$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa File: ff101ae5-f103-3f63-b004-90d2c700d744.roa (raw, json) Hash identifier: Q+CDkCJfrl/VJXx27UV645dD0gwFF14AkAKcvWZUCk4= Subject key identifier: 26:F3:5A:D7:CF:C4:0F:48:EE:99:46:92:D7:20:9F:26:6E:74:94:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F4CFEDE7BFD413E08A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 40717 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f4:cf:ed:e7:bf:d4:13:e0:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5dfee042-84bf-4fd1-ad35-6770440bf7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:6e:4d:69:66:26:51:9a:02:3c:94:53:6f: b2:fd:dd:54:28:d3:ac:2b:fe:46:38:73:a8:c7:99: b3:d4:f2:f1:b0:d2:60:41:f6:b0:d5:48:50:28:2a: 10:de:6c:de:0c:e0:33:dd:54:0a:fe:15:82:42:13: 4d:48:48:da:a0:e1:11:2e:e9:b3:3c:c1:ad:79:22: 69:81:10:aa:5d:fb:ac:f1:e6:bc:9f:28:26:4e:72: 67:8f:13:1e:3e:0d:e5:27:92:f9:2d:dc:2d:cd:ab: 64:05:b2:4f:6b:71:aa:78:76:77:24:0e:56:bb:9f: aa:45:3f:1c:43:6b:ee:0d:40:f9:20:fc:76:66:25: 37:44:8b:d2:94:bd:ba:3c:7f:e3:72:23:66:b3:ce: a9:4e:e8:39:b8:1a:e9:93:57:da:aa:fe:7a:6f:36: c6:c8:34:09:c1:fe:a3:55:4d:ab:b0:89:31:bb:26: a6:70:e3:c4:11:2f:de:e1:7d:76:b8:54:af:60:34: 7f:a6:6d:c8:cb:16:84:0e:ae:f7:03:65:3a:54:64: 87:8a:58:9a:ad:99:1f:29:17:92:5e:61:c5:24:f8: 54:b2:d0:8f:e8:96:24:4e:8f:74:63:f8:b4:e7:e8: bf:ca:7f:5c:c9:f8:c1:c3:13:20:67:a1:24:9b:89: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F3:5A:D7:CF:C4:0F:48:EE:99:46:92:D7:20:9F:26:6E:74:94:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cd:d2:1f:af:97:8d:d1:c8:08:ac:13:7d:41:74:0f:b1:a2: f2:a0:2f:d9:cc:55:95:22:52:78:d0:ef:92:96:e9:f2:bd:d0: 8a:e1:7a:06:b3:e4:3d:d3:34:35:00:44:c7:c4:a6:cb:20:4c: 76:f0:de:3b:e8:51:f4:12:54:c8:28:7c:b9:d6:a8:b1:6d:35: fa:74:a3:25:68:8d:2f:e0:f1:8f:39:11:b7:2f:cc:79:7b:b4: 0c:a4:cf:c4:98:d5:d0:4e:c0:7b:de:c2:6e:e5:3e:36:28:36: 67:ab:a9:29:88:d5:32:b1:5e:8f:d3:9e:93:80:94:b8:14:43: 59:0f:ba:98:50:ef:23:cd:b6:f7:6d:c0:07:a3:6b:21:ba:01: 32:c4:0c:dc:5d:a8:7a:5c:23:f9:f3:c2:9b:ef:d9:5e:af:c8: d7:c0:13:44:26:ee:e2:73:f2:01:79:21:88:03:44:ea:dc:ff: 6f:71:53:c6:cd:3b:b1:d5:72:1a:8f:fb:13:28:bd:4d:92:a0: fd:80:3d:16:f0:e4:db:b7:d4:fd:ec:8c:59:1e:89:a8:47:58: 27:e6:04:b6:f2:97:af:86:a7:3b:82:75:da:0b:cc:aa:48:75: dd:b8:3f:cf:dc:c7:0c:a0:12:ec:42:39:e3:eb:a6:dc:62:11: 5d:c5:3b:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfTP7ee/1BPgigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NWRmZWUwNDItODRiZi00ZmQxLWFkMzUtNjc3MDQ0MGJmN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7xuTWlmJlGaAjyUU2+y/d1UKNOsK/5GOHOo x5mz1PLxsNJgQfaw1UhQKCoQ3mzeDOAz3VQK/hWCQhNNSEjaoOERLumzPMGteSJp gRCqXfus8ea8nygmTnJnjxMePg3lJ5L5LdwtzatkBbJPa3GqeHZ3JA5Wu5+qRT8c Q2vuDUD5IPx2ZiU3RIvSlL26PH/jciNms86pTug5uBrpk1faqv56bzbGyDQJwf6j VU2rsIkxuyamcOPEES/e4X12uFSvYDR/pm3IyxaEDq73A2U6VGSHiliarZkfKReS XmHFJPhUstCP6JYkTo90Y/i05+i/yn9cyfjBwxMgZ6Ekm4lt6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCbzWtfPxA9I7plGktcgnyZudJTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmYxMDFhZTUtZjEwMy0z ZjYzLWIwMDQtOTBkMmM3MDBkNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7N0h+vl43RyAisE31BdA+xovKgL9nMVZUiUnjQ75KW6fK90Irh egaz5D3TNDUARMfEpssgTHbw3jvoUfQSVMgofLnWqLFtNfp0oyVojS/g8Y85Ebcv zHl7tAykz8SY1dBOwHvewm7lPjYoNmerqSmI1TKxXo/TnpOAlLgUQ1kPuphQ7yPN tvdtwAejayG6ATLEDNxdqHpcI/nzwpvv2V6vyNfAE0Qm7uJz8gF5IYgDROrc/29x U8bNO7HVchqP+xMovU2SoP2APRbw5Nu31P3sjFkeiahHWCfmBLbyl6+GpzuCddoL zKpIdd24P8/cxwygEuxCOePrptxiEV3FO2w= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:20 2025 by rpki-client