$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa File: b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa (raw, json) Hash identifier: ljsOVQbkuSLFgpzK0xTedy/tUZpXrumvXMhVqBLpGl8= Subject key identifier: DB:FB:70:A0:1D:D1:F0:0E:7F:89:A9:6A:D3:9D:15:E4:10:4B:6B:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146352814E26CD9E1B0DFA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396606 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:28:14:e2:6c:d9:e1:b0:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=856a07fb-8407-4ca4-b30b-81908f67cd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:39:43:3e:1b:b7:63:b8:1d:90:6c:cd:02: ac:ff:30:7c:83:8c:02:c1:64:c7:a1:fb:a4:77:3d: bd:bd:b4:d6:ec:36:a8:11:bd:c6:26:84:dd:b2:71: 1f:45:25:a7:f9:ec:7f:0d:56:80:4e:3b:52:2a:62: 84:4d:a4:c7:28:7f:be:35:79:dd:bf:0e:40:bb:92: 85:81:5d:b6:4b:1c:91:2a:57:d8:39:ac:1e:03:5d: 9a:ae:2e:50:39:10:06:4c:42:c3:f0:ec:6e:70:d5: 25:b7:7c:52:ec:f5:34:72:b4:d3:b3:8a:75:9a:5b: ee:9d:b1:b7:20:f7:47:06:99:85:37:72:14:b6:fb: 97:8d:90:bc:6c:02:a2:ad:31:f4:38:5c:19:2c:2c: 32:30:a4:94:4e:d8:0a:7b:f1:6b:63:92:5b:51:d2: 7c:f3:a3:24:b7:2a:46:27:a6:c9:d7:ec:89:b4:b9: 47:62:e5:b4:3f:c8:53:bf:27:18:0b:6e:96:f8:a6: e0:0c:64:00:c6:68:8f:16:2a:98:ef:12:20:e3:8e: cb:cd:b6:04:9a:54:5a:8a:62:50:f7:7f:f4:cc:1c: 74:dc:ca:d5:60:e3:57:3d:80:a8:9d:c6:a5:0e:5b: 62:fd:e1:f0:e5:cd:f5:0c:9d:96:12:6c:33:62:df: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FB:70:A0:1D:D1:F0:0E:7F:89:A9:6A:D3:9D:15:E4:10:4B:6B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:53:e3:43:97:27:84:10:35:e7:39:45:32:dc:ca:37:99:a7: cd:3f:5e:a0:78:8e:6f:8b:c3:fb:69:58:d8:af:eb:16:f6:63: c6:e5:f5:4d:58:41:cd:2e:7d:9c:97:a5:bb:a7:b7:22:03:34: 81:c4:80:7f:9c:0b:11:2b:fc:0d:5e:2a:f1:df:07:8d:e8:0d: e5:88:fe:a3:9e:13:5d:13:b3:be:d3:3a:a1:29:4f:3c:dd:36: 5b:70:ec:8a:8c:17:91:f4:ff:2a:0c:f4:81:37:c7:c8:db:c4: 71:95:b1:a7:82:5a:55:ad:20:40:bd:1c:45:b9:1b:28:8f:c6: 53:87:85:63:84:07:7a:22:ba:fd:bb:c6:b5:8e:ea:55:9f:ed: 9f:af:62:e7:b0:86:1a:5c:e1:7c:0f:ae:60:5f:26:a4:96:99: 43:ce:8f:fb:55:6c:2c:9a:d9:32:b0:59:e8:49:6d:5e:e7:3e: 90:12:17:19:bd:f0:cf:74:33:9f:89:bd:b8:9e:fc:c5:53:02: 62:da:00:bd:ed:d1:5a:5f:b6:8c:10:78:81:75:d1:14:d3:4f: 8c:ec:62:57:ff:3b:cf:ae:91:1c:3a:ef:57:c5:38:94:f3:45: 5f:00:43:f6:ee:39:36:93:ee:f0:b0:df:43:cf:27:3b:a5:32: d4:e3:7b:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjUoFOJs2eGw36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ODU2YTA3ZmItODQwNy00Y2E0LWIzMGItODE5MDhmNjdjZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXY5Qz4bt2O4HZBszQKs/zB8g4wCwWTHofuk dz29vbTW7DaoEb3GJoTdsnEfRSWn+ex/DVaATjtSKmKETaTHKH++NXndvw5Au5KF gV22SxyRKlfYOaweA12ari5QORAGTELD8OxucNUlt3xS7PU0crTTs4p1mlvunbG3 IPdHBpmFN3IUtvuXjZC8bAKirTH0OFwZLCwyMKSUTtgKe/FrY5JbUdJ886MktypG J6bJ1+yJtLlHYuW0P8hTvycYC26W+KbgDGQAxmiPFiqY7xIg447LzbYEmlRaimJQ 93/0zBx03MrVYONXPYConcalDlti/eHw5c31DJ2WEmwzYt99cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNv7cKAd0fAOf4mpatOdFeQQS2vEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjUwYzRlZDQtY2ZlMC0z MzM3LTkwYjgtZmFlYWU2Yzg0MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBT40OXJ4QQNec5RTLcyjeZp80/XqB4jm+Lw/tpWNiv6xb2Y8bl 9U1YQc0ufZyXpbuntyIDNIHEgH+cCxEr/A1eKvHfB43oDeWI/qOeE10Ts77TOqEp TzzdNltw7IqMF5H0/yoM9IE3x8jbxHGVsaeCWlWtIEC9HEW5GyiPxlOHhWOEB3oi uv27xrWO6lWf7Z+vYuewhhpc4XwPrmBfJqSWmUPOj/tVbCya2TKwWehJbV7nPpAS Fxm98M90M5+Jvbie/MVTAmLaAL3t0VpftowQeIF10RTTT4zsYlf/O8+ukRw671fF OJTzRV8AQ/buOTaT7vCw30PPJzulMtTje28= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:38 2025 by rpki-client