$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa File: c38e1ea5-bbba-3013-b514-f9b172b0021f.roa (raw, json) Hash identifier: HDMhX499e0BGL1wqFWmAV/ck2MZ332WbziGzJ67LZRg= Subject key identifier: 24:42:36:11:30:37:8D:7F:44:81:1D:9F:18:E7:7A:F0:B5:1A:A3:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E670B13ED11702D21600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396584 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e6:70:b1:3e:d1:17:02:d2:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=6a5872b7-31ad-4234-96a3-0f0ac933dbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:3d:67:14:2f:b7:69:4a:fb:13:92:fd:cf: 83:f3:57:6e:a2:b2:f0:1b:8b:ad:d0:91:c6:ad:83: 02:51:a4:d0:67:a1:49:3c:52:39:4b:7b:80:84:21: 73:bc:62:61:37:4f:a7:72:24:ee:8c:84:23:dc:ae: 1b:c4:1c:74:74:51:02:7d:63:bb:30:67:bc:09:3f: c6:85:ff:ec:1e:15:f7:ce:19:4c:1f:32:51:6f:6c: 82:72:6e:55:d8:35:14:6c:5b:aa:d4:7e:31:bb:b1: 77:5c:b0:31:b2:34:0b:e8:15:2f:23:ad:bf:7c:3f: 5a:0f:58:3e:5f:0d:59:9c:16:63:44:75:d1:14:35: 1d:db:b6:ae:a4:4e:18:74:82:1a:d3:60:ef:79:6e: 52:66:38:0e:5d:5a:3e:c1:17:3a:d2:3d:4d:a1:fd: 58:8c:b5:d2:c9:6d:8f:5a:60:ae:a2:37:5e:a4:fb: ec:4a:56:19:60:70:72:ee:a1:ef:18:44:58:ed:47: 06:29:cd:29:25:1a:56:44:ae:a4:5b:81:20:f1:b9: e2:3c:ac:e8:cc:cd:70:d0:7f:92:6f:67:c1:5a:7f: f2:6d:e3:ad:62:5b:8c:54:88:d4:58:ca:9f:a0:60: b1:fc:a8:b5:58:78:92:e9:6d:15:5e:6d:6c:76:29: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:36:11:30:37:8D:7F:44:81:1D:9F:18:E7:7A:F0:B5:1A:A3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a6:6f:bb:4e:27:e3:f7:37:96:36:3e:77:9b:22:0a:e3:6d: 7b:6a:e7:48:91:65:7d:22:9e:66:1e:77:2f:1d:04:77:ee:bb: d8:4b:ff:2b:04:00:bd:d2:d5:d8:15:c9:91:0b:0b:de:16:b2: 9c:9b:65:02:64:53:2d:35:36:70:66:ca:48:06:43:69:f8:8e: 12:ce:53:72:63:18:f1:8c:4a:fd:76:66:7c:46:1f:b2:58:93: b0:d9:fc:d1:17:28:a7:9c:b3:94:39:49:63:78:eb:49:b2:22: 6f:ab:04:a5:77:85:94:c3:35:c8:9f:1b:a7:2e:17:2f:2a:27: 1e:ce:cb:a4:8f:9d:06:35:64:aa:6b:e1:5c:00:64:72:ca:eb: 81:79:bd:46:e1:b3:3e:ee:ec:37:61:83:88:c7:84:9f:ef:e3: 74:e5:6f:b6:67:a2:bf:ab:ae:ae:a7:f8:71:79:97:55:19:6e: ee:fb:a1:c4:97:f0:55:63:ae:c5:61:5d:c0:44:c3:57:99:32: 86:22:04:59:09:e7:32:6e:6d:bd:3a:a3:24:02:a0:dd:54:ec: 53:6e:80:a7:61:1e:ca:03:92:87:ec:55:7f:96:b4:32:35:d6: f3:81:8d:e8:dc:52:ec:36:88:ba:dc:83:e3:9e:2c:a2:bb:ac: b0:aa:18:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJeZwsT7RFwLSFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NmE1ODcyYjctMzFhZC00MjM0LTk2YTMtMGYwYWM5MzNkYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjI9ZxQvt2lK+xOS/c+D81duorLwG4ut0JHG rYMCUaTQZ6FJPFI5S3uAhCFzvGJhN0+nciTujIQj3K4bxBx0dFECfWO7MGe8CT/G hf/sHhX3zhlMHzJRb2yCcm5V2DUUbFuq1H4xu7F3XLAxsjQL6BUvI62/fD9aD1g+ Xw1ZnBZjRHXRFDUd27aupE4YdIIa02DveW5SZjgOXVo+wRc60j1Nof1YjLXSyW2P WmCuojdepPvsSlYZYHBy7qHvGERY7UcGKc0pJRpWRK6kW4Eg8bniPKzozM1w0H+S b2fBWn/ybeOtYluMVIjUWMqfoGCx/Ki1WHiS6W0VXm1sdik1cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCRCNhEwN41/RIEdnxjnevC1GqPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzM4ZTFlYTUtYmJiYS0z MDEzLWI1MTQtZjliMTcyYjAwMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIumb7tOJ+P3N5Y2PnebIgrjbXtq50iRZX0inmYedy8dBHfuu9hL /ysEAL3S1dgVyZELC94WspybZQJkUy01NnBmykgGQ2n4jhLOU3JjGPGMSv12ZnxG H7JYk7DZ/NEXKKecs5Q5SWN460myIm+rBKV3hZTDNcifG6cuFy8qJx7Oy6SPnQY1 ZKpr4VwAZHLK64F5vUbhsz7u7Ddhg4jHhJ/v43Tlb7Znor+rrq6n+HF5l1UZbu77 ocSX8FVjrsVhXcBEw1eZMoYiBFkJ5zJubb06oyQCoN1U7FNugKdhHsoDkofsVX+W tDI11vOBjejcUuw2iLrcg+OeLKK7rLCqGLM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:18 2025 by rpki-client