$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa File: e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa (raw, json) Hash identifier: 3aCvQ7OQSU44w+arKLhKMRZiJUjDGwzjheQdPwXh8Zs= Subject key identifier: E6:60:19:1C:76:8F:0C:B2:1C:5E:85:AB:05:4A:D4:D3:1D:D9:62:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825E9D154E77101E75CAB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396562 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e9:d1:54:e7:71:01:e7:5c:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=573c7c40-95f8-4e7a-843d-3832c2542ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:4d:ec:4c:e8:09:4e:f9:83:c6:0f:d6:19: fd:69:8b:1e:c3:48:ef:1c:60:ec:37:b8:2c:3a:5e: 70:44:73:52:81:06:c8:c5:19:75:61:72:4c:79:79: 33:66:5d:ea:4f:2b:a1:51:ae:50:b0:fa:1b:e8:0e: 59:20:6b:d8:14:97:71:d8:90:b2:e2:63:2d:1c:93: ec:e1:43:4d:6b:03:fe:d7:6f:78:ad:d9:1e:ee:76: 16:62:a8:3c:13:6d:39:fd:b8:e0:c9:9b:0c:e9:c5: 9b:56:34:c6:00:b1:a4:07:73:b1:6b:c8:fc:cf:49: 5d:08:fa:0a:34:64:e6:82:93:6b:45:e3:3c:fc:25: 43:b3:16:97:30:76:2c:83:08:be:c9:0d:95:48:f0: 1f:28:3c:88:48:05:bb:89:3d:bb:2b:9d:0b:06:09: d9:db:63:51:5b:7d:92:52:5d:8d:ea:db:6c:a6:a5: b7:da:13:68:6b:8f:5c:52:94:6d:4e:05:7a:9a:b1: 10:6e:10:86:74:c6:a7:82:67:f1:92:f5:cd:c2:45: 9f:53:b8:6c:bb:57:32:0f:a3:b8:d7:20:b0:9e:41: 8d:58:84:a6:9d:e2:c9:b6:46:62:67:6b:15:47:10: c8:8c:39:32:54:07:21:ff:e9:3d:c8:73:9f:66:29: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:60:19:1C:76:8F:0C:B2:1C:5E:85:AB:05:4A:D4:D3:1D:D9:62:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:14:8c:bc:5e:ea:0d:82:6b:87:33:2f:60:5a:f9:8d:93:fd: 65:10:09:9b:f4:03:ed:d7:61:7a:ac:58:f9:6d:42:3a:52:6e: 99:1e:23:dd:ea:c2:35:23:a0:16:b1:8e:78:df:33:97:c6:32: b2:2b:25:4e:6c:a3:ff:91:c2:ff:2d:14:80:d8:93:f0:9f:09: f1:f0:23:77:1e:79:80:f1:44:49:9c:70:69:74:6a:f2:d2:84: 91:93:4f:4d:1e:fe:3f:07:b0:5c:82:58:21:b0:74:12:8f:2a: d8:c0:2e:47:5d:43:d5:49:0e:c9:30:b6:ee:76:e5:d3:f1:4c: a5:eb:6f:26:df:34:97:a0:f3:99:cd:ca:af:d4:e0:16:2c:1c: 47:c9:42:4c:85:87:59:ed:e8:50:61:40:64:9a:49:f4:a5:b5: 66:e8:53:09:36:9e:77:e7:85:af:5c:e1:67:c3:96:32:88:14: 9e:7b:23:fd:72:55:1f:77:99:4c:c3:ef:60:80:b4:58:39:6c: da:87:08:65:08:a2:d7:29:dd:52:86:02:99:a6:3e:62:8a:33: 90:2f:79:5f:b7:d5:0c:6b:38:5e:93:e7:fb:a3:fa:97:5e:c6: 18:92:36:65:ee:be:58:d6:93:e9:21:0f:9d:c9:3c:02:01:9b: 7f:15:1f:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJenRVOdxAedcq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTczYzdjNDAtOTVmOC00ZTdhLTg0M2QtMzgzMmMyNTQyZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin9N7EzoCU75g8YP1hn9aYsew0jvHGDsN7gs Ol5wRHNSgQbIxRl1YXJMeXkzZl3qTyuhUa5QsPob6A5ZIGvYFJdx2JCy4mMtHJPs 4UNNawP+1294rdke7nYWYqg8E205/bjgyZsM6cWbVjTGALGkB3Oxa8j8z0ldCPoK NGTmgpNrReM8/CVDsxaXMHYsgwi+yQ2VSPAfKDyISAW7iT27K50LBgnZ22NRW32S Ul2N6ttspqW32hNoa49cUpRtTgV6mrEQbhCGdMangmfxkvXNwkWfU7hsu1cyD6O4 1yCwnkGNWISmneLJtkZiZ2sVRxDIjDkyVAch/+k9yHOfZin1RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOZgGRx2jwyyHF6FqwVK1NMd2WL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTE1YmQwYmYtOTBlMS0z MDcxLWFhZWUtNjlmMTBiMjBlYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE4UjLxe6g2Ca4czL2Ba+Y2T/WUQCZv0A+3XYXqsWPltQjpSbpke I93qwjUjoBaxjnjfM5fGMrIrJU5so/+Rwv8tFIDYk/CfCfHwI3ceeYDxREmccGl0 avLShJGTT00e/j8HsFyCWCGwdBKPKtjALkddQ9VJDskwtu525dPxTKXrbybfNJeg 85nNyq/U4BYsHEfJQkyFh1nt6FBhQGSaSfSltWboUwk2nnfnha9c4WfDljKIFJ57 I/1yVR93mUzD72CAtFg5bNqHCGUIotcp3VKGApmmPmKKM5AveV+31QxrOF6T5/uj +pdexhiSNmXuvljWk+khD53JPAIBm38VH/A= -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:07 2025 by rpki-client