$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa File: caef42fa-ca7a-38bc-b3e8-2241b351f688.roa (raw, json) Hash identifier: D4jM18yUerWVPICpxivKAL//GPmFK8S7IlKMwAxXsF0= Subject key identifier: 9A:F8:FE:E0:9C:0E:9B:04:63:44:D3:0F:27:CB:01:11:D9:C0:C5:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146322E76373D92E76E8980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397209 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:32:2e:76:37:3d:92:e7:6e:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=deecf54d-8974-4f07-8d63-0dc4136fea7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:a8:9a:22:41:51:12:5b:d8:24:c4:2c:26: f4:77:f0:4c:30:06:46:c4:bd:68:8d:2f:1c:2f:fc: 32:a6:1c:90:ff:75:45:67:ed:87:2e:44:d7:99:98: 58:ee:9d:a7:63:e7:b0:a6:cd:6c:dc:33:a6:1b:51: 62:33:b1:c5:96:be:8d:81:80:75:70:87:ec:ee:35: 62:83:51:74:39:2e:4e:7e:ce:cd:ef:e9:67:66:4f: 09:e7:e5:5d:25:a3:87:70:62:50:76:6d:20:7c:e7: 23:95:66:68:c2:a8:2d:2c:6d:18:9d:71:58:e4:36: 40:d5:4b:ee:65:af:f3:83:55:02:75:8d:c4:15:b0: 31:90:bb:76:fd:18:4d:0a:7f:1b:72:c8:8a:4f:57: d0:6c:82:fc:f9:27:35:f7:1a:ff:5d:da:9a:42:a5: 33:fa:69:a9:ad:7c:76:ca:da:98:80:23:d4:bb:0b: c9:b0:a4:8d:4b:a9:55:80:57:94:21:cb:fb:46:fd: fb:07:b1:6b:4e:88:7f:27:b8:1b:81:ea:c5:b4:7f: 69:be:bb:c5:7e:4f:69:2f:40:b8:cf:8d:23:21:e9: 40:4d:5d:03:9a:f5:7a:23:96:c7:e3:41:4b:80:fe: 96:30:9d:31:fd:c2:39:5c:ab:e2:82:7e:93:31:2f: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F8:FE:E0:9C:0E:9B:04:63:44:D3:0F:27:CB:01:11:D9:C0:C5:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0e:ec:55:ce:42:c0:dc:90:d2:45:3b:05:ff:5e:53:c0:a0: 54:a3:b6:d4:37:c5:03:0b:68:22:0d:fc:26:61:67:7f:22:9d: b7:43:ea:3c:f5:f8:85:6a:77:d4:2f:20:9d:a0:35:af:0b:66: 21:9b:aa:34:02:0f:13:1f:9f:ab:81:9d:3b:ee:c9:5a:16:72: 63:a9:48:78:17:43:d2:37:7c:87:d6:22:93:51:ab:94:b7:4d: 9a:ca:9a:df:d6:2a:80:57:c6:f2:0f:51:8a:cc:7d:c9:b8:3f: 1f:d9:e3:90:a7:c6:43:06:ce:0c:54:15:65:7a:5e:7c:cd:ac: 88:62:78:dd:6c:4d:7c:73:d1:0f:77:1f:d5:d4:90:2f:e4:ee: fa:46:92:c9:bf:35:72:5f:0e:96:b1:f7:41:18:ee:0a:f8:a5: ff:ac:b7:4b:e0:b1:6f:20:7d:92:31:e9:3a:b9:44:74:c2:dd: 1b:94:ed:5d:5a:ea:00:9f:77:7d:89:ec:0b:68:1d:12:d0:dd: 11:a6:ac:06:ec:95:0f:42:e7:40:dc:21:ed:cf:2f:8d:4b:77: e7:ae:04:e1:01:8b:6f:74:12:8c:cb:b5:33:db:5f:76:7a:5d: 1e:61:c8:a5:5b:0a:e2:ec:1a:d4:fc:c3:0b:c3:29:bb:4d:29: ed:d1:10:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjIudjc9kuduiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGVlY2Y1NGQtODk3NC00ZjA3LThkNjMtMGRjNDEzNmZlYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiueomiJBURJb2CTELCb0d/BMMAZGxL1ojS8c L/wyphyQ/3VFZ+2HLkTXmZhY7p2nY+ewps1s3DOmG1FiM7HFlr6NgYB1cIfs7jVi g1F0OS5Ofs7N7+lnZk8J5+VdJaOHcGJQdm0gfOcjlWZowqgtLG0YnXFY5DZA1Uvu Za/zg1UCdY3EFbAxkLt2/RhNCn8bcsiKT1fQbIL8+Sc19xr/XdqaQqUz+mmprXx2 ytqYgCPUuwvJsKSNS6lVgFeUIcv7Rv37B7FrToh/J7gbgerFtH9pvrvFfk9pL0C4 z40jIelATV0DmvV6I5bH40FLgP6WMJ0x/cI5XKvign6TMS9fowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJr4/uCcDpsEY0TTDyfLARHZwMWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FlZjQyZmEtY2E3YS0z OGJjLWIzZTgtMjI0MWIzNTFmNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4O7FXOQsDckNJFOwX/XlPAoFSjttQ3xQMLaCIN/CZhZ38inbdD 6jz1+IVqd9QvIJ2gNa8LZiGbqjQCDxMfn6uBnTvuyVoWcmOpSHgXQ9I3fIfWIpNR q5S3TZrKmt/WKoBXxvIPUYrMfcm4Px/Z45CnxkMGzgxUFWV6XnzNrIhieN1sTXxz 0Q93H9XUkC/k7vpGksm/NXJfDpax90EY7gr4pf+st0vgsW8gfZIx6Tq5RHTC3RuU 7V1a6gCfd32J7AtoHRLQ3RGmrAbslQ9C50DcIe3PL41Ld+euBOEBi290EozLtTPb X3Z6XR5hyKVbCuLsGtT8wwvDKbtNKe3REPI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:26 2025 by rpki-client