$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaced0e-3ca0-32f3-9379-fb99471e1f66.roa File: ffaced0e-3ca0-32f3-9379-fb99471e1f66.roa (raw, json) Hash identifier: 1G7ebehb4lqa+u6zvLV3fE2ttwaLsHUBnVCgwmIa8B0= Subject key identifier: 15:00:E2:40:D6:FF:18:FF:26:89:EA:8B:3C:A2:B3:21:31:6F:73:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463183B02D1517F81AAD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaced0e-3ca0-32f3-9379-fb99471e1f66.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396577 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:31:83:b0:2d:15:17:f8:1a:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=54e3d261-bd58-455d-a8d5-734aa4b6d98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:f2:c2:f6:a5:25:51:bd:9f:29:12:0c:be: b3:6b:16:7a:bb:81:01:69:cb:58:d6:c0:f0:81:9e: 1f:d1:b4:94:49:93:6c:62:ae:85:f6:06:01:63:5a: dc:9d:ec:e1:78:d5:b0:5d:d8:6e:89:fc:a3:8e:8b: bd:ee:24:c8:ae:c6:c5:b0:7d:50:b0:bc:84:5d:6c: 67:bd:ad:ef:e5:31:b5:52:e4:31:ff:0b:fe:55:37: 27:a6:81:d1:54:01:c4:26:79:9e:37:62:3c:9b:09: 0c:55:27:48:50:d7:8e:76:85:7c:37:cf:40:e6:a7: de:cd:7f:ee:3b:b7:74:36:14:a9:c9:4b:d2:fc:2b: 0b:2c:42:8c:a9:19:8f:cf:4c:ad:ed:9d:c1:ea:bb: 9e:7d:42:4a:9c:a8:3c:70:36:ff:d3:a3:f1:a1:bb: 0f:ea:14:2a:f0:f7:eb:05:12:ca:95:21:e5:f2:c9: d9:32:dc:2b:e2:1d:91:2e:65:93:8e:3f:d5:ae:f4: 0f:01:1b:91:b0:52:27:07:6c:d3:e7:ae:0b:fc:1a: a1:cd:10:84:e4:44:b0:65:ee:08:5c:bd:ca:06:ee: 4d:71:70:8d:db:1d:d1:97:27:74:4d:14:74:8a:41: 1c:bc:09:2e:18:b5:19:88:bc:cf:c8:d1:dd:8f:37: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:00:E2:40:D6:FF:18:FF:26:89:EA:8B:3C:A2:B3:21:31:6F:73:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaced0e-3ca0-32f3-9379-fb99471e1f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d3:0a:36:21:9f:f0:7b:a1:65:c5:98:18:8d:79:f8:35:4a: fc:55:7e:26:cf:11:44:0e:5f:ad:a1:bf:bf:c2:5e:10:fd:11: b0:d1:f4:5d:54:47:d5:35:28:b8:67:9c:81:c9:9e:bb:87:e9: 0b:43:70:00:0c:84:42:9c:5c:cf:86:54:58:ac:e7:54:f4:d7: 4d:54:94:b0:d6:3d:e4:88:cc:02:6a:2a:8e:4b:6e:8a:04:4a: 19:47:a7:03:4c:fe:0b:4b:7e:9e:b7:24:9c:a4:ed:70:72:ad: 87:a9:65:f0:7e:77:01:87:48:2b:46:45:be:94:1a:ae:32:8f: 11:96:95:ae:16:8a:1d:9f:a0:87:ef:5b:fb:06:c8:4e:6d:33: e8:c2:d8:44:0c:af:2a:5f:83:41:0c:65:4b:5b:54:20:72:83: d9:b4:e3:3b:28:78:8b:02:a9:4a:33:13:d8:f0:9d:a6:0c:63: e5:3d:38:ca:88:f3:b4:c7:9e:25:2c:3a:34:0e:15:52:cf:8c: 36:d7:73:1a:2a:6d:fb:54:de:b2:78:10:df:95:0f:27:e7:d0: 6b:64:d4:15:5f:eb:91:6e:f5:d7:b5:fe:8a:fc:95:c3:e5:4c: 6f:dd:2d:a2:9f:56:fb:59:9b:77:a0:90:7e:85:5c:dc:04:84: 5e:d6:65:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjGDsC0VF/garUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NTRlM2QyNjEtYmQ1OC00NTVkLWE4ZDUtNzM0YWE0YjZkOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRHywvalJVG9nykSDL6zaxZ6u4EBactY1sDw gZ4f0bSUSZNsYq6F9gYBY1rcnezheNWwXdhuifyjjou97iTIrsbFsH1QsLyEXWxn va3v5TG1UuQx/wv+VTcnpoHRVAHEJnmeN2I8mwkMVSdIUNeOdoV8N89A5qfezX/u O7d0NhSpyUvS/CsLLEKMqRmPz0yt7Z3B6ruefUJKnKg8cDb/06PxobsP6hQq8Pfr BRLKlSHl8snZMtwr4h2RLmWTjj/VrvQPARuRsFInB2zT564L/BqhzRCE5ESwZe4I XL3KBu5NcXCN2x3Rlyd0TRR0ikEcvAkuGLUZiLzPyNHdjzcPWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBUA4kDW/xj/JonqizyisyExb3P7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZhY2VkMGUtM2NhMC0z MmYzLTkzNzktZmI5OTQ3MWUxZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/TCjYhn/B7oWXFmBiNefg1SvxVfibPEUQOX62hv7/CXhD9EbDR 9F1UR9U1KLhnnIHJnruH6QtDcAAMhEKcXM+GVFis51T0101UlLDWPeSIzAJqKo5L booEShlHpwNM/gtLfp63JJyk7XByrYepZfB+dwGHSCtGRb6UGq4yjxGWla4Wih2f oIfvW/sGyE5tM+jC2EQMrypfg0EMZUtbVCByg9m04zsoeIsCqUozE9jwnaYMY+U9 OMqI87THniUsOjQOFVLPjDbXcxoqbftU3rJ4EN+VDyfn0Gtk1BVf65Fu9de1/or8 lcPlTG/dLaKfVvtZm3egkH6FXNwEhF7WZTo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:43 2025 by rpki-client