$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa File: d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa (raw, json) Hash identifier: k/O9l2FN7ph3B+ZXckNLpGO0kXIbeSrmnqdoNLD7w1c= Subject key identifier: 85:BD:3C:9E:96:2B:0D:F8:CB:BB:D1:4E:38:07:40:3B:EE:29:8E:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814636FD01EF734167CBDD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396599 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:36:fd:01:ef:73:41:67:cb:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=9cfd7ff4-642c-4ec8-a9f4-12c978ebe404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:78:2f:30:c7:4c:70:d5:97:45:7a:c1:79: 62:18:3e:d7:ad:67:b8:9b:1e:17:9f:6c:94:95:a7: 90:f2:b2:6c:8f:ee:23:52:e5:53:98:05:fc:e0:c9: 52:26:75:6f:e2:09:d0:4d:e6:f6:54:bb:2c:c9:34: 39:4e:f9:74:36:e2:37:d5:9d:c2:40:66:42:16:17: d5:77:b6:a5:06:2f:9b:2f:1e:f6:b2:ad:52:b4:3d: ee:00:3a:98:72:3b:7e:f0:ab:58:5a:3b:30:08:81: 70:5a:0a:76:ac:eb:84:c4:76:c3:26:cb:43:29:9c: 13:80:95:b9:92:f7:85:8f:53:f3:1a:0d:83:9b:38: ee:d4:52:41:87:99:2e:ce:05:d3:79:3f:64:57:4b: 18:02:54:44:be:2a:4d:46:1b:68:27:3e:07:93:32: 0b:a2:87:41:03:bf:46:24:a8:8e:69:6e:c3:89:f9: 2f:63:3f:db:72:38:dc:86:c1:40:58:7f:be:ba:3b: 91:c6:71:db:ce:fd:ed:b9:ed:46:6c:f8:70:c6:a0: b1:08:ba:a8:66:d3:81:f7:38:bd:b0:31:61:44:32: 54:b8:3b:13:df:8d:ba:76:4a:5a:05:4e:ea:83:c3: 83:f0:6d:ad:7b:70:81:c2:16:5e:b3:d0:42:1e:e0: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:3C:9E:96:2B:0D:F8:CB:BB:D1:4E:38:07:40:3B:EE:29:8E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d6:71:ad:1a:b8:51:dd:31:3d:50:7d:a1:6b:05:c6:47:17: e5:b7:cc:0d:6e:fe:ef:33:3f:46:34:48:da:b6:97:f9:d8:aa: be:07:9b:f7:6f:eb:ee:fe:02:68:c2:59:dd:2f:ea:eb:8c:63: 0d:3a:3d:d5:b9:58:70:0e:16:0a:de:21:b3:f6:f4:79:01:2d: 1f:bd:41:1c:8d:df:11:ff:3f:5e:5f:9b:8d:64:0d:7b:e8:46: 7f:50:c4:b1:30:fc:fe:81:7b:75:7a:84:51:c2:78:47:38:da: ed:b4:22:37:97:33:ae:40:ec:21:5f:37:84:d3:ce:5e:b2:3a: 91:46:05:e4:24:14:80:fb:fb:8b:76:71:5c:06:18:03:09:cf: 4b:1f:ea:5d:b3:63:cb:dd:b6:e5:85:32:03:b0:55:cd:6d:06: 7d:41:4c:89:cb:60:8c:13:2f:f5:16:b0:11:bf:4b:95:cc:9d: 3e:39:0f:a9:1f:e8:e0:6b:be:a2:87:72:25:95:6b:d4:6b:2a: 68:67:4e:f6:1c:4f:71:da:72:56:02:3c:4c:77:1f:d2:64:31: 05:35:c7:c9:c7:2d:e9:8c:81:40:0c:11:95:62:0e:55:62:ce: 26:52:65:81:84:f2:e7:63:59:dc:65:71:f4:12:a2:0a:2e:d0: 6b:35:cb:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjb9Ae9zQWfL3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OWNmZDdmZjQtNjQyYy00ZWM4LWE5ZjQtMTJjOTc4ZWJlNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwON4LzDHTHDVl0V6wXliGD7XrWe4mx4Xn2yU laeQ8rJsj+4jUuVTmAX84MlSJnVv4gnQTeb2VLssyTQ5Tvl0NuI31Z3CQGZCFhfV d7alBi+bLx72sq1StD3uADqYcjt+8KtYWjswCIFwWgp2rOuExHbDJstDKZwTgJW5 kveFj1PzGg2Dmzju1FJBh5kuzgXTeT9kV0sYAlREvipNRhtoJz4HkzILoodBA79G JKiOaW7DifkvYz/bcjjchsFAWH++ujuRxnHbzv3tue1GbPhwxqCxCLqoZtOB9zi9 sDFhRDJUuDsT3426dkpaBU7qg8OD8G2te3CBwhZes9BCHuCghQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIW9PJ6WKw34y7vRTjgHQDvuKY5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFkMGE2NzUtZTJkMi0z NjY0LWIxYjUtOGJkNTBiNWQ0NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFvWca0auFHdMT1QfaFrBcZHF+W3zA1u/u8zP0Y0SNq2l/nYqr4H m/dv6+7+AmjCWd0v6uuMYw06PdW5WHAOFgreIbP29HkBLR+9QRyN3xH/P15fm41k DXvoRn9QxLEw/P6Be3V6hFHCeEc42u20IjeXM65A7CFfN4TTzl6yOpFGBeQkFID7 +4t2cVwGGAMJz0sf6l2zY8vdtuWFMgOwVc1tBn1BTInLYIwTL/UWsBG/S5XMnT45 D6kf6OBrvqKHciWVa9RrKmhnTvYcT3HaclYCPEx3H9JkMQU1x8nHLemMgUAMEZVi DlViziZSZYGE8udjWdxlcfQSogou0Gs1y1w= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:42 2025 by rpki-client