$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa File: d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa (raw, json) Hash identifier: A1oIncCVwC+hwiXxRtZphh3lQObc/qyZm+iH6Je4U6g= Subject key identifier: 33:68:51:5F:33:16:20:FB:1E:46:4B:1E:3A:80:FF:5A:F3:CC:49:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814631EBC0B57026576C6DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36617 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:31:eb:c0:b5:70:26:57:6c:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=8c05bc05-b6a2-4b7d-b760-a71d83a4f066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:e6:0b:c8:5a:58:bb:8c:d4:f6:98:b6:2e: 8c:79:23:81:08:70:4a:84:31:d2:02:4a:6c:75:b8: ad:72:d0:b1:ac:71:0c:84:11:16:10:89:c2:2d:9a: e5:5b:31:ba:43:eb:94:e3:48:c7:dc:c5:a5:ed:b4: ab:2f:59:c1:97:12:07:b4:ec:4b:a6:3c:64:a7:da: 35:bc:dc:a6:24:b6:d2:df:b4:08:17:12:d4:cf:6f: 89:6a:ca:af:e7:0e:25:69:31:69:6c:21:64:20:08: 2c:41:c5:d4:55:05:5e:a9:68:cb:f9:e6:14:de:2e: 82:57:70:bc:4c:f2:4d:ee:27:41:fd:b5:75:d3:b7: 7d:23:21:07:b7:81:14:8f:65:f3:36:d6:6b:8d:52: 7f:d2:43:6a:9e:db:9e:b0:aa:b6:45:3b:da:6c:23: ee:7c:ea:60:12:3b:8d:b6:b7:47:52:3d:c9:19:d3: 96:c7:94:85:0f:6a:36:c2:02:29:59:0c:9f:c2:43: 4f:0f:8b:e7:09:a5:e3:19:40:a8:b4:95:2c:d4:f9: 31:73:18:5c:9b:c4:7d:af:82:81:f2:2d:4d:d5:46: 60:6a:40:57:ba:03:fa:dc:c8:49:9d:cf:c1:98:51: 2f:d0:ec:8b:5b:3b:e6:7a:1d:05:02:ba:42:df:fa: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:51:5F:33:16:20:FB:1E:46:4B:1E:3A:80:FF:5A:F3:CC:49:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ef:6c:cf:4a:7d:09:25:5c:28:78:df:e3:9d:31:8e:69:86: c5:7f:58:55:7f:b4:b6:88:5e:43:d6:93:1b:12:9c:07:15:31: 11:43:5e:01:4c:cf:5b:50:ff:27:e5:e1:2d:e8:93:45:41:9c: 85:12:a1:ec:92:ba:c6:a5:69:26:b0:d9:fd:c7:34:95:60:9c: 89:fe:b7:ae:67:b2:33:65:34:4e:2d:0b:cd:6b:4c:cd:72:18: 49:c6:82:91:9c:1a:50:ce:37:a0:dd:68:18:5e:a0:30:ba:07: 83:71:00:ea:4d:a3:0c:d0:54:02:b1:0f:b5:60:2e:ee:1a:b8: 38:e8:a7:14:39:33:4c:8e:f7:6b:0e:c0:53:5e:de:9b:23:8b: 9d:91:a4:0a:76:20:2f:8c:e3:11:b8:55:cc:bf:b7:d0:b0:10: 3d:63:0b:99:f5:a1:f7:1c:4f:0f:57:e9:07:f1:64:fe:e5:46: 24:27:15:a5:a4:c2:e9:91:6e:08:10:e8:25:31:85:a3:0c:0e: d7:a9:93:e4:aa:14:bf:29:44:77:c9:3d:38:f0:d9:a2:00:aa: 15:57:ef:a9:9a:be:ba:cd:64:d5:98:0f:20:74:d2:1a:c8:f1: c9:19:98:74:61:ab:9a:2a:31:2a:69:31:3d:04:d8:95:a3:a3: 48:be:d1:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjHrwLVwJldsbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OGMwNWJjMDUtYjZhMi00YjdkLWI3NjAtYTcxZDgzYTRmMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNfmC8haWLuM1PaYti6MeSOBCHBKhDHSAkps dbitctCxrHEMhBEWEInCLZrlWzG6Q+uU40jH3MWl7bSrL1nBlxIHtOxLpjxkp9o1 vNymJLbS37QIFxLUz2+Jasqv5w4laTFpbCFkIAgsQcXUVQVeqWjL+eYU3i6CV3C8 TPJN7idB/bV107d9IyEHt4EUj2XzNtZrjVJ/0kNqntuesKq2RTvabCPufOpgEjuN trdHUj3JGdOWx5SFD2o2wgIpWQyfwkNPD4vnCaXjGUCotJUs1Pkxcxhcm8R9r4KB 8i1N1UZgakBXugP63MhJnc/BmFEv0OyLWzvmeh0FArpC3/o0swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNoUV8zFiD7HkZLHjqA/1rzzEkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdmYTY0ZWItYzliNy0z NzZlLThiMmEtMmNlMTZlOWQ1YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDvbM9KfQklXCh43+OdMY5phsV/WFV/tLaIXkPWkxsSnAcVMRFD XgFMz1tQ/yfl4S3ok0VBnIUSoeySusalaSaw2f3HNJVgnIn+t65nsjNlNE4tC81r TM1yGEnGgpGcGlDON6DdaBheoDC6B4NxAOpNowzQVAKxD7VgLu4auDjopxQ5M0yO 92sOwFNe3psji52RpAp2IC+M4xG4Vcy/t9CwED1jC5n1ofccTw9X6QfxZP7lRiQn FaWkwumRbggQ6CUxhaMMDtepk+SqFL8pRHfJPTjw2aIAqhVX76mavrrNZNWYDyB0 0hrI8ckZmHRhq5oqMSppMT0E2JWjo0i+0Z0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:33 2025 by rpki-client