$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b646e09b-c10a-3620-bb3e-47bbc2da9a94.roa File: b646e09b-c10a-3620-bb3e-47bbc2da9a94.roa (raw, json) Hash identifier: /O9Ejzpzm7/OBjyyxRMo5MlsuV7Z8Of9adrPJguO1Lg= Subject key identifier: F4:1F:E9:06:2B:80:08:66:72:BB:A6:7E:24:44:AD:76:D4:10:95:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814637626183F2B56F196B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b646e09b-c10a-3620-bb3e-47bbc2da9a94.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396588 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:62:61:83:f2:b5:6f:19:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a8e5ad49-7262-4836-b2a9-ddace9b19544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:0d:76:7b:12:4e:1a:2a:53:65:9b:df:8b: 89:fc:4c:e9:13:c5:90:fd:80:dd:41:7f:b1:a7:10: b1:5d:8e:c4:d7:7c:85:c7:90:76:b9:2f:d3:81:25: 95:da:01:e8:b6:21:26:f5:b8:64:8c:4e:8b:63:cb: 40:7b:fd:ed:a3:9f:a2:a8:d5:07:ff:a7:e6:b1:93: 68:34:f6:ee:d7:1a:1b:82:e1:cd:72:99:9c:18:0f: ef:ed:2a:2a:e2:f0:f7:2a:c4:17:5e:fd:f6:a1:41: 71:cc:32:5c:2f:04:15:82:7f:a1:ed:f6:ae:80:21: 4c:a8:3a:cf:27:be:e5:16:5b:46:3b:93:c0:42:f6: 90:b7:b9:8b:27:47:77:3d:55:11:fd:4c:ae:a1:17: 49:18:e6:ce:ea:b9:58:32:57:c0:03:6d:4a:e3:9b: 18:35:1c:d1:b1:87:b7:7f:b3:42:05:e6:a6:c7:a4: a7:d5:72:a5:87:8d:43:0d:ec:5c:c9:b0:25:62:54: f0:0b:a2:bb:e2:6b:8a:6a:04:3d:4c:3f:3a:8a:fc: a6:05:1d:86:78:13:39:9f:ef:92:fb:95:70:ed:10: 8e:05:36:e4:01:ce:52:5d:0a:10:29:ff:e3:49:4e: 1f:09:ab:20:52:ac:12:6e:4c:57:13:a9:56:c0:fc: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:E9:06:2B:80:08:66:72:BB:A6:7E:24:44:AD:76:D4:10:95:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b646e09b-c10a-3620-bb3e-47bbc2da9a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4f:e4:ac:15:85:6a:7d:8f:65:29:4f:47:fb:f7:59:7b:55: 77:35:73:d5:73:a1:d6:15:60:52:b1:2b:fb:4a:41:3a:a4:5f: e0:5f:01:bd:70:88:52:4e:94:6a:8c:1b:12:1a:df:78:a7:ef: cc:65:2d:52:e3:a9:7e:46:98:16:80:15:0d:b3:40:5e:6b:51: f7:3a:80:e4:29:d3:72:ef:5a:fa:39:3a:b2:0b:00:77:e7:38: 15:f1:12:3f:0d:08:1d:6d:47:59:b6:be:7b:e5:74:2d:f7:88: 60:58:ec:37:99:17:dd:23:f0:1b:65:39:16:58:31:e2:0c:62: dd:b4:01:21:bd:47:63:5f:37:51:57:5d:1e:17:0d:f4:cb:51: 8c:86:a2:26:d9:8d:b9:30:98:7f:55:8f:45:95:93:dc:af:74: b9:38:00:9f:18:6d:3d:eb:4a:bd:c5:10:7e:0f:a0:fc:35:fb: d4:0b:47:23:30:36:86:34:3d:a1:9c:c4:28:07:15:4f:5a:f8: c5:4a:33:f7:26:18:c3:bc:ab:e2:cd:25:cd:4a:44:8d:4d:18: 49:b8:db:3d:92:c3:76:dd:54:9b:90:e1:9f:94:54:fe:9b:1f: 6a:fe:01:5d:0c:5f:9e:63:3d:ee:60:02:4b:a2:84:2d:c8:2b: 56:b0:82:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjdiYYPytW8ZawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YThlNWFkNDktNzI2Mi00ODM2LWIyYTktZGRhY2U5YjE5NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrkNdnsSThoqU2Wb34uJ/EzpE8WQ/YDdQX+x pxCxXY7E13yFx5B2uS/TgSWV2gHotiEm9bhkjE6LY8tAe/3to5+iqNUH/6fmsZNo NPbu1xobguHNcpmcGA/v7Soq4vD3KsQXXv32oUFxzDJcLwQVgn+h7faugCFMqDrP J77lFltGO5PAQvaQt7mLJ0d3PVUR/UyuoRdJGObO6rlYMlfAA21K45sYNRzRsYe3 f7NCBeamx6Sn1XKlh41DDexcybAlYlTwC6K74muKagQ9TD86ivymBR2GeBM5n++S +5Vw7RCOBTbkAc5SXQoQKf/jSU4fCasgUqwSbkxXE6lWwPzl+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPQf6QYrgAhmcrumfiRErXbUEJXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY0NmUwOWItYzEwYS0z NjIwLWJiM2UtNDdiYmMyZGE5YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhP5KwVhWp9j2UpT0f791l7VXc1c9VzodYVYFKxK/tKQTqkX+Bf Ab1wiFJOlGqMGxIa33in78xlLVLjqX5GmBaAFQ2zQF5rUfc6gOQp03LvWvo5OrIL AHfnOBXxEj8NCB1tR1m2vnvldC33iGBY7DeZF90j8BtlORZYMeIMYt20ASG9R2Nf N1FXXR4XDfTLUYyGoibZjbkwmH9Vj0WVk9yvdLk4AJ8YbT3rSr3FEH4PoPw1+9QL RyMwNoY0PaGcxCgHFU9a+MVKM/cmGMO8q+LNJc1KRI1NGEm42z2Sw3bdVJuQ4Z+U VP6bH2r+AV0MX55jPe5gAkuihC3IK1awgm0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:10 2025 by rpki-client