$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa File: fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa (raw, json) Hash identifier: nIbo726K3ieSN16/0MM0T9Ejvdw8in8ke2FaTwcYks4= Subject key identifier: E9:81:B2:97:5D:19:D1:B9:21:95:FE:51:CB:E4:19:AC:A6:85:98:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F37948D9EF761AA1C228 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396604 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f3:79:48:d9:ef:76:1a:a1:c2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=f2ff55a6-00bc-4c4c-999e-58d05c9fc9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d0:e6:52:c4:56:f4:5a:bc:d4:9e:e3:fd:0c: ee:5a:ad:ea:f2:a6:41:34:a2:e3:c7:02:da:40:43: 50:1a:ef:99:4e:c9:07:da:f1:75:e4:76:7b:3e:a1: 7f:f8:a1:b9:47:15:5f:b0:ef:18:bc:37:6c:f5:90: 17:f6:5a:55:80:27:8f:b0:8a:19:4c:39:91:f9:9a: 5e:48:60:8c:01:44:6a:93:bf:d7:25:2e:05:71:bf: 73:73:ad:5d:25:67:e8:7d:47:ad:ed:39:c8:67:16: e2:b6:4d:51:a4:f3:78:9b:d6:2f:7f:14:fe:ab:68: 9b:cf:c5:19:7e:cc:7f:de:0b:69:1b:69:c6:09:3f: e5:90:f8:fc:76:2d:a9:e9:55:23:fd:43:4e:1b:c5: 80:e3:2b:ec:8a:74:a7:18:2a:0a:2e:56:dc:86:8a: 48:89:99:a8:1a:6e:98:cc:2f:75:96:8d:f3:bc:7b: 54:41:9f:42:17:40:7a:09:96:d2:c7:a5:2e:c7:cf: 32:ae:3a:9c:08:9b:2e:b8:12:33:34:1b:65:7d:d4: bc:62:65:fe:a6:a2:c6:69:d9:39:e5:4d:6e:d6:09: 58:78:ba:44:e6:a0:f2:8e:26:09:b2:55:8e:55:f1: a3:86:85:c2:b5:5e:05:6b:4d:b3:89:55:c8:0b:ec: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:81:B2:97:5D:19:D1:B9:21:95:FE:51:CB:E4:19:AC:A6:85:98:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7e:a7:f3:65:87:66:b6:66:a2:51:9e:d6:f7:15:24:5f:d8: fa:6b:d1:ab:2f:0d:f3:c5:68:be:e4:11:cf:1b:5e:3c:9d:df: 46:d8:a5:6f:1c:e9:26:cd:10:c6:07:12:a5:63:b8:40:dc:54: e1:7e:70:95:76:19:a3:3e:81:c4:c0:e4:ca:d4:7b:3f:76:08: fd:54:93:c2:a7:7a:cc:80:aa:b6:ca:d6:5b:ca:0d:94:8b:c6: ee:c5:52:38:88:76:5b:af:82:23:1e:b2:01:1a:31:11:dc:4a: 2d:08:71:80:c0:16:6b:96:66:f5:4c:d9:ab:42:6a:46:fa:83: a6:be:34:4f:6c:ae:c1:00:b4:97:8e:d9:8b:c0:ff:0e:3a:79: 22:4f:0f:a9:c6:03:06:a1:6e:9d:db:5d:77:e1:05:0e:03:02: f2:e0:79:b1:19:8a:43:7a:ad:26:e4:5e:94:2f:ab:2b:09:c3: 6c:56:d5:68:e6:cc:3e:ff:8a:22:29:8e:31:3d:a4:fd:74:f4: 69:d5:55:88:91:eb:2b:4a:d6:36:ba:02:e7:68:a1:87:3d:27: e6:e0:ef:1b:32:da:0a:c8:4e:02:ee:8c:a9:28:d5:9d:91:c9: 85:78:45:cd:09:8a:61:94:27:22:d1:60:a1:aa:c8:64:b9:16: 00:da:37:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfN5SNnvdhqhwigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZjJmZjU1YTYtMDBiYy00YzRjLTk5OWUtNThkMDVjOWZjOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9DmUsRW9Fq81J7j/QzuWq3q8qZBNKLjxwLa QENQGu+ZTskH2vF15HZ7PqF/+KG5RxVfsO8YvDds9ZAX9lpVgCePsIoZTDmR+Zpe SGCMAURqk7/XJS4Fcb9zc61dJWfofUet7TnIZxbitk1RpPN4m9YvfxT+q2ibz8UZ fsx/3gtpG2nGCT/lkPj8di2p6VUj/UNOG8WA4yvsinSnGCoKLlbchopIiZmoGm6Y zC91lo3zvHtUQZ9CF0B6CZbSx6Uux88yrjqcCJsuuBIzNBtlfdS8YmX+pqLGadk5 5U1u1glYeLpE5qDyjiYJslWOVfGjhoXCtV4Fa02ziVXIC+yKVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmBspddGdG5IZX+UcvkGaymhZiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIwYWIzNjYtNGYxYS0z MTcxLWExZmUtYjFiNDQ4NGU1MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5+p/Nlh2a2ZqJRntb3FSRf2Ppr0asvDfPFaL7kEc8bXjyd30bY pW8c6SbNEMYHEqVjuEDcVOF+cJV2GaM+gcTA5MrUez92CP1Uk8KnesyAqrbK1lvK DZSLxu7FUjiIdluvgiMesgEaMRHcSi0IcYDAFmuWZvVM2atCakb6g6a+NE9srsEA tJeO2YvA/w46eSJPD6nGAwahbp3bXXfhBQ4DAvLgebEZikN6rSbkXpQvqysJw2xW 1WjmzD7/iiIpjjE9pP109GnVVYiR6ytK1ja6AudooYc9J+bg7xsy2grITgLujKko 1Z2RyYV4Rc0JimGUJyLRYKGqyGS5FgDaN9s= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:53 2025 by rpki-client