$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa File: fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa (raw, json) Hash identifier: 4d34b1KvLn1dwMbc8FfE7puQVQwoTGLhzKSdv1drr6o= Subject key identifier: 53:FD:29:AA:96:43:34:3B:CE:BB:FD:84:26:DC:20:3B:A1:F9:5A:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F1D1ED51C4EF0A4FA580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396590 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f1:d1:ed:51:c4:ef:0a:4f:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=98291d16-00ad-4e65-b521-4e4ae82b86d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:67:64:9a:c1:9b:78:01:88:b8:d5:a6:54:1c: 81:df:a5:12:5d:13:29:bd:6b:c0:ff:da:db:da:57: ed:2d:fb:77:d0:9b:45:ae:90:fa:8f:89:27:02:29: 9f:72:66:5a:8a:a5:cd:85:d4:96:64:2b:19:98:b6: f8:c2:1f:6c:83:9b:f3:8d:88:69:a4:6c:92:75:2a: 26:e9:f2:73:a8:fd:6d:6f:e9:0c:27:a4:c0:f9:44: de:2c:cc:52:4a:44:16:90:4d:4f:6b:c3:97:f3:3c: 0d:de:f1:81:3f:d5:e0:04:50:30:59:fb:6c:52:f2: fb:2d:d4:22:af:e8:45:2d:e3:f1:78:25:2d:ec:d5: a6:a7:6f:cb:44:b5:83:02:6a:94:1c:bc:9e:20:7b: 97:20:19:33:03:a1:88:8f:7d:da:e1:b9:ef:ff:a2: 29:7e:1c:4d:7a:97:cc:30:18:e9:43:3a:4d:66:00: ef:97:fa:4e:1a:51:10:47:e3:70:d8:7b:5f:3d:3e: 49:7f:45:4c:69:71:5f:70:ae:d1:5c:ed:55:71:76: 10:90:72:23:19:cd:17:27:3c:37:8c:27:9c:2f:67: c3:cb:7a:6b:c1:9d:55:3e:78:c3:45:61:94:3b:94: 69:c6:2f:d5:30:d4:d5:08:5a:74:ce:d8:43:28:8c: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FD:29:AA:96:43:34:3B:CE:BB:FD:84:26:DC:20:3B:A1:F9:5A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5d:5a:5f:ca:bd:5d:30:8c:7a:f2:5b:62:13:79:ac:f1:a2: b3:e6:ba:a1:2a:b5:ad:58:b2:17:95:5c:2e:03:8e:b7:a6:1a: 11:34:93:39:de:c6:c2:6c:7b:57:8b:f8:ff:7f:21:19:93:83: 83:08:16:fc:ec:39:5c:98:75:e1:c2:d4:cc:15:4e:71:8a:bc: 83:49:69:12:cb:6d:d6:b1:40:1f:8d:42:95:25:35:03:f7:82: cf:2c:27:c9:86:71:26:5f:ef:cc:a1:03:5e:0e:35:c8:74:11: b7:f5:94:6e:9e:b5:49:da:63:b6:1f:dc:54:5f:26:8e:60:16: 6a:11:81:76:fc:0d:06:83:ae:7c:a8:db:82:6d:5a:c3:82:9c: 17:78:74:b0:40:c0:46:1c:fc:d4:dc:6f:ab:75:ee:e6:43:f9: 0c:a2:50:dd:c1:2d:a9:a2:82:d1:b9:e8:7b:35:fe:38:a4:48: 9b:10:91:69:52:a5:9e:1b:27:b0:e0:c4:a0:15:76:97:fe:64: 6c:76:7f:b2:91:8c:62:11:60:ef:54:21:2c:4c:47:7e:90:4e: f8:9f:48:f1:a1:49:62:f8:6e:52:50:e3:87:bc:f3:bf:46:48: d4:cb:07:12:7a:95:2c:f6:fd:be:26:b3:f7:26:ed:89:2f:72: 22:d2:fe:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfHR7VHE7wpPpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OTgyOTFkMTYtMDBhZC00ZTY1LWI1MjEtNGU0YWU4MmI4NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WdkmsGbeAGIuNWmVByB36USXRMpvWvA/9rb 2lftLft30JtFrpD6j4knAimfcmZaiqXNhdSWZCsZmLb4wh9sg5vzjYhppGySdSom 6fJzqP1tb+kMJ6TA+UTeLMxSSkQWkE1Pa8OX8zwN3vGBP9XgBFAwWftsUvL7LdQi r+hFLePxeCUt7NWmp2/LRLWDAmqUHLyeIHuXIBkzA6GIj33a4bnv/6IpfhxNepfM MBjpQzpNZgDvl/pOGlEQR+Nw2HtfPT5Jf0VMaXFfcK7RXO1VcXYQkHIjGc0XJzw3 jCecL2fDy3prwZ1VPnjDRWGUO5Rpxi/VMNTVCFp0zthDKIxGQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFP9KaqWQzQ7zrv9hCbcIDuh+VpKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJkZjQ1M2EtNWE4Ny0z YmQxLWIzOTAtYjczMjgwZGY0ZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFddWl/KvV0wjHryW2ITeazxorPmuqEqta1YsheVXC4DjremGhE0 kznexsJse1eL+P9/IRmTg4MIFvzsOVyYdeHC1MwVTnGKvINJaRLLbdaxQB+NQpUl NQP3gs8sJ8mGcSZf78yhA14ONch0Ebf1lG6etUnaY7Yf3FRfJo5gFmoRgXb8DQaD rnyo24JtWsOCnBd4dLBAwEYc/NTcb6t17uZD+QyiUN3BLamigtG56Hs1/jikSJsQ kWlSpZ4bJ7DgxKAVdpf+ZGx2f7KRjGIRYO9UISxMR36QTvifSPGhSWL4blJQ44e8 879GSNTLBxJ6lSz2/b4ms/cm7YkvciLS/iA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:09 2025 by rpki-client