$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5c9b28e-e5a9-3b7a-9133-fc73f12fff82.roa File: d5c9b28e-e5a9-3b7a-9133-fc73f12fff82.roa (raw, json) Hash identifier: xM5bOeQqv1qAeUbkORgd9PBOpz89vAA6fd1kQWNGnvQ= Subject key identifier: 8F:BA:07:8B:5A:E1:59:AB:14:13:F1:4C:93:01:B0:57:E1:21:1B:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E42FE316AF6BDC5BB980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5c9b28e-e5a9-3b7a-9133-fc73f12fff82.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396574 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e4:2f:e3:16:af:6b:dc:5b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=1a5e9702-376b-4a56-a0fe-31aed9122592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c4:65:63:a7:c9:e1:fe:d9:f3:e6:a8:3c:98: 1d:ee:bc:b0:f0:63:83:91:2f:99:82:2b:90:a4:b9: f2:00:60:0c:bc:75:f8:d5:39:ce:d0:48:12:58:e1: 5f:24:48:3e:62:84:fd:00:85:78:c5:b2:12:d3:39: 7e:27:a3:be:89:4a:db:c8:36:7c:82:73:c7:7e:2f: 70:56:5a:e5:ff:4f:a5:12:ca:cd:77:d4:6a:7c:54: 01:c6:ea:77:b6:b8:be:81:21:82:51:d7:eb:64:62: bc:51:8c:4b:2a:f8:32:d2:78:7a:5a:0e:22:58:19: 20:17:43:66:ff:88:43:55:89:91:8a:d6:7a:08:bc: 34:64:03:5b:bf:cc:75:e4:35:d5:bd:02:3b:26:00: 44:48:c3:e0:63:35:b0:ce:ea:c3:89:22:5c:c4:8e: ce:47:77:6e:a7:1c:21:69:d6:c7:71:31:33:73:a3: ba:9d:2a:c7:8e:dc:24:5f:a5:09:44:6b:7d:5d:e1: d1:8d:eb:84:a1:f8:5e:4a:5c:99:64:ec:e4:b3:fb: dd:8b:10:97:0e:cf:91:44:9e:7f:d8:3c:39:99:51: d2:d4:2d:be:66:33:ec:46:1a:f0:e3:54:33:6b:20: 16:41:c6:98:dc:83:0c:c2:a6:f0:ef:0e:6a:15:87: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BA:07:8B:5A:E1:59:AB:14:13:F1:4C:93:01:B0:57:E1:21:1B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5c9b28e-e5a9-3b7a-9133-fc73f12fff82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f2:bd:81:82:93:43:39:41:9e:6e:a0:21:eb:23:94:ac:0a: 0d:5d:ed:bd:0a:17:ab:1a:bf:bb:0c:f7:cc:25:fd:83:c1:62: 41:99:75:f1:76:46:07:89:99:e9:da:b5:b3:97:a5:42:c9:72: 85:42:ef:80:b1:04:c7:01:fa:b6:75:0c:25:fb:a0:48:d8:4b: f7:44:e2:1c:50:14:19:a5:16:bc:46:e7:87:99:7d:aa:7f:e5: eb:ee:91:c8:14:7d:ee:31:00:17:ba:f3:73:1a:7a:80:bb:37: e6:87:78:b8:79:1b:41:ef:b4:d0:0e:e7:53:7c:b3:1d:95:0b: 3b:7c:fd:d4:c7:91:fc:14:7a:62:06:96:9c:e4:a2:30:65:37: 3c:43:94:da:fe:61:18:62:0d:8d:df:87:b2:b8:d7:6d:06:59: c8:90:59:b0:a3:37:c6:1d:91:3e:89:ca:7d:5e:c9:ae:92:ed: a6:29:d8:dd:70:37:d8:12:26:7f:19:12:19:49:ac:3a:29:d5: c6:08:ed:73:6a:2b:f7:c6:fd:fd:8b:c6:74:ff:5f:60:e7:2e: 4b:f5:37:cc:55:0e:6a:2a:98:d1:06:a4:40:53:f5:eb:e9:c5: f8:2c:87:0d:9d:30:1b:23:e3:f8:7b:22:06:57:4e:5c:9c:0d: 3c:7f:cc:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJeQv4xava9xbuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MWE1ZTk3MDItMzc2Yi00YTU2LWEwZmUtMzFhZWQ5MTIyNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMRlY6fJ4f7Z8+aoPJgd7ryw8GODkS+ZgiuQ pLnyAGAMvHX41TnO0EgSWOFfJEg+YoT9AIV4xbIS0zl+J6O+iUrbyDZ8gnPHfi9w Vlrl/0+lEsrNd9RqfFQBxup3tri+gSGCUdfrZGK8UYxLKvgy0nh6Wg4iWBkgF0Nm /4hDVYmRitZ6CLw0ZANbv8x15DXVvQI7JgBESMPgYzWwzurDiSJcxI7OR3dupxwh adbHcTEzc6O6nSrHjtwkX6UJRGt9XeHRjeuEofheSlyZZOzks/vdixCXDs+RRJ5/ 2Dw5mVHS1C2+ZjPsRhrw41QzayAWQcaY3IMMwqbw7w5qFYeX+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI+6B4ta4VmrFBPxTJMBsFfhIRspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDVjOWIyOGUtZTVhOS0z YjdhLTkxMzMtZmM3M2YxMmZmZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEjyvYGCk0M5QZ5uoCHrI5SsCg1d7b0KF6sav7sM98wl/YPBYkGZ dfF2RgeJmenatbOXpULJcoVC74CxBMcB+rZ1DCX7oEjYS/dE4hxQFBmlFrxG54eZ fap/5evukcgUfe4xABe683MaeoC7N+aHeLh5G0HvtNAO51N8sx2VCzt8/dTHkfwU emIGlpzkojBlNzxDlNr+YRhiDY3fh7K4120GWciQWbCjN8YdkT6Jyn1eya6S7aYp 2N1wN9gSJn8ZEhlJrDop1cYI7XNqK/fG/f2LxnT/X2DnLkv1N8xVDmoqmNEGpEBT 9evpxfgshw2dMBsj4/h7IgZXTlycDTx/zEo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:25 2025 by rpki-client