$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa File: fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa (raw, json) Hash identifier: fe9aC1j10jL6nktbI35ZobL1pFEl3LouVWo2gBCETa8= Subject key identifier: D0:C1:D7:42:20:54:68:88:33:54:35:D9:8A:A4:A4:D2:55:0E:89:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146367356B5BC905EDB5D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36626 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:36:73:56:b5:bc:90:5e:db:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=769906ea-75da-43ae-99a8-b18c4f569145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:a3:fb:d0:8d:0c:3d:11:7b:b8:d0:cf:3f: e8:9e:1d:2e:9c:c1:60:52:2e:c4:bc:96:16:cf:31: ff:3e:d8:64:87:ac:63:86:c5:13:4f:e1:cd:e9:44: 2b:cc:f7:5c:c2:ba:da:a1:a3:e8:50:14:67:a8:9d: 52:9c:79:18:ed:01:97:4c:6b:1c:6e:0b:73:27:11: d0:8f:01:61:59:d6:8f:39:1f:8c:98:4c:f1:c9:aa: d1:93:cf:0b:2a:fc:e4:a8:30:1a:db:6c:f9:a0:a6: 37:73:05:19:6f:1a:b3:f3:d6:3d:90:e1:8f:22:e2: 2a:8e:48:6e:1b:a2:2e:57:80:d2:37:8d:75:43:dc: 65:9a:29:e5:a2:b0:35:81:41:3e:f8:86:60:6a:6e: bd:2a:ec:3a:5c:4b:2f:fa:cc:c7:fd:6e:fe:93:f4: cb:1e:04:09:fa:c6:ac:46:cf:ea:fa:8f:86:f7:29: ae:21:0f:eb:03:12:b9:f5:28:50:63:90:5a:d2:6a: 40:25:29:dc:00:d6:67:77:17:11:a3:a1:ec:0b:ee: 8d:f9:0c:3f:9a:4b:8c:bb:e5:76:99:33:7d:b8:d5: fe:e8:49:64:50:ca:43:d3:4f:80:e3:13:08:79:b3: ac:a4:96:17:3e:dc:9a:25:29:76:6b:37:f0:44:b9: eb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C1:D7:42:20:54:68:88:33:54:35:D9:8A:A4:A4:D2:55:0E:89:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2c:38:b4:46:4b:67:49:ab:30:a6:3e:2a:ba:ab:48:bf:84: ac:13:e5:ff:74:64:a0:dc:51:a2:46:6a:ef:49:03:d9:49:aa: 85:9c:df:a8:81:97:61:e5:42:1e:72:92:ee:76:d8:e7:67:65: e1:52:28:d7:26:94:c8:26:1e:a8:97:62:e0:37:0c:8e:57:08: 87:28:c3:30:c6:a6:44:83:dd:de:a7:0b:8d:7c:4b:b5:f3:79: 92:c1:97:a1:ec:98:f2:66:ec:ab:b5:7d:d7:65:75:d8:1c:7d: 8c:7a:7d:c6:ed:61:ca:74:d5:fd:7b:9b:95:7f:5f:a6:51:c3: 89:73:31:e5:09:e8:76:41:b6:01:27:e4:ad:e0:1c:59:b4:63: 44:f8:8a:2b:49:d5:35:14:d2:14:aa:34:d5:77:9a:df:c4:1e: 47:2d:5d:26:b6:2c:68:65:76:97:33:22:8b:ca:99:9d:a8:dc: 0b:96:b4:c4:ac:96:3d:6b:7d:0c:20:9a:17:f2:a9:5a:9d:aa: f8:6e:26:72:2e:c6:21:73:0e:3c:74:7e:3d:84:b4:2e:d5:4f: 6d:ef:83:19:6a:01:ad:b5:17:f6:42:3b:2b:1d:f0:3d:b0:6b: 15:6d:09:2e:f1:39:7b:4f:96:06:bd:88:48:43:47:5f:be:dc: d6:07:31:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjZzVrW8kF7bXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzY5OTA2ZWEtNzVkYS00M2FlLTk5YTgtYjE4YzRmNTY5MTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKCj+9CNDD0Re7jQzz/onh0unMFgUi7EvJYW zzH/Pthkh6xjhsUTT+HN6UQrzPdcwrraoaPoUBRnqJ1SnHkY7QGXTGscbgtzJxHQ jwFhWdaPOR+MmEzxyarRk88LKvzkqDAa22z5oKY3cwUZbxqz89Y9kOGPIuIqjkhu G6IuV4DSN411Q9xlminlorA1gUE++IZgam69Kuw6XEsv+szH/W7+k/TLHgQJ+sas Rs/q+o+G9ymuIQ/rAxK59ShQY5Ba0mpAJSncANZndxcRo6HsC+6N+Qw/mkuMu+V2 mTN9uNX+6ElkUMpD00+A4xMIebOspJYXPtyaJSl2azfwRLnrDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDB10IgVGiIM1Q12YqkpNJVDokvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmNkNGUzYzItOTI2Ny0z MzUzLWIyMzQtZDAxOGMzYzVmNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMsOLRGS2dJqzCmPiq6q0i/hKwT5f90ZKDcUaJGau9JA9lJqoWc 36iBl2HlQh5yku522OdnZeFSKNcmlMgmHqiXYuA3DI5XCIcowzDGpkSD3d6nC418 S7XzeZLBl6HsmPJm7Ku1fddlddgcfYx6fcbtYcp01f17m5V/X6ZRw4lzMeUJ6HZB tgEn5K3gHFm0Y0T4iitJ1TUU0hSqNNV3mt/EHkctXSa2LGhldpczIovKmZ2o3AuW tMSslj1rfQwgmhfyqVqdqvhuJnIuxiFzDjx0fj2EtC7VT23vgxlqAa21F/ZCOysd 8D2waxVtCS7xOXtPlga9iEhDR1++3NYHMWI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:49 2025 by rpki-client