$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c711270f-0cbd-3f19-bdc7-fdc998426ea9.roa File: c711270f-0cbd-3f19-bdc7-fdc998426ea9.roa (raw, json) Hash identifier: 3eT2wKTErklCcm+Q2rfvWn4O1727ob+r1r+dh+eEqmU= Subject key identifier: A2:00:F0:B4:0C:39:7D:32:F8:3B:2C:3E:73:17:13:D4:F8:D9:A5:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EF195A90056530C9DE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c711270f-0cbd-3f19-bdc7-fdc998426ea9.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397200 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ef:19:5a:90:05:65:30:c9:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=9fc1b9ad-82a8-4b82-860b-47640244dbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:fa:b7:1e:94:e4:d3:27:d1:cb:b1:f0:b4: e1:42:0b:d5:d9:1d:ab:c5:03:1a:65:a3:c4:9d:a1: 5a:60:31:0f:80:6c:a6:5f:a0:da:0f:46:95:4c:4a: e8:49:cc:81:01:f2:fb:05:d0:c7:37:09:ca:b8:6e: 55:32:f5:a8:2f:b4:a9:59:f9:89:2b:2e:94:1d:21: 39:05:b7:62:5b:8e:64:7f:a8:98:a9:8d:ba:75:49: 89:8a:85:ba:d0:8e:74:d7:cb:52:6e:77:83:88:05: 06:61:37:eb:72:27:5a:53:f5:0a:e9:70:79:5c:83: 58:02:17:ca:31:8a:4b:51:c9:28:15:1b:95:7d:6d: 8d:ac:1d:fb:e7:cd:6b:2f:75:c6:78:3c:00:b3:ee: c2:69:ea:98:93:d2:99:ba:16:91:17:fc:a1:48:4e: f0:95:df:c9:c3:c3:81:5c:d1:90:fc:ce:30:ac:d1: 71:35:b4:05:3a:ec:0f:b0:9f:a4:d1:b3:a0:13:01: 23:11:04:e4:0a:fd:0a:03:9f:2a:5b:66:d6:9e:46: 0c:1c:bd:ac:b0:56:06:c3:55:35:88:20:a0:6e:d8: 17:f2:af:81:d4:0a:2c:d1:74:01:d9:ba:70:71:ee: 99:07:99:a4:fa:2f:f2:10:da:20:6f:aa:9f:ba:0f: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:F0:B4:0C:39:7D:32:F8:3B:2C:3E:73:17:13:D4:F8:D9:A5:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c711270f-0cbd-3f19-bdc7-fdc998426ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:27:0d:55:7e:1a:30:eb:42:a0:33:9a:46:fb:73:c3:a8:75: a9:a7:83:fb:2f:0d:d1:5b:8d:e5:bd:49:51:d4:ae:63:b3:30: 69:fb:f0:67:fa:d0:4f:a7:3d:b1:72:a6:6e:e1:72:e9:24:a6: db:3a:9e:da:2e:6b:44:18:b5:af:94:b1:78:87:18:25:4c:1b: f7:3f:53:ff:09:b4:f3:aa:d0:31:12:73:f7:73:df:96:06:79: 09:e4:7f:e1:cc:cc:a3:27:e7:b0:fb:00:4d:7f:3a:e5:2b:dd: a2:0d:25:25:4e:b4:6e:c9:31:4e:59:dd:d6:14:6e:6e:d3:95: e5:39:b4:c0:c8:6c:d5:6c:1e:95:10:c4:08:2f:ba:a9:34:0c: f2:a4:2d:8f:f4:d4:63:37:7a:c8:84:53:8a:8a:65:34:e7:12: 90:45:0e:62:b1:85:f2:16:fd:4b:fd:e6:89:2e:1f:3a:21:c8: 39:c5:a6:5e:cf:28:11:a2:28:9e:32:4d:7b:4d:0e:ad:59:43: 2c:e0:dc:b9:0c:b6:27:12:16:0a:78:17:06:4c:95:16:2b:46: ae:ec:17:11:54:be:57:e9:5a:79:f0:14:f9:05:85:eb:b6:ce: 69:a9:6a:80:e0:cb:92:fd:54:b2:aa:f0:dd:af:66:65:d5:43: 29:c3:14:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe8ZWpAFZTDJ3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OWZjMWI5YWQtODJhOC00YjgyLTg2MGItNDc2NDAyNDRkYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaf6tx6U5NMn0cux8LThQgvV2R2rxQMaZaPE naFaYDEPgGymX6DaD0aVTEroScyBAfL7BdDHNwnKuG5VMvWoL7SpWfmJKy6UHSE5 BbdiW45kf6iYqY26dUmJioW60I5018tSbneDiAUGYTfrcidaU/UK6XB5XINYAhfK MYpLUckoFRuVfW2NrB37581rL3XGeDwAs+7CaeqYk9KZuhaRF/yhSE7wld/Jw8OB XNGQ/M4wrNFxNbQFOuwPsJ+k0bOgEwEjEQTkCv0KA58qW2bWnkYMHL2ssFYGw1U1 iCCgbtgX8q+B1Aos0XQB2bpwce6ZB5mk+i/yENogb6qfug9HgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKIA8LQMOX0y+DssPnMXE9T42aXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzcxMTI3MGYtMGNiZC0z ZjE5LWJkYzctZmRjOTk4NDI2ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwnDVV+GjDrQqAzmkb7c8Oodamng/svDdFbjeW9SVHUrmOzMGn7 8Gf60E+nPbFypm7hcukkpts6ntoua0QYta+UsXiHGCVMG/c/U/8JtPOq0DESc/dz 35YGeQnkf+HMzKMn57D7AE1/OuUr3aINJSVOtG7JMU5Z3dYUbm7TleU5tMDIbNVs HpUQxAgvuqk0DPKkLY/01GM3esiEU4qKZTTnEpBFDmKxhfIW/Uv95okuHzohyDnF pl7PKBGiKJ4yTXtNDq1ZQyzg3LkMticSFgp4FwZMlRYrRq7sFxFUvlfpWnnwFPkF heu2zmmpaoDgy5L9VLKq8N2vZmXVQynDFKI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:39 2025 by rpki-client