$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa File: bd31894b-808a-354e-8124-627c7862dd63.roa (raw, json) Hash identifier: N56G7Bh5slbF1VEaJj4QFtiP8YGwvqRKC04KLSC0KSQ= Subject key identifier: 19:C4:05:19:CB:2F:3A:AD:ED:B0:70:41:C1:8C:A5:03:52:3A:14:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F24E0CCCB5C6DC782380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397202 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f2:4e:0c:cc:b5:c6:dc:78:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=ec87ae04-bb3d-44bd-bbe1-cdfd42a1f32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7f:91:7d:7e:3a:dc:be:94:8d:1d:dc:f5:86: 6c:c2:02:d0:f5:17:9d:00:17:20:49:a1:b5:56:3c: bc:ee:b0:e1:10:59:9d:de:a2:ca:2d:08:ea:d1:49: 26:3a:41:cb:01:02:70:4e:cb:6d:8d:b7:a8:78:38: 1d:54:d4:11:02:78:c4:7c:2d:d6:28:c8:8c:87:73: 3b:4b:0c:de:b5:d8:74:6e:6b:f7:f3:80:bf:a0:9d: 24:d1:dd:00:e2:a6:a3:c2:4f:ec:58:09:85:c7:df: fa:1e:e8:35:51:66:b0:96:52:cf:2f:e0:09:77:02: a7:29:21:1e:5b:b0:8c:5e:1b:40:96:b4:81:39:47: b4:92:3f:ff:17:92:97:23:11:8a:d7:31:bb:87:fa: ac:54:50:1a:19:af:2c:aa:fc:66:ee:fe:e5:33:4d: c8:b8:5f:78:7d:95:e1:8f:45:82:64:da:d6:a3:af: b2:82:41:e2:a6:cd:04:1c:58:7d:ab:f2:e6:8d:66: bb:e0:65:93:c8:25:3d:58:80:63:d1:e7:a1:49:a1: 89:8e:b7:80:35:e5:11:81:6f:d6:76:1b:28:13:4c: 16:df:d8:c2:c5:bf:27:3c:30:e5:e0:00:67:0e:fe: bb:ed:77:c3:a1:23:87:c0:55:ef:58:38:75:b9:0c: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:05:19:CB:2F:3A:AD:ED:B0:70:41:C1:8C:A5:03:52:3A:14:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a7:33:82:1d:fc:f6:b9:90:a8:fd:e1:dd:5e:2b:6c:bc:6e: b6:59:0f:14:08:74:98:24:b7:a7:ce:3b:78:7b:34:8b:b4:69: b7:09:06:37:ca:c3:26:c5:c9:fd:a8:07:ef:f5:b7:d1:97:76: 95:40:58:99:59:4f:1e:c7:05:68:31:bd:e0:7a:d5:b5:ad:28: 0f:17:71:62:d1:cd:7d:bf:31:62:92:24:28:bc:60:fe:91:6f: 11:6c:27:56:d3:c4:7f:b0:c5:e0:64:56:33:f9:b9:f1:c1:32: 38:12:92:4a:69:25:38:ea:e7:eb:28:a9:e7:f8:00:84:f8:55: 18:06:de:46:dd:95:b2:d3:1f:be:b2:98:ef:2b:68:3b:e1:31: be:b6:c5:6b:19:72:d4:02:e0:a8:bb:66:7c:dd:2b:df:cf:46: d3:78:85:9e:46:4d:71:3d:ad:78:48:5c:ba:35:df:e7:fb:a9: d7:f7:17:2b:07:a7:48:9c:af:16:f4:83:16:02:a5:ca:09:10: 33:e9:08:77:24:69:98:70:6b:9f:5a:3e:b6:7c:f5:f9:a1:8d: e6:c1:e2:e7:ec:dc:5f:c4:ab:29:5f:48:3b:0f:ed:a6:4c:60: 1e:bf:88:e8:66:1f:19:87:c6:6e:fb:1e:6e:24:b6:0f:73:9d: f0:82:97:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfJODMy1xtx4I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZWM4N2FlMDQtYmIzZC00NGJkLWJiZTEtY2RmZDQyYTFmMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn+RfX463L6UjR3c9YZswgLQ9RedABcgSaG1 Vjy87rDhEFmd3qLKLQjq0UkmOkHLAQJwTsttjbeoeDgdVNQRAnjEfC3WKMiMh3M7 Swzetdh0bmv384C/oJ0k0d0A4qajwk/sWAmFx9/6Hug1UWawllLPL+AJdwKnKSEe W7CMXhtAlrSBOUe0kj//F5KXIxGK1zG7h/qsVFAaGa8sqvxm7v7lM03IuF94fZXh j0WCZNrWo6+ygkHips0EHFh9q/LmjWa74GWTyCU9WIBj0eehSaGJjreANeURgW/W dhsoE0wW39jCxb8nPDDl4ABnDv677XfDoSOHwFXvWDh1uQxjTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBnEBRnLLzqt7bBwQcGMpQNSOhS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQzMTg5NGItODA4YS0z NTRlLTgxMjQtNjI3Yzc4NjJkZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFenM4Id/Pa5kKj94d1eK2y8brZZDxQIdJgkt6fOO3h7NIu0abcJ BjfKwybFyf2oB+/1t9GXdpVAWJlZTx7HBWgxveB61bWtKA8XcWLRzX2/MWKSJCi8 YP6RbxFsJ1bTxH+wxeBkVjP5ufHBMjgSkkppJTjq5+soqef4AIT4VRgG3kbdlbLT H76ymO8raDvhMb62xWsZctQC4Ki7ZnzdK9/PRtN4hZ5GTXE9rXhIXLo13+f7qdf3 FysHp0icrxb0gxYCpcoJEDPpCHckaZhwa59aPrZ89fmhjebB4ufs3F/EqylfSDsP 7aZMYB6/iOhmHxmHxm77Hm4ktg9znfCCl1M= -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:12 2025 by rpki-client