$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa File: fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa (raw, json) Hash identifier: dFdokXc8UDZ0hR5rfnkcvyWjote8AIvmELUGDvqe9eU= Subject key identifier: 92:7C:AE:B2:94:A9:63:9A:36:82:30:60:55:FE:74:8E:FC:CB:34:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463575A6E1BF457F8E4B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36623 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:75:a6:e1:bf:45:7f:8e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=8f1db46f-2e12-4084-967f-d7e1ba66aa68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:e8:1d:05:11:d5:cc:33:c0:b6:2f:bb:77: 7e:1e:f8:23:8d:92:56:06:cc:d5:5a:2e:df:89:22: 99:cb:57:51:eb:15:d9:45:11:68:b4:c0:54:db:dc: e9:53:8b:20:2a:05:60:3c:1a:b8:b9:d6:29:56:8b: e6:d9:9f:75:17:87:71:68:f0:2c:93:a8:00:53:1b: da:f5:1c:de:18:5c:0e:10:12:e8:b3:29:34:6f:b1: d1:4a:9c:46:5c:a6:44:14:be:6c:3d:2a:2b:90:c0: 2f:bd:2a:a3:f1:57:39:01:86:7e:6c:a9:3e:e5:eb: 01:73:e6:e6:86:8b:b1:54:e6:0f:af:50:96:5d:34: 7a:00:2b:f8:7f:d5:d2:b1:23:d6:49:58:c2:0f:10: a4:52:37:18:6e:03:60:b3:eb:04:94:ca:06:42:1d: a2:ff:9f:4f:a9:88:0a:1e:c9:ff:42:fe:f4:c6:f6: f5:57:57:00:de:92:f7:39:b1:ca:2b:84:8c:83:ee: cf:d8:8e:80:ce:62:90:7f:d2:c7:3b:3e:0a:a4:20: cd:8f:cf:cf:c5:cd:9c:e7:94:bf:92:86:79:0b:25: d0:32:0a:7d:da:10:05:eb:ad:43:dc:76:37:cf:97: ae:5c:ae:37:ab:35:5a:c1:f3:13:30:0f:3a:ee:65: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7C:AE:B2:94:A9:63:9A:36:82:30:60:55:FE:74:8E:FC:CB:34:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:12:14:25:07:3b:32:bb:88:fb:45:a9:1e:b0:d3:7a:92:b0: 3b:d4:4a:e8:aa:c8:a4:48:5e:15:59:2c:3e:5b:3f:5d:25:05: 73:a9:3d:7c:4b:6c:d1:dc:90:f0:0b:a6:de:5b:fe:ef:fd:5e: 31:e7:e6:aa:15:73:96:2b:12:25:a9:01:1b:5b:7b:e5:7d:05: 20:2e:98:20:cb:33:18:cd:8a:d7:0a:d2:60:b1:c2:c9:99:1b: b6:ac:c3:a9:29:97:31:99:01:ea:a1:cb:45:c3:55:9d:73:e1: 0f:ae:77:58:54:a6:81:05:4b:70:bf:e1:b0:7a:67:15:0a:68: 4c:64:82:6e:60:59:de:e9:0c:bb:01:0c:ae:84:0c:68:ac:03: 7b:fa:54:79:9a:de:74:1d:fb:54:ef:f8:48:9a:02:d6:87:6f: f5:f7:6c:6a:93:b4:ec:ec:4b:08:14:89:70:4f:b0:63:b4:9e: 5c:00:cd:3e:70:7e:22:d4:d6:ec:a6:1e:60:e4:92:f5:b4:d3: 59:63:e7:4c:fd:d4:d3:1b:9d:f6:24:27:e3:0b:49:fe:da:61: 23:5c:df:4c:66:c2:5f:53:73:93:1f:95:01:4b:aa:c1:c2:80: 4f:c7:90:44:bb:2b:25:14:fa:09:ea:96:7e:d8:5d:ca:36:7e: 8d:99:48:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjV1puG/RX+OSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OGYxZGI0NmYtMmUxMi00MDg0LTk2N2YtZDdlMWJhNjZhYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzPoHQUR1cwzwLYvu3d+HvgjjZJWBszVWi7f iSKZy1dR6xXZRRFotMBU29zpU4sgKgVgPBq4udYpVovm2Z91F4dxaPAsk6gAUxva 9RzeGFwOEBLosyk0b7HRSpxGXKZEFL5sPSorkMAvvSqj8Vc5AYZ+bKk+5esBc+bm houxVOYPr1CWXTR6ACv4f9XSsSPWSVjCDxCkUjcYbgNgs+sElMoGQh2i/59PqYgK Hsn/Qv70xvb1V1cA3pL3ObHKK4SMg+7P2I6AzmKQf9LHOz4KpCDNj8/Pxc2c55S/ koZ5CyXQMgp92hAF661D3HY3z5euXK43qzVawfMTMA867mUo0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJJ8rrKUqWOaNoIwYFX+dI78yzTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZmZTY0Y2QtOGJkMC0z YmVlLThkMWEtYTQwOGE2NmMyODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGESFCUHOzK7iPtFqR6w03qSsDvUSuiqyKRIXhVZLD5bP10lBXOp PXxLbNHckPALpt5b/u/9XjHn5qoVc5YrEiWpARtbe+V9BSAumCDLMxjNitcK0mCx wsmZG7asw6kplzGZAeqhy0XDVZ1z4Q+ud1hUpoEFS3C/4bB6ZxUKaExkgm5gWd7p DLsBDK6EDGisA3v6VHma3nQd+1Tv+EiaAtaHb/X3bGqTtOzsSwgUiXBPsGO0nlwA zT5wfiLU1uymHmDkkvW001lj50z91NMbnfYkJ+MLSf7aYSNc30xmwl9Tc5MflQFL qsHCgE/HkES7KyUU+gnqln7YXco2fo2ZSEg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:16 2025 by rpki-client