:20:cf:41:e2:f8:e7:08:04:52:3a:b2:a0:39:67: d5:1a:14:5f:e4:23:69:01:ed:ac:f8:4a:c6:3b:1c:3d:59:00: 75:a2:82:bb:25:63:63:d2:2b:aa:1d:cc:43:04:af:ef:c4:7b: f1:32:b2:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqWNpqbb9SrUhzBB+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MGM5ODg2NmEtMGI4My00NWU4LTlmYTktMDBlM2JlNWQzYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2kVx80dUSkJG1cRMUbvlGrfPjXAAY7TSBxv E2j9hXCemxRtXcXXPJpnDBNgy89uc0HfyAYlHWF95L7kDGtN80BOO+8OxvKfbwVJ Lcqc/YOafoP+CNmQG1MWqd1twkaaR1Z4V2Lf6D6fYbwjRjN7OJhLYlSnUvzB/08O kCq4a+qKT6rvPTTuRKG/NGDuGh4CjDZE7s0hJO6lcqJlOLv3zMxUUhOIFu1tD2Tg jrKWw3O47rEQZ9LtXmnu2WVxXFEoFu51SwSyO5/sBpTsqN8z2l5xcW0554gnMOze N/d503mqPnSgszBD5XisiCQtPVYMQhyEoSf0JKCRwNoLO6uTBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJlyCyP0E+V0xXIM1a/4y+xU+4/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlZWY2MDktMTQ5Zi0z YmNmLWI4ODgtNTdiOTIyOWY3MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEuOxfve/lqecIsn6AG7Oo8VGvOyGIysFY2/kgRgZAqydRCULJEX r+nf4wW/hzR/KjTQYqhjSfbqSejIgxCJfWnLltdOK6U/svhOwVdi4jwgJv9XLhFC 0796gFGNPJ048Wr9/yuxNa+6XL6BOosGyM+r5UhQsbHsWd5h7T+Lbpeqiql9l1g+ dqi9IwewQp0udSn4L339mYyl2rb6tOq5EfGrxd5yHeLNPH9Zngd56b3CdOBRkU4U SYaULeIMwFwNt+U+Z2sgpjmEN04gz0Hi+OcIBFI6sqA5Z9UaFF/kI2kB7az4SsY7 HD1ZAHWigrslY2PSK6odzEMEr+/Ee/EysnY= -----END CERTIFICATE-----Generated at Thu Jul 24 00:04:09 2025 by rpki-client