$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa File: c4047d85-600a-3289-80c6-1d4529037de0.roa (raw, json) Hash identifier: 8psqV4a7NSy6poROJm5KpmPTCSqTFCYtMBm2nFypLHA= Subject key identifier: 0D:1A:C7:15:5E:F4:2A:74:BE:BA:BE:D8:27:FA:68:28:1B:16:DC:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A96369AB719E4835FBFB1F4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 7342 IP address blocks: 2620:74:6c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:9a:b7:19:e4:83:5f:bf:b1:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c2c59d9d-7af2-4e87-a8d9-d0f44207ea3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:12:7a:5a:2e:cf:ff:6a:8e:3d:c4:a3:47: f1:a6:4b:bc:33:cb:10:79:e8:a2:33:48:c8:fe:34: 3c:e0:eb:d9:74:52:17:0f:fe:f7:89:10:d1:4f:c9: 37:1f:df:eb:fa:45:e8:1c:52:47:e3:1d:71:a1:36: 30:80:83:16:91:df:4c:6e:e6:c0:f9:9d:d7:97:0f: b1:d7:d0:be:79:c9:38:05:47:ad:72:c8:e5:57:57: 51:92:47:62:97:36:50:33:49:43:2e:7a:ee:2e:b7: 47:78:70:d1:00:b4:da:12:05:76:74:8a:64:a8:2a: 98:26:ae:e8:89:fd:b7:d1:65:0e:d0:ad:f2:79:5d: 08:db:f3:a3:90:dc:ee:57:d1:d9:46:b3:00:b4:70: 89:b7:f5:58:e3:fe:34:fb:6d:cc:f0:e8:32:d5:ce: ea:8c:0c:52:ec:f8:55:a1:64:b1:2e:5f:54:d9:11: 27:55:9e:92:ad:57:b9:a4:e8:4f:f0:99:26:e3:1d: f4:16:26:c6:ff:33:05:cc:64:bd:53:aa:b5:6c:90: 6c:0e:f3:2b:3a:23:98:9c:d8:1c:75:99:57:e8:ef: 67:12:52:af:6a:0a:3a:a3:2c:a4:5f:4b:57:c3:98: 36:89:42:e3:27:1a:96:7c:e6:c6:6a:c4:b2:65:72: 78:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1A:C7:15:5E:F4:2A:74:BE:BA:BE:D8:27:FA:68:28:1B:16:DC:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:17:1c:6a:34:1c:16:d0:7d:62:cc:65:5f:d1:70:d7:c4:aa: be:d5:1c:00:55:1d:64:4f:6f:c1:04:3d:89:4d:7b:46:6a:35: b6:8e:03:fe:24:a2:f2:14:74:34:33:cc:aa:55:7d:13:c6:84: 05:4d:0d:b9:bd:96:7a:26:1d:ae:4d:58:2c:db:1c:7e:ce:f8: a2:35:5d:a8:a0:3f:a6:06:0a:c5:e9:51:ac:16:c2:0b:e2:74: 36:3e:3f:1b:bd:8e:52:57:10:70:f2:f4:e1:dd:4c:78:d6:69: cc:1d:54:3f:50:3e:c7:d1:74:4d:08:4d:00:db:be:40:00:6e: a2:77:94:7d:1b:07:66:99:f6:f4:ed:53:20:ed:17:4d:3d:13: 80:58:0b:9f:d1:0e:c2:1c:61:80:e8:bb:d7:1c:42:d2:9a:01: e0:cf:a8:83:3c:d1:8c:79:dc:01:70:a7:35:a3:f5:dd:24:8e: 06:ac:12:7d:b6:a1:1e:d8:de:cb:93:dd:d7:03:e2:0c:c6:3b: 57:1d:2e:ed:58:52:c4:81:bd:f2:3f:f4:7b:a0:52:fc:b6:b7: 0d:45:fc:b9:96:26:6a:a8:ba:39:d5:e0:03:3d:6e:d2:6e:af: a8:26:15:44:f1:7d:63:d6:32:55:a4:2a:8a:8d:1d:d1:80:b9: d9:88:b5:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqWNpq3GeSDX7+x9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzJjNTlkOWQtN2FmMi00ZTg3LWE4ZDktZDBmNDQyMDdlYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcgSelouz/9qjj3Eo0fxpku8M8sQeeiiM0jI /jQ84OvZdFIXD/73iRDRT8k3H9/r+kXoHFJH4x1xoTYwgIMWkd9MbubA+Z3Xlw+x 19C+eck4BUetcsjlV1dRkkdilzZQM0lDLnruLrdHeHDRALTaEgV2dIpkqCqYJq7o if230WUO0K3yeV0I2/OjkNzuV9HZRrMAtHCJt/VY4/40+23M8Ogy1c7qjAxS7PhV oWSxLl9U2REnVZ6SrVe5pOhP8Jkm4x30FibG/zMFzGS9U6q1bJBsDvMrOiOYnNgc dZlX6O9nElKvago6oyykX0tXw5g2iULjJxqWfObGasSyZXJ4xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA0axxVe9Cp0vrq+2Cf6aCgbFtxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQwNDdkODUtNjAwYS0z Mjg5LTgwYzYtMWQ0NTI5MDM3ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHMXHGo0HBbQfWLMZV/RcNfEqr7VHABVHWRPb8EEPYlNe0ZqNbaO A/4kovIUdDQzzKpVfRPGhAVNDbm9lnomHa5NWCzbHH7O+KI1XaigP6YGCsXpUawW wgvidDY+Pxu9jlJXEHDy9OHdTHjWacwdVD9QPsfRdE0ITQDbvkAAbqJ3lH0bB2aZ 9vTtUyDtF009E4BYC5/RDsIcYYDou9ccQtKaAeDPqIM80Yx53AFwpzWj9d0kjgas En22oR7Y3suT3dcD4gzGO1cdLu1YUsSBvfI/9HugUvy2tw1F/LmWJmqoujnV4AM9 btJur6gmFUTxfWPWMlWkKoqNHdGAudmItYo= -----END CERTIFICATE-----Generated at Wed Jul 23 01:33:30 2025 by rpki-client