$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa File: c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa (raw, json) Hash identifier: IAGilrOpposu6OE6UjrC2Ccc4L05oFp87Wxb2cRtIPM= Subject key identifier: 72:15:12:4D:0F:C7:1B:87:8B:F4:E9:20:57:FB:6F:E2:E8:0E:FC:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A979B7CC79381410E80CE5780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa Signing time: Mon 21 Jul 2025 13:01:04 +0000 ROA not before: Mon 21 Jul 2025 13:01:04 +0000 ROA not after: Sun 19 Oct 2025 13:01:04 +0000 asID: 0 IP address blocks: 2620:74:d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:9b:7c:c7:93:81:41:0e:80:ce:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 21 13:01:04 2025 GMT Not After : Oct 19 13:01:04 2025 GMT Subject: CN=63615c9f-470b-4771-8282-0e341c53db09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e5:40:f5:99:82:fb:35:5a:a3:66:1c:9a:12: 8d:88:8f:15:52:62:67:a9:49:7f:a6:9e:f0:f4:d9: 37:44:fa:e8:57:35:97:9f:b9:c3:57:9c:35:44:d0: 6f:97:57:08:84:2d:48:0d:16:31:b2:6a:f5:8e:e1: 0a:4a:b9:3e:de:0d:57:15:cc:3f:48:56:c9:5a:0e: 9e:14:fb:49:32:7e:1f:6b:3f:2d:e3:f7:c0:9e:26: f3:e4:e5:4d:af:2d:34:21:9c:e3:f6:45:24:28:17: fc:ab:19:82:b7:31:56:46:fe:d0:49:ba:bd:e5:3f: 24:ea:54:86:73:6b:b2:45:13:ac:f7:43:b8:c6:4c: d2:57:ef:9f:3c:89:fe:09:99:63:2f:50:2f:c9:83: d3:2b:c6:50:78:c6:d0:19:f5:a9:69:e8:68:52:49: 75:c1:6f:a7:63:4a:5e:ed:1c:04:17:41:80:fb:e1: 43:ff:49:f9:6f:2a:58:98:82:65:af:d1:55:ab:bf: 7f:2c:5b:b2:48:d0:e5:42:43:83:c6:95:dc:71:3b: 7b:50:ce:f5:f6:b6:99:70:9c:01:17:b1:f3:17:66: c4:63:6a:93:9b:ae:5a:fb:e6:9f:82:0d:76:f1:7b: 25:ef:9e:44:32:35:98:5b:ed:f2:b7:76:0d:df:6d: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:15:12:4D:0F:C7:1B:87:8B:F4:E9:20:57:FB:6F:E2:E8:0E:FC:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:73:41:55:c7:80:af:7b:16:77:67:8c:2a:e4:01:34:3a:5e: d6:6d:66:87:0b:31:ea:1b:56:11:5c:05:d6:7c:31:83:a6:d1: d3:2d:bf:7b:83:08:28:95:9e:1e:6f:8a:bf:22:35:03:ed:2d: 49:5c:b0:46:b4:f7:a4:f8:ed:48:05:bf:bd:35:cc:e5:f6:14: 5b:13:5e:79:1b:9d:ba:a4:d4:c6:3d:8c:51:22:74:4d:6d:7e: 5c:34:b9:33:39:48:0d:db:0f:88:7a:6f:0d:b0:d9:70:7e:cb: 6f:d4:36:ab:9e:f5:1d:1f:31:b9:46:6b:6b:35:b9:e4:e2:6e: 95:40:b9:3b:cf:05:2b:23:b0:b6:83:39:26:43:e8:69:bf:1c: f7:5b:8d:72:13:6a:6a:70:92:19:b8:88:98:1b:95:af:57:de: 4b:1b:5e:fe:5a:59:fd:ea:43:92:6d:ae:b0:17:7a:ef:1c:43: 39:b6:4b:91:01:49:3d:70:60:de:6d:06:d0:db:75:91:ce:6e: 5f:b9:fd:79:a1:5a:93:cf:c4:1c:a0:1e:33:b1:bb:46:85:e9: a0:b7:e6:55:bc:e4:d0:22:75:97:96:22:78:9f:a5:72:e2:93: be:c8:46:f0:70:de:03:18:ff:71:96:62:5f:00:fc:a9:03:0a: c6:4d:15:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqXm3zHk4FBDoDOV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyMTEzMDEwNFoXDTI1MTAxOTEzMDEwNFowLzEtMCsGA1UEAxMk NjM2MTVjOWYtNDcwYi00NzcxLTgyODItMGUzNDFjNTNkYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+VA9ZmC+zVao2YcmhKNiI8VUmJnqUl/pp7w 9Nk3RProVzWXn7nDV5w1RNBvl1cIhC1IDRYxsmr1juEKSrk+3g1XFcw/SFbJWg6e FPtJMn4faz8t4/fAnibz5OVNry00IZzj9kUkKBf8qxmCtzFWRv7QSbq95T8k6lSG c2uyRROs90O4xkzSV++fPIn+CZljL1AvyYPTK8ZQeMbQGfWpaehoUkl1wW+nY0pe 7RwEF0GA++FD/0n5bypYmIJlr9FVq79/LFuySNDlQkODxpXccTt7UM719raZcJwB F7HzF2bEY2qTm65a++afgg128Xsl755EMjWYW+3yt3YN321nDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHIVEk0PxxuHi/TpIFf7b+LoDvxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJkYzU5MWMtNmFlNS0z N2MxLWEyY2UtNTAxNWI4MzI3ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZzQVXHgK97FndnjCrkATQ6XtZtZocLMeobVhFcBdZ8MYOm0dMt v3uDCCiVnh5vir8iNQPtLUlcsEa096T47UgFv701zOX2FFsTXnkbnbqk1MY9jFEi dE1tflw0uTM5SA3bD4h6bw2w2XB+y2/UNque9R0fMblGa2s1ueTibpVAuTvPBSsj sLaDOSZD6Gm/HPdbjXITampwkhm4iJgbla9X3ksbXv5aWf3qQ5JtrrAXeu8cQzm2 S5EBST1wYN5tBtDbdZHObl+5/XmhWpPPxBygHjOxu0aF6aC35lW85NAidZeWInif pXLik77IRvBw3gMY/3GWYl8A/KkDCsZNFeI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:39 2025 by rpki-client