$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa File: d3f2f053-4b54-3958-a759-499713d84940.roa (raw, json) Hash identifier: DerzCQaC6HunEky7KrvH89j7Qn7KazR30Q3r2IWbhPw= Subject key identifier: EE:A2:E8:C0:29:79:BC:5E:DD:8D:2A:DD:CF:EE:89:92:E4:FB:C9:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825ED73912B30D4FE755D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396593 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ed:73:91:2b:30:d4:fe:75:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=3693e924-7bd9-4cb5-85ba-0c3723fadb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:5b:74:49:4f:9d:02:35:b8:1d:6e:de:25: fd:21:39:6b:22:3e:1a:bb:1d:e1:48:05:45:18:ea: 12:fe:2c:7c:3e:56:bf:26:29:2a:d3:81:a1:2b:94: 56:ea:42:32:ec:ce:71:75:f8:d3:a1:e3:2e:b7:2a: 99:62:35:6c:5f:52:e2:fa:05:be:32:3c:b4:c5:ae: 0d:77:a1:fc:39:89:06:92:f3:27:a8:c7:a7:a8:9f: 99:05:ea:4a:26:b0:e2:07:45:a0:f8:3f:8d:25:5a: d9:06:9d:0b:e0:4f:fe:7e:c1:2b:55:fd:ed:19:bb: 80:3e:ba:67:00:14:54:bc:77:42:f4:66:a8:25:f3: 08:7e:ba:0a:5f:28:96:2c:52:a0:36:23:06:90:0a: 5d:ed:99:4c:82:e2:aa:ca:b9:0a:c9:37:50:3f:27: c0:56:93:86:d9:1e:c8:1d:20:4a:e4:cf:e2:ad:b9: d1:ab:ae:66:9c:9d:f2:fe:99:41:c9:0f:44:2e:f9: 8c:81:b5:fa:82:53:67:63:b2:91:5e:c2:4a:33:44: 4b:e0:c5:0a:2e:8a:31:6a:cd:3d:19:f7:e0:f7:48: 92:14:79:05:68:86:9b:de:df:12:66:53:ca:c5:2d: fa:54:51:67:3a:e7:ec:29:b5:a1:de:78:3b:cc:e7: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:E8:C0:29:79:BC:5E:DD:8D:2A:DD:CF:EE:89:92:E4:FB:C9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fa:2b:dd:ac:e8:32:29:70:62:89:68:db:cb:a7:d5:bb:8b: e6:d9:6d:89:51:6e:e3:b3:1e:21:ee:e1:df:15:71:58:8b:74: b1:5c:33:fb:8f:7a:a5:74:19:79:b1:0e:50:fa:7d:74:45:8f: 8d:73:0e:e6:dd:7f:18:de:da:91:b8:a9:e1:98:d9:97:cd:42: 27:77:ab:3b:14:03:81:b6:f8:88:fe:85:5d:9b:8d:0f:7d:d0: 70:bb:ec:fe:eb:33:4b:3f:b5:33:72:e6:e1:2c:43:14:99:c9: 12:cd:95:4a:ce:e9:ac:6a:51:04:b4:3c:f8:5b:3a:ec:c1:36: 29:54:a7:3d:a8:27:2b:78:30:24:28:48:dd:15:00:e2:05:92: 27:70:25:2d:2f:2b:84:28:96:e8:cd:59:84:47:af:91:65:cd: c4:28:99:77:6e:e8:8b:8d:93:14:26:15:31:08:15:d5:14:8b: b2:7a:56:f4:22:e3:6d:f0:4a:1d:0a:81:7a:f0:86:f8:1b:10: 0b:f0:87:5e:1d:55:98:e0:8d:41:25:86:bc:79:3e:ec:3b:a5: 18:e3:11:c8:38:31:6e:9b:24:f0:4c:b2:0d:91:81:d9:0a:15: 72:2b:db:79:43:cc:69:2d:10:e1:17:94:0c:8a:14:d0:18:45: 64:4c:7c:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe1zkSsw1P51XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MzY5M2U5MjQtN2JkOS00Y2I1LTg1YmEtMGMzNzIzZmFkYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO9bdElPnQI1uB1u3iX9ITlrIj4aux3hSAVF GOoS/ix8Pla/Jikq04GhK5RW6kIy7M5xdfjToeMutyqZYjVsX1Li+gW+Mjy0xa4N d6H8OYkGkvMnqMenqJ+ZBepKJrDiB0Wg+D+NJVrZBp0L4E/+fsErVf3tGbuAPrpn ABRUvHdC9GaoJfMIfroKXyiWLFKgNiMGkApd7ZlMguKqyrkKyTdQPyfAVpOG2R7I HSBK5M/irbnRq65mnJ3y/plByQ9ELvmMgbX6glNnY7KRXsJKM0RL4MUKLooxas09 Gffg90iSFHkFaIab3t8SZlPKxS36VFFnOufsKbWh3ng7zOdgPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6i6MApebxe3Y0q3c/uiZLk+8n5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNmMmYwNTMtNGI1NC0z OTU4LWE3NTktNDk5NzEzZDg0OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIn6K92s6DIpcGKJaNvLp9W7i+bZbYlRbuOzHiHu4d8VcViLdLFc M/uPeqV0GXmxDlD6fXRFj41zDubdfxje2pG4qeGY2ZfNQid3qzsUA4G2+Ij+hV2b jQ990HC77P7rM0s/tTNy5uEsQxSZyRLNlUrO6axqUQS0PPhbOuzBNilUpz2oJyt4 MCQoSN0VAOIFkidwJS0vK4QolujNWYRHr5FlzcQomXdu6IuNkxQmFTEIFdUUi7J6 VvQi423wSh0KgXrwhvgbEAvwh14dVZjgjUElhrx5Puw7pRjjEcg4MW6bJPBMsg2R gdkKFXIr23lDzGktEOEXlAyKFNAYRWRMfNU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:50 2025 by rpki-client