$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa File: cde84229-d45a-3a8d-bf35-ae39d34e0423.roa (raw, json) Hash identifier: Xzrw/NrEh+i9oQARP9NBFXX9UYEObtGr5plKfMCLabs= Subject key identifier: 28:ED:A2:B4:4C:C5:DB:E8:4E:4A:D7:52:86:6D:16:47:FD:26:B5:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814636EEECE9FF9215E123C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396602 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:36:ee:ec:e9:ff:92:15:e1:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=5ef106a6-365c-4cbc-8322-3a99a19105c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:a2:48:d6:f5:63:b2:88:63:d4:93:56:af: 82:45:30:5e:c4:49:fa:4b:09:30:ec:26:90:41:6b: 92:d5:43:fd:25:e7:8e:e9:3b:40:81:aa:b0:96:43: 0a:b4:62:46:04:ea:20:d6:b5:d0:09:10:19:7d:c9: 26:49:1e:fc:e0:93:08:9a:a1:ef:e0:15:f1:26:18: 30:06:42:f2:dd:35:a2:99:26:05:7a:4a:64:db:bb: d8:52:98:c5:fc:89:ff:fc:5c:57:5e:ad:18:1f:56: 87:92:8a:74:e2:ec:45:87:7b:84:32:84:de:6f:f9: 47:f0:62:90:79:e0:b3:9d:e3:fb:e3:24:2f:01:07: 0e:cc:7c:77:7e:88:59:74:c7:e8:05:51:c1:ae:4e: 69:3a:72:4b:55:7c:71:cb:cc:d4:33:07:2e:3b:fd: 93:e2:c1:1a:d4:b5:53:7d:d0:c4:1f:35:c0:c1:ae: e4:1c:34:10:54:94:2a:99:0b:d1:34:4f:7b:fb:d0: 1d:7f:2c:31:7c:59:c7:f6:f1:96:56:e3:85:03:a8: 28:8b:50:e3:1a:cc:de:1e:72:74:82:73:f6:9f:47: fd:0c:83:18:14:57:b5:47:ba:50:81:e1:e4:6d:33: c1:68:96:de:9d:d0:b8:af:18:f0:7f:4e:98:43:43: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:A2:B4:4C:C5:DB:E8:4E:4A:D7:52:86:6D:16:47:FD:26:B5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde84229-d45a-3a8d-bf35-ae39d34e0423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f3:88:df:54:85:f0:e0:8a:44:f2:cc:c1:d4:ea:8c:3e:7c: 69:7c:d9:fe:1a:ce:ee:7a:bc:c4:56:a2:1b:1c:9c:a4:66:c4: 08:17:25:d5:a7:4f:96:f5:f5:5c:46:95:6e:a8:30:33:77:85: c4:c7:77:d5:89:05:8f:d8:e0:a2:92:e3:1a:d8:82:85:03:1b: 7e:eb:d8:2e:85:63:43:04:d8:3e:47:76:01:d2:7b:5a:12:95: 79:51:2c:03:f7:5e:a3:93:1d:f1:67:7d:8a:22:07:20:70:1e: fd:ca:af:4c:31:08:e6:57:55:df:83:80:06:e7:bf:5f:18:40: b2:7e:6b:53:11:96:df:fd:25:b6:ff:c1:f8:03:4c:06:8d:c3: 94:c6:6a:99:36:d5:40:2a:bf:cb:de:55:39:2d:f7:16:a1:25: 1d:cb:40:20:1f:a4:16:1b:24:b1:74:b2:be:77:80:2a:f7:d3: 6b:87:d3:d4:96:fc:c2:1d:5a:54:95:64:b5:c7:ab:e1:22:2a: 3b:1d:ec:dc:92:96:8a:1c:8e:5c:a1:a4:a5:be:a3:b4:a7:a2: 51:d1:74:92:ed:6e:b8:ae:e7:40:8c:a7:53:54:42:6b:bf:dd: 7f:70:c2:0d:bd:d1:79:18:e4:5e:0f:0a:72:77:6c:92:84:6b: 23:8f:40:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjbu7On/khXhI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NWVmMTA2YTYtMzY1Yy00Y2JjLTgzMjItM2E5OWExOTEwNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaGiSNb1Y7KIY9STVq+CRTBexEn6Swkw7CaQ QWuS1UP9JeeO6TtAgaqwlkMKtGJGBOog1rXQCRAZfckmSR784JMImqHv4BXxJhgw BkLy3TWimSYFekpk27vYUpjF/In//FxXXq0YH1aHkop04uxFh3uEMoTeb/lH8GKQ eeCzneP74yQvAQcOzHx3fohZdMfoBVHBrk5pOnJLVXxxy8zUMwcuO/2T4sEa1LVT fdDEHzXAwa7kHDQQVJQqmQvRNE97+9AdfywxfFnH9vGWVuOFA6goi1DjGszeHnJ0 gnP2n0f9DIMYFFe1R7pQgeHkbTPBaJbendC4rxjwf06YQ0OT1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCjtorRMxdvoTkrXUoZtFkf9JrVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlODQyMjktZDQ1YS0z YThkLWJmMzUtYWUzOWQzNGUwNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXziN9UhfDgikTyzMHU6ow+fGl82f4azu56vMRWohscnKRmxAgX JdWnT5b19VxGlW6oMDN3hcTHd9WJBY/Y4KKS4xrYgoUDG37r2C6FY0ME2D5HdgHS e1oSlXlRLAP3XqOTHfFnfYoiByBwHv3Kr0wxCOZXVd+DgAbnv18YQLJ+a1MRlt/9 Jbb/wfgDTAaNw5TGapk21UAqv8veVTkt9xahJR3LQCAfpBYbJLF0sr53gCr302uH 09SW/MIdWlSVZLXHq+EiKjsd7NySloocjlyhpKW+o7SnolHRdJLtbriu50CMp1NU Qmu/3X9wwg290XkY5F4PCnJ3bJKEayOPQNs= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:52 2025 by rpki-client