$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa File: d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa (raw, json) Hash identifier: GTFiPcqghCEsr6LdDAgP8rW8c8o+DB4i02/OzYi5kMc= Subject key identifier: C3:91:39:DE:95:28:73:F0:E6:FF:9F:C4:8E:C1:72:76:15:55:AC:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463617282B005A26AC89A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396597 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:36:17:28:2b:00:5a:26:ac:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a676a61c-bf2a-46c6-832d-b7a4260d1194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:dd:d5:a7:84:2c:8d:4a:de:7f:24:28:4d: a9:0f:2a:d1:77:8d:57:5b:da:e5:2a:c5:95:ac:69: fd:df:6c:b1:92:4b:02:a9:d8:e3:0b:53:d4:96:8a: da:d4:20:14:9f:7c:df:b0:6a:a9:b6:1d:f4:df:b2: 5a:1b:3f:0c:98:9d:0a:7f:13:70:5f:63:2e:3c:38: 73:71:9a:9e:6d:98:04:6f:62:c4:fa:bb:4b:c1:52: 69:00:08:2a:a3:47:32:21:17:20:1c:4e:4f:d9:88: 38:06:cf:af:43:2c:78:f2:1a:70:23:5f:4b:56:36: d7:0b:ce:8f:70:c9:90:7d:e6:c2:be:fa:73:ee:8b: 4f:53:46:29:95:f8:15:c2:90:03:be:ff:b0:0e:a4: 9e:98:49:a1:40:5b:e5:51:02:f8:ad:f9:ef:c6:d8: a0:48:4d:f0:eb:a9:41:e3:c9:b5:5e:5e:59:ec:9c: 89:98:57:31:87:d0:ea:ef:7c:fb:c2:ed:69:ff:ac: 36:f0:7c:25:37:f0:1d:ea:cb:fd:04:d8:9a:c3:5b: 72:79:a6:dc:d6:ac:dd:d9:9b:02:5e:f5:e9:17:29: 19:95:34:56:c8:6f:5f:7f:93:16:c1:92:65:6e:38: 86:15:e7:d9:6a:16:d2:d5:79:ef:fc:a9:de:dc:77: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:91:39:DE:95:28:73:F0:E6:FF:9F:C4:8E:C1:72:76:15:55:AC:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c9:1c:f2:41:72:97:b2:f0:3c:f1:0c:f1:3e:78:ee:13:94: 33:18:f0:a2:2b:48:f8:56:75:a9:5d:ea:52:60:21:10:24:53: 78:74:61:9d:94:28:8a:c2:06:cb:91:1b:f7:e3:b4:25:d0:25: 22:23:65:03:00:35:f6:85:b1:9d:0d:3c:2a:4c:9c:8b:f6:4f: 90:5f:2b:18:39:f4:61:03:20:10:1a:74:3d:f2:92:4c:32:cd: 81:e1:90:be:8c:33:b1:7d:9f:07:73:ed:ac:d4:e3:cf:18:df: fc:db:12:50:08:24:7c:6e:8b:5a:79:41:da:4c:86:bd:db:d0: be:fa:48:3d:75:dc:e9:f7:ea:41:92:ae:12:eb:88:a3:62:41: e1:35:d9:53:aa:cc:54:fc:3d:e2:03:c6:ba:58:59:ca:ef:f1: 3a:fe:96:14:91:2e:c5:82:4d:2d:4e:46:07:5f:34:52:08:0d: eb:50:25:de:08:58:76:89:aa:63:e0:23:09:e0:90:6f:7d:16: c7:df:c5:f8:35:cf:c5:83:6a:a9:b8:3d:6c:7f:bf:bc:b9:06: 5b:90:81:c4:34:c1:1c:17:fb:47:e6:bc:d3:57:2f:51:2d:3f: 15:43:23:e1:4b:17:5a:11:bb:b3:bc:c3:7c:68:fe:84:ff:f6: ca:8c:82:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjYXKCsAWiasiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTY3NmE2MWMtYmYyYS00NmM2LTgzMmQtYjdhNDI2MGQxMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Dd1aeELI1K3n8kKE2pDyrRd41XW9rlKsWV rGn932yxkksCqdjjC1PUlora1CAUn3zfsGqpth3037JaGz8MmJ0KfxNwX2MuPDhz cZqebZgEb2LE+rtLwVJpAAgqo0cyIRcgHE5P2Yg4Bs+vQyx48hpwI19LVjbXC86P cMmQfebCvvpz7otPU0YplfgVwpADvv+wDqSemEmhQFvlUQL4rfnvxtigSE3w66lB 48m1Xl5Z7JyJmFcxh9Dq73z7wu1p/6w28HwlN/Ad6sv9BNiaw1tyeabc1qzd2ZsC XvXpFykZlTRWyG9ff5MWwZJlbjiGFefZahbS1Xnv/Kne3Hd+gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOROd6VKHPw5v+fxI7BcnYVVaycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY1YmE2MjktZTRmMS0z YTgyLWEyNGQtZDU3ZWZiYzFlMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDJHPJBcpey8DzxDPE+eO4TlDMY8KIrSPhWdald6lJgIRAkU3h0 YZ2UKIrCBsuRG/fjtCXQJSIjZQMANfaFsZ0NPCpMnIv2T5BfKxg59GEDIBAadD3y kkwyzYHhkL6MM7F9nwdz7azU488Y3/zbElAIJHxui1p5QdpMhr3b0L76SD113On3 6kGSrhLriKNiQeE12VOqzFT8PeIDxrpYWcrv8Tr+lhSRLsWCTS1ORgdfNFIIDetQ Jd4IWHaJqmPgIwngkG99Fsffxfg1z8WDaqm4PWx/v7y5BluQgcQ0wRwX+0fmvNNX L1EtPxVDI+FLF1oRu7O8w3xo/oT/9sqMgmQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:41 2025 by rpki-client