$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa File: bcd1f127-2932-3f37-b293-39529e72599c.roa (raw, json) Hash identifier: DpOtSUfdOZ7va2uEilmx6IYLs44nnbltIf5THhQr/VU= Subject key identifier: 40:89:EC:CF:9C:C7:56:EB:1A:4E:BE:14:95:99:E7:C9:6A:D5:F3:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814634D15FD9C4182F4FDD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 21313 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:34:d1:5f:d9:c4:18:2f:4f:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d0678541-6ae8-4bf4-b1d2-920af0bf0fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:0f:17:80:54:f1:10:dd:cf:71:e1:d0:47: 07:cd:66:35:b6:60:75:84:78:c6:61:56:a0:50:50: 5f:6b:ac:30:49:49:5b:42:1e:54:1a:3d:5d:93:16: 5a:f9:7d:31:ad:55:21:18:a3:f7:4c:b6:ae:ed:87: f8:13:4d:51:b1:0b:cb:c0:62:cf:e3:41:2d:9d:4b: 4e:d1:78:0d:59:d1:e1:ec:45:f6:1f:ce:40:ea:bf: fa:c0:1e:4d:99:94:1a:26:de:74:31:77:30:c0:ce: 3e:ad:f3:d9:e7:9e:08:1a:05:5c:e3:a6:11:5a:5f: bf:c1:90:fe:ad:67:d6:3b:6c:c3:a9:57:b9:ae:9a: da:ef:0a:40:cb:5d:54:aa:6a:48:ce:1a:a0:0f:1b: 8b:15:ac:af:83:c7:19:8b:d3:e1:62:46:f7:db:7d: ec:a3:3b:85:48:f1:f1:ff:c8:3d:1f:0d:6d:d6:31: e0:b8:94:47:53:21:39:3e:f8:14:24:bf:d6:4d:96: 80:d5:29:14:b0:8b:d4:c3:aa:fd:56:89:0c:c8:58: eb:59:7d:09:7c:c1:0c:72:b2:78:16:77:e1:32:db: 3a:b2:f5:90:fa:ab:8f:82:24:e4:4c:7d:93:62:fb: 4e:6b:4c:d6:8c:ae:76:ee:bb:73:aa:bd:f5:48:72: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:89:EC:CF:9C:C7:56:EB:1A:4E:BE:14:95:99:E7:C9:6A:D5:F3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:22:5f:89:e9:50:0f:4e:b9:41:55:48:ac:c2:f3:aa:c1:60: 8f:28:85:50:50:0b:43:77:e5:41:ee:a9:60:16:0a:68:27:94: f0:42:f0:15:d8:99:03:1d:a0:2a:7e:fe:20:f8:52:ed:32:d5: 3e:1e:f8:10:70:66:88:d5:87:62:b6:d2:2b:35:7d:e5:7f:0c: 95:b6:dd:9f:48:34:14:66:9f:f3:f1:2d:bc:0f:c9:86:14:59: fd:b8:8b:47:d0:83:bb:90:dd:64:a7:55:23:a7:e7:ec:ce:ef: 0c:2b:5f:43:a7:ee:64:42:ad:e9:a8:a4:17:48:96:e7:d4:84: c0:53:6a:46:89:b6:12:e1:ee:c4:25:0c:f7:cb:a5:31:34:0e: 72:92:b1:9e:1b:07:40:24:2e:de:c8:2c:e9:6f:d5:44:1c:39: 4f:0a:87:b9:e6:db:10:64:c8:58:6b:e4:d6:29:d9:90:46:b4: 7c:d1:ff:26:c7:2c:a3:d2:67:33:71:d3:ce:0b:f7:d4:ca:84: 98:43:1c:0f:c9:ee:98:3d:9b:fa:57:c2:a3:38:49:5f:e0:41: 91:19:1e:64:c2:fe:fc:e6:0f:20:da:c0:b0:98:f3:ff:fd:9f: db:56:fc:88:25:56:d0:e7:52:f0:eb:c9:96:9c:87:62:7c:fb: 6d:21:43:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjTRX9nEGC9P3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDA2Nzg1NDEtNmFlOC00YmY0LWIxZDItOTIwYWYwYmYwZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40YPF4BU8RDdz3Hh0EcHzWY1tmB1hHjGYVag UFBfa6wwSUlbQh5UGj1dkxZa+X0xrVUhGKP3TLau7Yf4E01RsQvLwGLP40EtnUtO 0XgNWdHh7EX2H85A6r/6wB5NmZQaJt50MXcwwM4+rfPZ554IGgVc46YRWl+/wZD+ rWfWO2zDqVe5rpra7wpAy11UqmpIzhqgDxuLFayvg8cZi9PhYkb3233sozuFSPHx /8g9Hw1t1jHguJRHUyE5PvgUJL/WTZaA1SkUsIvUw6r9VokMyFjrWX0JfMEMcrJ4 FnfhMts6svWQ+quPgiTkTH2TYvtOa0zWjK527rtzqr31SHKr/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFECJ7M+cx1brGk6+FJWZ58lq1fOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNkMWYxMjctMjkzMi0z ZjM3LWIyOTMtMzk1MjllNzI1OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIiX4npUA9OuUFVSKzC86rBYI8ohVBQC0N35UHuqWAWCmgnlPBC 8BXYmQMdoCp+/iD4Uu0y1T4e+BBwZojVh2K20is1feV/DJW23Z9INBRmn/PxLbwP yYYUWf24i0fQg7uQ3WSnVSOn5+zO7wwrX0On7mRCremopBdIlufUhMBTakaJthLh 7sQlDPfLpTE0DnKSsZ4bB0AkLt7ILOlv1UQcOU8Kh7nm2xBkyFhr5NYp2ZBGtHzR /ybHLKPSZzNx084L99TKhJhDHA/J7pg9m/pXwqM4SV/gQZEZHmTC/vzmDyDawLCY 8//9n9tW/IglVtDnUvDryZach2J8+20hQ28= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:19 2025 by rpki-client