$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cca04370-2fee-35d1-aa38-b88d71deb221.roa File: cca04370-2fee-35d1-aa38-b88d71deb221.roa (raw, json) Hash identifier: 43pD4EHFUWqDOCucCZJY9+t+DZ6681AdOn1YbJtucUE= Subject key identifier: BD:49:AE:E9:5F:28:55:A2:19:58:F0:5A:B6:C1:98:D6:BD:CF:AF:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F3A87990441623927280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cca04370-2fee-35d1-aa38-b88d71deb221.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 36631 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f3:a8:79:90:44:16:23:92:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5edefce0-d35b-448c-959a-386478e89b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:83:34:44:2a:31:8a:ac:72:9a:d2:ce:69: 21:eb:c5:4c:0f:ff:8e:db:19:b3:8c:2a:0c:3b:58: 64:c9:6c:3e:ee:9c:88:f5:22:eb:b7:90:3b:62:4c: 0b:31:ff:23:9f:05:eb:91:49:fb:26:83:a7:b5:d0: d6:eb:23:2d:f7:e0:88:f0:a8:33:e8:6d:ac:50:d3: 28:cd:6e:7a:51:d0:f0:ba:d5:69:c2:5a:56:a4:2e: 8a:79:5b:92:43:57:45:3d:a2:73:70:8c:4f:a3:c9: ae:e4:4a:1d:d7:45:4e:bd:3e:f2:a9:cc:bd:a7:55: f8:66:2e:66:a9:e0:a1:e1:84:c2:06:52:5f:71:7e: 5b:d3:65:a9:0c:cd:c1:72:4b:28:51:98:f2:46:63: 6f:6e:3a:ac:4c:d7:38:6a:76:aa:30:ec:45:28:d6: 07:7c:65:51:42:c9:37:f4:f7:17:2c:f7:0f:b6:33: 1f:ea:1d:81:4f:a6:18:23:16:c1:d7:e8:81:3a:c6: 4e:46:05:7a:1a:c3:17:0a:aa:55:14:9a:25:9e:43: 38:4b:80:0f:87:fb:24:4a:61:0f:30:a3:a6:86:1b: 8c:51:0c:cc:6d:a2:45:8b:30:80:bc:73:cb:83:44: 65:a4:98:87:45:31:ef:6e:54:5a:f9:d6:23:f7:39: 23:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:AE:E9:5F:28:55:A2:19:58:F0:5A:B6:C1:98:D6:BD:CF:AF:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cca04370-2fee-35d1-aa38-b88d71deb221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b0:7f:48:09:20:69:bc:6f:7b:4d:91:1e:94:d6:0a:42:a3: 72:e7:2e:d8:12:6c:a3:d9:1b:87:03:f2:61:53:d1:f5:5b:f3: ad:dd:70:82:72:22:e0:30:62:e7:eb:e8:57:eb:42:fa:11:19: d4:ea:0a:47:83:34:ca:0a:f1:d7:35:77:c1:70:f7:23:85:b6: f9:62:bb:a8:e3:93:95:50:47:d1:6b:2d:7c:9a:7a:75:8c:db: ac:0d:26:fd:5b:6d:08:9f:51:28:6c:27:41:a9:9f:cf:90:9b: c9:1a:c0:71:0c:47:1e:ae:49:0d:9c:9c:76:0e:d2:fb:dd:2e: 3e:16:fa:00:b5:0d:e5:ec:eb:78:fc:eb:e0:ca:51:c8:c2:6d: 60:15:e9:e7:00:57:b0:dc:b6:40:89:ff:bf:ac:fa:e7:88:01: 16:a8:39:f1:93:9e:47:f7:a9:d1:1d:5b:1b:90:e2:3a:c7:34: a6:68:bb:df:62:1a:ca:95:85:80:af:73:83:fa:5d:9b:d0:51: e5:ca:fb:03:d4:95:75:28:e3:8d:79:14:fa:b1:a6:43:80:3a: 2e:3a:f7:b7:ec:e6:4d:3e:a7:8f:63:31:00:91:d1:0f:62:60: 21:eb:50:49:dd:9a:b9:1b:a4:ec:3a:07:e6:42:aa:03:91:19: ad:d9:80:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfOoeZBEFiOScoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NWVkZWZjZTAtZDM1Yi00NDhjLTk1OWEtMzg2NDc4ZTg5YjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyqDNEQqMYqscprSzmkh68VMD/+O2xmzjCoM O1hkyWw+7pyI9SLrt5A7YkwLMf8jnwXrkUn7JoOntdDW6yMt9+CI8Kgz6G2sUNMo zW56UdDwutVpwlpWpC6KeVuSQ1dFPaJzcIxPo8mu5Eod10VOvT7yqcy9p1X4Zi5m qeCh4YTCBlJfcX5b02WpDM3BcksoUZjyRmNvbjqsTNc4anaqMOxFKNYHfGVRQsk3 9PcXLPcPtjMf6h2BT6YYIxbB1+iBOsZORgV6GsMXCqpVFJolnkM4S4APh/skSmEP MKOmhhuMUQzMbaJFizCAvHPLg0RlpJiHRTHvblRa+dYj9zkjzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1JrulfKFWiGVjwWrbBmNa9z69ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2NhMDQzNzAtMmZlZS0z NWQxLWFhMzgtYjg4ZDcxZGViMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWwf0gJIGm8b3tNkR6U1gpCo3LnLtgSbKPZG4cD8mFT0fVb863d cIJyIuAwYufr6FfrQvoRGdTqCkeDNMoK8dc1d8Fw9yOFtvliu6jjk5VQR9FrLXya enWM26wNJv1bbQifUShsJ0Gpn8+Qm8kawHEMRx6uSQ2cnHYO0vvdLj4W+gC1DeXs 63j86+DKUcjCbWAV6ecAV7DctkCJ/7+s+ueIARaoOfGTnkf3qdEdWxuQ4jrHNKZo u99iGsqVhYCvc4P6XZvQUeXK+wPUlXUo4415FPqxpkOAOi4697fs5k0+p49jMQCR 0Q9iYCHrUEndmrkbpOw6B+ZCqgORGa3ZgFE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:55 2025 by rpki-client