$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b834c769-9987-31e0-ab0e-3b22c60cce31.roa File: b834c769-9987-31e0-ab0e-3b22c60cce31.roa (raw, json) Hash identifier: 1Xat9OwS4QEb+/8rrx6DHo6CcphzzbA4rI0tMlgl2Bo= Subject key identifier: F5:D0:2C:E1:21:B9:ED:85:E5:A3:FC:EA:81:F5:12:C2:33:BB:70:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F292EC99BAEFDC7F2A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b834c769-9987-31e0-ab0e-3b22c60cce31.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396591 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f2:92:ec:99:ba:ef:dc:7f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=644882e2-4746-48c2-b7ac-3785f9eff5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:3c:ba:12:a4:23:9e:73:ce:66:31:59:29: 81:51:72:6f:3a:d7:f1:a7:da:08:14:47:14:ea:d7: 66:8a:d9:9e:b2:43:f4:cc:77:41:e5:5b:54:82:ee: 46:c0:f7:4c:4a:7b:ae:80:47:b0:e1:b3:9d:80:43: 85:20:b0:3f:16:c5:7f:0d:9e:3b:ae:80:7b:9c:83: 34:6f:c4:e2:7b:92:f0:1e:c6:d1:76:6a:5e:df:4a: 0d:d0:15:10:fb:a2:f0:85:35:57:24:f9:7f:74:b3: 57:66:23:40:85:89:54:62:e4:c4:e4:69:70:1f:34: 85:ad:69:1a:31:9f:8f:09:c4:f2:f7:c3:39:dd:f0: e6:f7:21:15:f2:7c:6f:53:6a:f7:94:84:56:04:20: d5:13:1c:16:27:ce:fc:bb:bc:53:3a:0f:3d:07:0a: 10:79:48:14:c4:71:98:76:14:25:9a:a3:52:54:d2: bb:46:6b:3f:86:13:82:d7:03:68:b9:36:93:e6:d5: d7:56:ae:62:47:98:ba:ae:d4:5e:b7:24:b8:6c:d4: d3:2a:ed:6c:ec:7a:54:9c:05:22:62:6f:2d:c9:ca: 39:64:a1:75:b7:4a:06:aa:04:2f:84:a7:28:4b:33: a8:bd:13:09:3e:ff:c8:94:e4:44:63:e4:dc:6e:e9: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D0:2C:E1:21:B9:ED:85:E5:A3:FC:EA:81:F5:12:C2:33:BB:70:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b834c769-9987-31e0-ab0e-3b22c60cce31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:52:80:e4:0f:de:f5:65:27:03:12:28:a7:6e:8f:ac:bf:9b: 2a:6a:42:88:5c:b3:1f:2a:6b:94:c8:5e:73:c3:1a:12:01:ac: 7f:79:c8:c1:d2:cf:f4:d2:3d:0e:0e:6d:35:3f:5a:e7:ca:38: 58:f4:2f:75:d3:88:fb:59:f4:0f:f6:18:29:4a:0f:bf:6a:9b: f2:0f:4f:80:8e:f7:a2:9b:c2:78:3c:ec:5e:ac:35:e6:f4:0e: e0:07:ad:09:13:4b:65:90:39:d7:30:b1:41:b9:86:5b:13:44: f7:79:06:ea:65:ee:99:eb:65:99:0f:46:bd:1c:66:33:21:81: 96:84:5f:29:e0:80:63:73:74:50:2c:50:03:c7:46:ab:a5:c4: 54:76:61:b1:41:e5:6e:a5:e3:57:95:b5:44:da:99:01:76:4a: 17:39:ae:90:2b:a0:00:fe:6e:b6:d1:f2:05:af:46:51:ef:7f: 70:7a:6d:58:43:0a:a2:59:c6:93:0d:93:ed:f7:f5:9f:66:a9: 26:20:8b:a9:12:27:fe:0d:95:b0:7f:7a:f0:14:ed:37:5d:24: a7:72:61:b4:66:31:29:2e:4b:59:64:6f:39:fd:c9:78:63:10: 37:99:04:ba:43:a7:c2:de:eb:c8:dc:f5:0e:f5:9d:95:43:86: c2:43:50:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfKS7Jm679x/KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NjQ0ODgyZTItNDc0Ni00OGMyLWI3YWMtMzc4NWY5ZWZmNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7k8uhKkI55zzmYxWSmBUXJvOtfxp9oIFEcU 6tdmitmeskP0zHdB5VtUgu5GwPdMSnuugEew4bOdgEOFILA/FsV/DZ47roB7nIM0 b8Tie5LwHsbRdmpe30oN0BUQ+6LwhTVXJPl/dLNXZiNAhYlUYuTE5GlwHzSFrWka MZ+PCcTy98M53fDm9yEV8nxvU2r3lIRWBCDVExwWJ878u7xTOg89BwoQeUgUxHGY dhQlmqNSVNK7Rms/hhOC1wNouTaT5tXXVq5iR5i6rtRetyS4bNTTKu1s7HpUnAUi Ym8tyco5ZKF1t0oGqgQvhKcoSzOovRMJPv/IlOREY+TcbumNyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPXQLOEhue2F5aP86oH1EsIzu3B6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjgzNGM3NjktOTk4Ny0z MWUwLWFiMGUtM2IyMmM2MGNjZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1SgOQP3vVlJwMSKKduj6y/mypqQohcsx8qa5TIXnPDGhIBrH95 yMHSz/TSPQ4ObTU/WufKOFj0L3XTiPtZ9A/2GClKD79qm/IPT4CO96Kbwng87F6s Neb0DuAHrQkTS2WQOdcwsUG5hlsTRPd5Bupl7pnrZZkPRr0cZjMhgZaEXynggGNz dFAsUAPHRqulxFR2YbFB5W6l41eVtUTamQF2Shc5rpAroAD+brbR8gWvRlHvf3B6 bVhDCqJZxpMNk+339Z9mqSYgi6kSJ/4NlbB/evAU7TddJKdyYbRmMSkuS1lkbzn9 yXhjEDeZBLpDp8Le68jc9Q71nZVDhsJDULE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:14 2025 by rpki-client