$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70beb28-c07c-394c-a4bd-01aa89549710.roa File: b70beb28-c07c-394c-a4bd-01aa89549710.roa (raw, json) Hash identifier: e1gn/KcyKV0zi6ngPRCtyTuktlbvFrUPKAGsZsYkFzg= Subject key identifier: 65:C4:B1:58:84:34:A8:EE:61:E3:6F:16:BD:7D:E1:EB:7D:9E:75:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814638AEB5EDDD6779245900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70beb28-c07c-394c-a4bd-01aa89549710.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397204 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:38:ae:b5:ed:dd:67:79:24:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=99078ea2-7887-48bb-8491-2b7530e2d7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:e2:5a:c9:39:9c:19:65:d7:55:3e:e9:61: a8:4f:88:a9:1e:ae:45:39:fd:4d:d0:a9:d7:83:02: 25:6e:c5:5f:0b:69:7c:97:76:fa:ca:fa:62:cc:bc: 9b:fa:ba:cf:be:fc:75:24:c3:08:06:78:8e:58:f9: 95:c7:9d:ce:5d:62:fa:33:a0:29:c8:81:f3:f0:f1: d6:aa:84:a7:b8:d3:eb:56:60:b4:a1:6c:47:d4:43: f2:2a:64:54:b4:86:ac:a2:64:1d:a3:d8:90:09:57: 4b:1e:09:f3:ed:dd:8a:55:0f:78:23:38:db:f2:49: a4:43:33:d2:53:d4:59:bd:df:1a:16:0a:8d:cd:b2: 79:b0:97:03:33:43:38:25:4a:5a:d2:84:04:d5:99: 1e:64:20:75:c7:11:71:49:dc:f5:17:9a:f0:e4:0a: 7f:be:5a:c7:a3:52:82:b1:60:f5:f6:ad:65:68:d9: fc:97:22:1b:cc:92:88:85:b1:1f:c7:ee:76:2a:75: 7e:18:cf:2f:9d:8d:2c:2c:4d:9d:e8:e4:62:a3:ba: e7:47:4b:b4:b1:07:92:99:bd:ed:dd:13:95:c4:18: e7:70:dd:3c:12:ef:bc:b9:5a:4d:3d:73:c6:48:81: 4d:d1:5a:0b:ee:9d:c6:be:e3:d8:86:3a:47:ac:8f: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C4:B1:58:84:34:A8:EE:61:E3:6F:16:BD:7D:E1:EB:7D:9E:75:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70beb28-c07c-394c-a4bd-01aa89549710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c5:8f:4f:f0:5b:27:60:e8:b6:5e:30:94:a4:46:0e:44:18: 91:23:6c:c7:35:f8:13:68:cd:7d:d8:da:cc:57:02:bb:b6:1f: a0:14:f8:3a:a8:97:e4:6c:00:68:02:37:6d:f2:1e:3b:fa:b3: 1e:77:de:37:a2:fd:d2:73:41:58:31:90:94:ba:8c:07:32:73: d8:bc:cb:d9:88:d2:ce:87:59:be:71:7c:5a:7b:5c:dd:5c:eb: 3b:68:61:6c:27:c2:c1:58:71:29:c3:d6:79:e2:8c:ed:b7:e2: 78:8a:26:4e:28:3d:e3:b3:b6:13:5c:06:81:2a:c9:c3:b0:b8: ac:7b:de:96:1d:86:0c:13:98:b8:0c:93:93:d0:5d:d2:61:3d: 1e:83:0b:1e:c5:8b:b4:f1:61:26:0d:47:1c:fc:a6:99:2f:59: b8:c1:f3:db:3f:af:53:5c:6c:1b:8e:cd:70:d0:a7:bc:53:b3: 8a:e2:41:71:04:82:a5:89:7f:56:e1:cc:eb:ee:79:39:b8:8d: 38:fb:9b:a0:13:8f:b1:b7:5a:b1:ff:a5:d7:05:22:cd:98:e9: c6:55:7a:dc:32:70:9f:e4:04:13:f2:61:e6:a9:79:64:fa:e4: 7a:2d:84:df:64:fd:fc:aa:c9:22:45:44:e7:23:d8:07:5e:b4: 96:f6:b1:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjiute3dZ3kkWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OTkwNzhlYTItNzg4Ny00OGJiLTg0OTEtMmI3NTMwZTJkN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAniWsk5nBll11U+6WGoT4ipHq5FOf1N0KnX gwIlbsVfC2l8l3b6yvpizLyb+rrPvvx1JMMIBniOWPmVx53OXWL6M6ApyIHz8PHW qoSnuNPrVmC0oWxH1EPyKmRUtIasomQdo9iQCVdLHgnz7d2KVQ94Izjb8kmkQzPS U9RZvd8aFgqNzbJ5sJcDM0M4JUpa0oQE1ZkeZCB1xxFxSdz1F5rw5Ap/vlrHo1KC sWD19q1laNn8lyIbzJKIhbEfx+52KnV+GM8vnY0sLE2d6ORio7rnR0u0sQeSmb3t 3ROVxBjncN08Eu+8uVpNPXPGSIFN0VoL7p3GvuPYhjpHrI+2cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXEsViENKjuYeNvFr194et9nnWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjcwYmViMjgtYzA3Yy0z OTRjLWE0YmQtMDFhYTg5NTQ5NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzFj0/wWydg6LZeMJSkRg5EGJEjbMc1+BNozX3Y2sxXAru2H6AU +Dqol+RsAGgCN23yHjv6sx533jei/dJzQVgxkJS6jAcyc9i8y9mI0s6HWb5xfFp7 XN1c6ztoYWwnwsFYcSnD1nnijO234niKJk4oPeOzthNcBoEqycOwuKx73pYdhgwT mLgMk5PQXdJhPR6DCx7Fi7TxYSYNRxz8ppkvWbjB89s/r1NcbBuOzXDQp7xTs4ri QXEEgqWJf1bhzOvueTm4jTj7m6ATj7G3WrH/pdcFIs2Y6cZVetwycJ/kBBPyYeap eWT65HothN9k/fyqySJFROcj2AdetJb2sZU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:28 2025 by rpki-client