$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa File: cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa (raw, json) Hash identifier: 2FAn0GIugm4MhcvmJyh+B4zqrfHsXIAQM8m5sFIffiE= Subject key identifier: D5:31:AD:8E:9F:E9:2E:2F:37:FA:B1:88:E2:B5:F5:FA:D8:96:03:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814637C622D76D956FF1A800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19836 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:c6:22:d7:6d:95:6f:f1:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=70c3c32f-07a1-44b2-bbba-d5c27c3261ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:70:c6:e8:18:e0:df:59:a9:0d:52:68:e1: 2b:0a:83:61:56:f8:c7:49:ad:d8:a0:c5:d4:1b:f2: 88:a1:66:a7:b2:20:1e:69:00:82:cb:f1:18:90:b1: 02:c8:a3:65:24:53:5b:3c:7b:a4:ed:34:b9:ee:71: 0d:34:f5:f9:24:1e:83:97:f6:9f:a3:b1:4c:ce:c9: 2b:8f:a2:33:cf:4a:2b:f1:ef:16:09:d4:9f:c7:4b: 3f:e3:55:02:63:67:d0:bc:d7:f4:0d:04:bf:75:c3: a7:e3:af:83:d5:fd:3b:b4:e1:b7:42:fb:de:89:76: 0f:b7:f8:b9:f9:70:4f:21:20:24:bb:0f:3d:e6:c2: c1:e5:e7:a3:7e:2e:49:5e:4a:9e:3a:d4:ac:f9:1d: a3:15:cb:d3:3f:cf:69:6e:be:14:dd:0f:11:f6:c6: 38:0f:ea:33:4d:09:99:a4:49:ff:f3:e6:ad:f8:60: 40:3a:2a:cd:49:1f:79:9e:5e:4e:f0:26:cc:b6:e6: cf:11:e3:b7:6a:e9:3e:f1:ff:3b:60:8f:e8:d7:45: e9:dc:95:0e:9c:97:80:2d:60:2b:f3:4e:ad:37:01: fe:77:ed:c4:e3:31:49:51:22:25:76:bc:37:ad:f1: 44:30:a4:a9:37:08:7b:08:74:0a:ba:f0:2e:00:bc: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:31:AD:8E:9F:E9:2E:2F:37:FA:B1:88:E2:B5:F5:FA:D8:96:03:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:18:bc:ab:24:be:60:d8:fd:30:40:88:da:5b:38:9e:b1:ee: 1e:3e:bd:a3:3c:e0:b0:f3:43:0d:fd:55:6f:d8:66:11:d7:d3: d8:55:fd:a7:ae:23:4c:89:c3:80:13:1d:ff:8c:5d:fc:9c:18: b3:84:a6:ed:43:03:f2:4c:21:15:2f:00:e2:9a:de:bf:dd:42: 2d:aa:71:71:e1:37:b9:c8:53:21:96:76:46:a5:f7:17:84:67: 69:76:70:a1:c8:94:5c:3a:77:fc:30:96:96:e4:87:eb:c5:be: 4b:f5:b2:60:26:31:ff:0b:75:06:17:67:16:13:73:14:6b:96: a2:95:f1:0c:37:b9:c4:57:37:9a:36:62:da:cd:da:25:f8:38: b1:d0:e1:7b:23:4d:a1:46:fd:12:d0:a6:32:92:53:03:a1:e7: be:38:f6:17:ea:65:cb:da:26:fe:ec:15:a0:ad:2b:f7:f4:93: 5a:ac:34:df:bf:ba:23:db:30:ba:d5:5e:6d:d3:58:fe:eb:72: b3:f0:d8:96:0e:66:ba:8b:a6:a3:10:a4:91:fe:bd:b5:15:e4: a1:2f:95:02:83:0c:8e:25:0f:38:b0:b0:da:9c:4d:ea:4a:be: 7e:db:2b:fb:7e:8a:69:9d:62:f3:97:bb:7e:c7:5b:cc:e5:f2: 8a:67:84:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjfGItdtlW/xqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzBjM2MzMmYtMDdhMS00NGIyLWJiYmEtZDVjMjdjMzI2MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo91wxugY4N9ZqQ1SaOErCoNhVvjHSa3YoMXU G/KIoWansiAeaQCCy/EYkLECyKNlJFNbPHuk7TS57nENNPX5JB6Dl/afo7FMzskr j6Izz0or8e8WCdSfx0s/41UCY2fQvNf0DQS/dcOn46+D1f07tOG3QvveiXYPt/i5 +XBPISAkuw895sLB5eejfi5JXkqeOtSs+R2jFcvTP89pbr4U3Q8R9sY4D+ozTQmZ pEn/8+at+GBAOirNSR95nl5O8CbMtubPEeO3auk+8f87YI/o10Xp3JUOnJeALWAr 806tNwH+d+3E4zFJUSIldrw3rfFEMKSpNwh7CHQKuvAuALx6xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUxrY6f6S4vN/qxiOK19frYlgMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2QwODZmMGUtNjcxZi0z OWJhLWI2Y2YtZTMzNjlhY2MzMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEoYvKskvmDY/TBAiNpbOJ6x7h4+vaM84LDzQw39VW/YZhHX09hV /aeuI0yJw4ATHf+MXfycGLOEpu1DA/JMIRUvAOKa3r/dQi2qcXHhN7nIUyGWdkal 9xeEZ2l2cKHIlFw6d/wwlpbkh+vFvkv1smAmMf8LdQYXZxYTcxRrlqKV8Qw3ucRX N5o2YtrN2iX4OLHQ4XsjTaFG/RLQpjKSUwOh57449hfqZcvaJv7sFaCtK/f0k1qs NN+/uiPbMLrVXm3TWP7rcrPw2JYOZrqLpqMQpJH+vbUV5KEvlQKDDI4lDziwsNqc TepKvn7bK/t+immdYvOXu37HW8zl8opnhNo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:50 2025 by rpki-client