$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa File: fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa (raw, json) Hash identifier: oCNvSV/OiVcILi/6+HWjrZfujwEFU1KQ4XXXhWqJmt4= Subject key identifier: 9A:EF:4B:26:3F:A8:69:CF:23:6B:EE:49:07:C4:DD:E7:C1:80:CE:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EE26FF9CD7919D461780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397197 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ee:26:ff:9c:d7:91:9d:46:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5477a760-66e3-4c79-a853-183a5d86d2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:80:5b:b0:31:8d:19:f1:01:84:81:c8:99: 66:a2:54:6a:63:e7:55:93:e3:7f:15:1e:d0:f5:32: 53:87:32:2f:08:c3:e6:d9:13:69:a1:ea:d5:74:44: ff:48:6e:52:68:03:11:37:e6:d6:d8:48:3a:da:92: db:68:78:1a:25:cc:45:ce:8f:13:69:16:0e:38:f2: 9c:9e:ca:4b:5f:5f:ba:b1:bd:b9:bc:97:b3:dd:e4: 63:1c:30:1c:4a:85:70:f0:a9:b4:7a:13:89:1c:bd: 68:1c:42:d7:e6:7f:1a:6f:ca:81:f2:b6:ad:bb:93: 5d:d8:27:d7:9c:4e:2d:67:8d:18:36:26:57:ce:e8: 21:a1:9f:f4:af:26:0c:30:d6:6c:ce:ba:c3:ec:d8: b8:06:b7:f5:73:05:b5:d5:ea:e4:fa:1c:bc:a2:78: 92:64:03:4d:be:6a:3c:d0:6d:9a:c0:b8:2e:9c:f5: 28:00:6a:5a:8a:7e:98:d4:dd:13:b3:2d:66:db:86: 54:60:9e:27:40:e4:41:47:d3:dd:11:67:61:7d:47: ad:8b:51:4e:9b:ba:00:2d:2e:5e:2a:a0:b3:a5:9a: ee:c6:1e:10:b9:92:96:e5:91:9a:60:af:4f:69:0c: 42:f1:c5:d2:1b:36:27:42:72:a6:ce:5d:89:4f:7c: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:4B:26:3F:A8:69:CF:23:6B:EE:49:07:C4:DD:E7:C1:80:CE:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5f:f2:aa:45:8f:91:6d:48:04:f6:de:9e:5e:e7:28:2d:a8: a8:e6:61:c0:4d:03:aa:71:6a:a1:60:1c:7e:c6:b3:2c:9c:0c: a3:39:3a:37:38:64:5c:4b:2b:d9:2b:3e:bf:9e:e9:f9:f9:c7: 43:dc:14:52:9b:a4:37:83:eb:f2:1d:76:08:f4:2a:61:6e:a4: 7e:ed:0a:15:47:52:39:96:e7:00:ce:42:17:74:2a:92:31:d7: 85:40:8f:d9:fa:49:8a:a6:59:fc:3f:94:68:ae:6b:0a:28:37: 67:62:e2:00:1e:98:b4:4c:ca:4e:77:c0:70:c9:df:30:3f:d1: 61:0b:fe:9b:e0:f1:3b:ba:05:c8:ec:f1:6d:c8:8e:18:ad:a3: c2:15:0b:ba:7f:4f:78:68:65:0f:c4:e2:33:b7:c3:81:73:0a: 25:91:5f:fa:47:a7:26:2e:9f:9e:83:d3:37:f4:e7:01:b4:5b: dd:39:65:4c:fb:77:15:f7:99:c0:2c:64:d6:f8:bd:52:da:6b: d9:d7:b9:bc:69:43:3c:6c:81:5f:4c:5a:ee:40:5d:56:dc:81: 99:cb:4c:95:a6:2c:17:02:c8:1d:63:70:8a:e6:22:a2:06:63: 00:0a:0e:88:ff:73:03:2e:f7:91:e6:23:24:f1:cf:59:d0:6c: 3d:d4:8e:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe4m/5zXkZ1GF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTQ3N2E3NjAtNjZlMy00Yzc5LWE4NTMtMTgzYTVkODZkMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsryAW7AxjRnxAYSByJlmolRqY+dVk+N/FR7Q 9TJThzIvCMPm2RNpoerVdET/SG5SaAMRN+bW2Eg62pLbaHgaJcxFzo8TaRYOOPKc nspLX1+6sb25vJez3eRjHDAcSoVw8Km0ehOJHL1oHELX5n8ab8qB8ratu5Nd2CfX nE4tZ40YNiZXzughoZ/0ryYMMNZszrrD7Ni4Brf1cwW11erk+hy8oniSZANNvmo8 0G2awLgunPUoAGpain6Y1N0Tsy1m24ZUYJ4nQORBR9PdEWdhfUeti1FOm7oALS5e KqCzpZruxh4QuZKW5ZGaYK9PaQxC8cXSGzYnQnKmzl2JT3w19QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJrvSyY/qGnPI2vuSQfE3efBgM5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ0NGU0OWUtNDEwZS0z ZDcyLWEzNmItMDc0OGI1ZjZmYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB1f8qpFj5FtSAT23p5e5ygtqKjmYcBNA6pxaqFgHH7GsyycDKM5 Ojc4ZFxLK9krPr+e6fn5x0PcFFKbpDeD6/Iddgj0KmFupH7tChVHUjmW5wDOQhd0 KpIx14VAj9n6SYqmWfw/lGiuawooN2di4gAemLRMyk53wHDJ3zA/0WEL/pvg8Tu6 Bcjs8W3Ijhito8IVC7p/T3hoZQ/E4jO3w4FzCiWRX/pHpyYun56D0zf05wG0W905 ZUz7dxX3mcAsZNb4vVLaa9nXubxpQzxsgV9MWu5AXVbcgZnLTJWmLBcCyB1jcIrm IqIGYwAKDoj/cwMu95HmIyTxz1nQbD3Ujrk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:11 2025 by rpki-client