$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa File: b67d2449-0a1a-3022-bf24-1497fa2f892a.roa (raw, json) Hash identifier: 5CnM4ZT49L2Qpc8pAoMw9D70OANzfb7bKuHJWQrPMlI= Subject key identifier: 9D:5A:B5:29:2E:BF:EA:E0:F4:94:BA:30:CE:9F:B2:6E:19:2B:AC:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146330C2B8F3A52D78D6B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396546 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:33:0c:2b:8f:3a:52:d7:8d:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=bf3ac7b1-3cf8-4cb0-b373-1c522207a122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:16:17:c7:39:42:44:67:f5:88:e7:f2:58: 2f:57:ab:c6:06:46:8a:48:7a:23:1f:62:87:7a:b9: 11:3c:fe:b3:c3:7e:4d:0d:2c:25:e6:0d:6b:75:f0: 70:19:61:4f:5f:94:e3:e9:9e:7e:61:4a:53:62:71: 8f:e9:d1:da:db:04:64:e1:64:3b:22:57:2f:ca:ab: 35:8d:1e:40:e8:8e:18:fc:a6:54:6b:0b:fe:12:0a: 0b:89:39:ed:fb:3f:88:03:e9:36:60:36:d2:b6:19: 3d:87:2c:35:74:f9:b1:e4:3e:c3:1c:3b:31:86:5e: 81:9b:07:cb:11:35:11:da:a8:4f:b3:fe:40:01:85: 80:29:64:6c:37:d7:26:13:8f:76:bb:74:40:f9:f4: b0:0f:b1:d0:3d:2a:04:a6:07:ba:72:72:f3:3a:93: 75:64:80:3e:a1:76:d8:0e:07:6a:3e:0d:da:99:de: a6:7f:10:20:9b:45:8d:63:96:21:30:a4:22:ad:ea: 85:c6:b6:50:84:95:f3:51:08:c9:6d:6f:3f:ab:7f: 43:ed:ae:fb:a8:43:9b:32:b1:dd:34:bf:f6:d8:ce: 3f:c8:87:f9:ea:0c:1b:8c:a7:6c:c4:ec:e4:b4:80: 37:58:18:47:cd:07:14:8f:ad:9a:cf:9b:fe:01:58: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:B5:29:2E:BF:EA:E0:F4:94:BA:30:CE:9F:B2:6E:19:2B:AC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2f:bc:a3:79:5c:6d:0a:c8:a7:3b:97:62:85:36:c7:05:49: 40:10:49:fa:5a:89:fc:72:91:9c:da:28:cb:61:0d:cf:32:db: cf:97:68:1a:09:62:d8:39:39:d5:29:f7:2f:cb:87:ce:fc:f4: 93:45:ef:7e:20:ec:4b:20:77:03:02:ee:a2:36:2e:2f:33:b7: df:4c:c4:dc:ff:8b:bb:20:73:82:4e:d9:bf:ae:89:6d:63:8e: ea:86:84:40:76:e4:98:07:75:8d:40:2a:6f:f9:2d:31:1b:21: b9:a8:67:41:72:64:9e:c3:dc:13:e3:e0:28:b5:ee:c9:76:fa: 9e:5c:86:c9:b2:86:5b:57:2d:13:ed:b9:ac:ec:25:ee:a5:26: 71:70:bc:01:28:c6:16:b0:17:9f:74:3b:49:a6:0d:a6:be:20: 77:c2:aa:40:29:a0:7e:a8:06:5b:6f:a3:6f:92:0b:56:c2:81: df:8e:41:c9:b2:7f:30:8b:58:4d:d4:05:40:06:7b:38:2b:8c: 8a:82:d9:89:1c:bb:1c:a0:54:d1:cc:65:35:cf:b9:46:a4:b9: 29:de:5c:8b:bd:ee:92:d6:d7:83:29:ab:af:7c:75:02:64:4a: 73:14:c2:8c:0a:64:19:eb:79:77:fb:57:56:b8:c3:e4:92:cc: 44:04:b7:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjMMK486UteNawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmYzYWM3YjEtM2NmOC00Y2IwLWIzNzMtMWM1MjIyMDdhMTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnoWF8c5QkRn9Yjn8lgvV6vGBkaKSHojH2KH erkRPP6zw35NDSwl5g1rdfBwGWFPX5Tj6Z5+YUpTYnGP6dHa2wRk4WQ7Ilcvyqs1 jR5A6I4Y/KZUawv+EgoLiTnt+z+IA+k2YDbSthk9hyw1dPmx5D7DHDsxhl6BmwfL ETUR2qhPs/5AAYWAKWRsN9cmE492u3RA+fSwD7HQPSoEpge6cnLzOpN1ZIA+oXbY DgdqPg3amd6mfxAgm0WNY5YhMKQireqFxrZQhJXzUQjJbW8/q39D7a77qEObMrHd NL/22M4/yIf56gwbjKdsxOzktIA3WBhHzQcUj62az5v+AVg7GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ1atSkuv+rg9JS6MM6fsm4ZK6yEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY3ZDI0NDktMGExYS0z MDIyLWJmMjQtMTQ5N2ZhMmY4OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0vvKN5XG0KyKc7l2KFNscFSUAQSfpaifxykZzaKMthDc8y28+X aBoJYtg5OdUp9y/Lh8789JNF734g7EsgdwMC7qI2Li8zt99MxNz/i7sgc4JO2b+u iW1jjuqGhEB25JgHdY1AKm/5LTEbIbmoZ0FyZJ7D3BPj4Ci17sl2+p5chsmyhltX LRPtuazsJe6lJnFwvAEoxhawF590O0mmDaa+IHfCqkApoH6oBltvo2+SC1bCgd+O QcmyfzCLWE3UBUAGezgrjIqC2YkcuxygVNHMZTXPuUakuSneXIu97pLW14Mpq698 dQJkSnMUwowKZBnreXf7V1a4w+SSzEQEt98= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:21 2025 by rpki-client