$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa File: bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa (raw, json) Hash identifier: X1nChnJF4BQQxkhvbL2Y6lOu2XB9bYMBAUwPc+sgy0Q= Subject key identifier: 81:9A:0A:60:DC:14:55:0E:FB:3F:55:BE:34:F7:3A:38:2F:67:69:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E5845845412750051D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396580 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e5:84:58:45:41:27:50:05:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=a53790cc-6311-4741-bc9e-434c9548d45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:e4:11:ad:97:65:19:92:1c:cf:0d:03:ed: b6:c3:38:54:5c:4f:c2:70:91:12:30:af:ed:e3:c4: fc:49:98:05:97:8c:c2:1b:35:7f:16:61:df:00:ae: 0f:3e:4b:9a:be:d3:8f:e1:f7:41:56:4e:1e:b8:10: 51:ae:17:67:46:d1:86:55:4b:1e:52:09:01:cf:aa: 57:4f:24:9f:4b:ed:d4:39:ae:23:76:d0:53:45:ee: f6:f2:83:1a:5b:64:d2:0b:cb:43:f6:1a:9d:71:08: ac:ad:a8:a9:91:d3:b1:bd:8c:a6:50:de:72:34:02: dc:ea:1e:1f:f4:30:8a:50:3c:f2:61:34:13:4f:58: 52:2c:8c:2b:13:f9:7b:9e:c3:83:9a:55:8f:44:9e: f3:7d:6d:1a:e2:22:df:2f:30:74:92:48:90:85:d7: 08:91:60:27:78:e2:9a:ed:94:e3:c5:c6:ea:93:e1: 26:05:50:9d:82:f5:21:af:29:42:7f:6f:c1:74:ab: 2b:53:e2:53:1c:4c:ca:e7:77:5b:2c:5e:d1:bb:3b: 7a:d3:b7:33:c5:b3:82:34:2a:9a:40:20:a1:6d:94: 3c:b3:ee:25:b9:f5:5c:70:c3:60:98:fd:78:40:cc: 4a:5b:94:94:9a:8f:18:16:d4:ff:6c:b7:c7:e0:8f: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:0A:60:DC:14:55:0E:FB:3F:55:BE:34:F7:3A:38:2F:67:69:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fe:53:1d:3c:c1:8f:69:84:63:b5:fb:0f:bd:18:e9:f5:7e: 78:d4:40:a6:34:50:1b:23:03:33:2a:b0:b1:66:6c:08:58:55: c2:7a:52:b4:10:74:ab:9c:a7:04:91:db:94:4e:12:bc:eb:1d: d6:66:e7:4f:eb:ad:af:13:07:f2:61:8b:d1:b4:fd:7a:66:fc: a9:c2:99:56:12:ad:0a:80:8b:f8:40:4b:ae:ef:a1:5d:5e:6c: d0:79:6a:5e:f0:d5:1d:0d:2c:8c:03:2b:a4:d3:4e:a1:ad:b6: cf:d4:fc:5a:9f:ee:08:0a:78:ab:04:19:ba:d3:10:c3:02:9c: 07:c7:77:ce:a7:fd:1c:6d:85:56:97:99:4e:0f:f4:e4:33:8f: 44:a4:29:df:23:4e:22:3e:99:fa:bf:31:37:8d:0e:ce:70:07: 1f:e0:b9:98:e9:25:0c:54:32:f8:72:62:50:cd:3d:37:15:d5: de:1f:a2:02:00:db:a5:a4:76:ab:b9:53:03:b1:7e:aa:57:53: 9d:dd:29:32:07:21:00:1c:39:f7:75:ca:4d:a8:c0:e1:4c:33: 78:b7:00:94:70:2b:35:06:ac:5b:e5:89:b3:a4:5f:3c:6c:22: 60:42:34:ee:41:c0:c0:b7:11:a0:bc:ed:e8:ff:bf:63:02:4c: 19:f2:f8:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJeWEWEVBJ1AFHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YTUzNzkwY2MtNjMxMS00NzQxLWJjOWUtNDM0Yzk1NDhkNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDnkEa2XZRmSHM8NA+22wzhUXE/CcJESMK/t 48T8SZgFl4zCGzV/FmHfAK4PPkuavtOP4fdBVk4euBBRrhdnRtGGVUseUgkBz6pX TySfS+3UOa4jdtBTRe728oMaW2TSC8tD9hqdcQisraipkdOxvYymUN5yNALc6h4f 9DCKUDzyYTQTT1hSLIwrE/l7nsODmlWPRJ7zfW0a4iLfLzB0kkiQhdcIkWAneOKa 7ZTjxcbqk+EmBVCdgvUhrylCf2/BdKsrU+JTHEzK53dbLF7Ruzt607czxbOCNCqa QCChbZQ8s+4lufVccMNgmP14QMxKW5SUmo8YFtT/bLfH4I+zbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIGaCmDcFFUO+z9VvjT3OjgvZ2kbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0YTI0N2YtYjMwYS0z YWE5LWI0MTEtNGU0NWIwYjI5NGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADr+Ux08wY9phGO1+w+9GOn1fnjUQKY0UBsjAzMqsLFmbAhYVcJ6 UrQQdKucpwSR25ROErzrHdZm50/rra8TB/Jhi9G0/Xpm/KnCmVYSrQqAi/hAS67v oV1ebNB5al7w1R0NLIwDK6TTTqGtts/U/Fqf7ggKeKsEGbrTEMMCnAfHd86n/Rxt hVaXmU4P9OQzj0SkKd8jTiI+mfq/MTeNDs5wBx/guZjpJQxUMvhyYlDNPTcV1d4f ogIA26Wkdqu5UwOxfqpXU53dKTIHIQAcOfd1yk2owOFMM3i3AJRwKzUGrFvlibOk XzxsImBCNO5BwMC3EaC87ej/v2MCTBny+Dw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:45 2025 by rpki-client