$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa File: cea259b2-44a0-3914-b4f2-67745aa1ec38.roa (raw, json) Hash identifier: jARrCkWkVY06kwX/cbZeJlcAZoQlGCY4xYO9Xfcucrw= Subject key identifier: EC:5D:AE:1B:AB:CD:E2:6B:C2:58:F0:55:F6:A4:FA:B9:D4:8C:EA:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F3D82DAC317E91DA4A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396540 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f3:d8:2d:ac:31:7e:91:da:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=2c6759ac-2bf8-4f7d-91d1-f59d26b8ec98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:0f:83:b5:93:a1:5b:48:58:76:6b:a5:95: 86:3a:0a:d8:4f:be:72:0b:88:de:ff:f5:82:6e:e5: 5b:42:84:93:49:3a:50:b4:38:dc:1f:76:68:89:a2: bb:86:fd:63:3d:c1:be:9c:73:15:55:9d:bb:60:70: c0:6f:32:64:b3:0a:f2:c2:24:e0:41:3b:8d:76:90: a8:9e:2a:7a:eb:40:c9:da:9e:8a:75:fe:da:b6:c5: a3:e3:53:2e:ac:d6:30:f3:39:08:42:55:3d:22:92: ea:ea:49:06:3d:42:35:9c:d1:b3:ea:9d:2e:70:70: bb:26:b1:45:56:b4:ce:e9:f2:cc:c9:24:70:b8:80: 20:4f:cc:a5:70:ec:b7:f2:da:d8:b0:d6:1d:8b:29: ac:84:43:f8:dc:a5:e4:0f:44:7f:f8:2e:df:dd:75: 0b:b2:3c:0e:0a:db:fb:75:ff:f3:63:5c:fe:e8:70: 21:64:ed:4b:db:3c:27:15:2a:ef:1a:cb:19:ca:b2: eb:16:d7:90:6e:f7:f8:e5:91:03:ee:ad:fb:f8:24: d4:5f:e0:d9:a8:12:15:0e:26:e4:e2:2c:99:85:5a: b3:9f:7d:cc:f8:27:ad:70:a3:0e:a9:54:50:6b:9f: 1e:8d:3f:ef:7b:b0:25:3a:db:b0:60:9a:53:9d:e0: 98:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5D:AE:1B:AB:CD:E2:6B:C2:58:F0:55:F6:A4:FA:B9:D4:8C:EA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6d:b4:e8:7e:7f:07:ab:fc:ad:aa:d2:1c:dc:83:5e:a8:02: df:ef:d7:80:91:8f:88:87:df:3c:32:24:01:d6:40:1c:db:18: a2:72:2e:04:4e:9a:b5:e9:2a:4d:5a:54:4f:e2:7d:37:bd:e2: f3:15:e7:24:3d:a0:f5:86:50:0c:ad:df:1d:01:69:4d:a9:12: 6e:5d:61:e3:3a:d7:88:eb:96:84:d3:9b:b4:cb:bb:72:10:e0: ac:17:cd:21:64:e3:eb:72:c3:7f:31:98:39:ac:fb:6c:0f:c7: f6:1c:97:54:90:d0:5d:18:65:31:75:ff:ef:9f:d7:57:ae:14: 67:89:6c:52:8d:b5:16:a1:fe:53:4c:d5:ce:98:c0:d5:07:1e: 06:4c:fd:8a:d6:fe:85:07:35:a3:8f:40:25:f4:3b:bb:88:e7: 20:a0:f8:2d:80:0a:cc:ce:22:d9:5a:91:99:01:1a:8e:22:ff: 69:05:70:48:6e:be:cf:60:98:73:c0:da:38:48:13:85:23:98: 16:ec:d3:de:c0:74:27:34:13:9f:bc:47:82:5e:b3:63:16:0d: f8:cc:25:54:fb:9b:c1:18:42:6b:00:10:ef:cb:a7:06:ff:2d: 47:e9:5b:80:2d:e7:98:da:4c:cb:ab:a2:6c:b3:87:09:e9:74: 85:d9:d4:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfPYLawxfpHaSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MmM2NzU5YWMtMmJmOC00ZjdkLTkxZDEtZjU5ZDI2YjhlYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu8Pg7WToVtIWHZrpZWGOgrYT75yC4je//WC buVbQoSTSTpQtDjcH3ZoiaK7hv1jPcG+nHMVVZ27YHDAbzJkswrywiTgQTuNdpCo nip660DJ2p6Kdf7atsWj41MurNYw8zkIQlU9IpLq6kkGPUI1nNGz6p0ucHC7JrFF VrTO6fLMySRwuIAgT8ylcOy38trYsNYdiymshEP43KXkD0R/+C7f3XULsjwOCtv7 df/zY1z+6HAhZO1L2zwnFSrvGssZyrLrFteQbvf45ZED7q37+CTUX+DZqBIVDibk 4iyZhVqzn33M+CetcKMOqVRQa58ejT/ve7AlOtuwYJpTneCYLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOxdrhurzeJrwljwVfak+rnUjOoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhMjU5YjItNDRhMC0z OTE0LWI0ZjItNjc3NDVhYTFlYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1ttOh+fwer/K2q0hzcg16oAt/v14CRj4iH3zwyJAHWQBzbGKJy LgROmrXpKk1aVE/ifTe94vMV5yQ9oPWGUAyt3x0BaU2pEm5dYeM614jrloTTm7TL u3IQ4KwXzSFk4+tyw38xmDms+2wPx/Ycl1SQ0F0YZTF1/++f11euFGeJbFKNtRah /lNM1c6YwNUHHgZM/YrW/oUHNaOPQCX0O7uI5yCg+C2ACszOItlakZkBGo4i/2kF cEhuvs9gmHPA2jhIE4UjmBbs097AdCc0E5+8R4Jes2MWDfjMJVT7m8EYQmsAEO/L pwb/LUfpW4At55jaTMuromyzhwnpdIXZ1H8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:54 2025 by rpki-client