$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa File: 192eaff7-97f0-3a92-8759-3880ed2af9b3.roa (raw, json) Hash identifier: CnfFj9F13wDTINwzdwt0TLgYe6lceNg0x8nMISBCekc= Subject key identifier: 94:57:AF:F6:8B:75:01:B8:D6:BC:99:D7:B6:E0:BD:66:C0:B4:13:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AADF138426BB78FF32B0D0440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:38:42:6b:b7:8f:f3:2b:0d:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=641bb674-ea08-42e4-980e-01a4d418f653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:93:19:10:4a:18:12:46:3d:5a:bd:ca:b9: 17:05:08:0d:d0:b7:52:f6:7b:c4:de:da:de:1e:ad: 8f:8a:8d:51:85:ee:41:6b:8c:13:f4:58:89:5a:25: ef:b0:a8:46:4f:44:db:ea:a5:f7:f5:59:75:a3:70: 25:71:48:7e:34:50:81:b8:5e:0d:0a:92:99:41:99: 2f:93:08:20:19:b1:0f:0d:32:c8:f5:ca:84:f4:8d: 99:89:9b:9d:0c:fa:8d:c5:c0:d3:ed:14:c9:69:8a: d1:24:62:96:44:5d:eb:ff:b3:3f:7b:b0:61:33:59: 26:e3:c7:8a:fd:a8:b8:38:e5:ff:bf:3f:f5:31:e1: 58:70:2c:21:b4:2b:31:50:fc:47:26:9b:4e:4c:85: f0:a8:aa:80:c6:de:63:29:1b:c2:dc:f5:60:01:a1: 00:f1:89:cb:f7:1b:0a:52:89:dd:ad:b2:b8:8c:0f: 29:79:9d:2b:bf:6c:22:58:70:cf:a7:ab:a7:ff:c7: c7:d4:ef:cb:a6:5b:c2:e5:e2:8f:da:c1:d1:a9:a9: 7d:df:f1:6e:eb:19:e8:e9:c4:b2:da:e0:c6:66:f5: 65:3b:ae:5f:ed:b7:e0:88:f0:75:e6:15:70:4e:3b: f3:97:1b:f4:50:8e:cb:39:0b:00:18:bf:91:4a:d1: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:AF:F6:8B:75:01:B8:D6:BC:99:D7:B6:E0:BD:66:C0:B4:13:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d3:00:6b:7a:e9:9c:66:9d:2e:88:7c:2d:a2:9d:ae:b5:3c: 22:24:1b:de:98:02:14:5e:0f:07:e8:ca:fd:9b:07:61:24:f2: 89:31:de:15:96:0c:af:a9:e2:31:c8:9e:04:4d:0a:d5:87:00: 95:85:5a:70:da:5d:75:3c:03:28:6e:a2:96:c7:11:71:37:a0: 1d:9f:7f:e2:61:9e:9f:86:2c:b7:74:62:4e:17:dc:84:2a:04: 26:41:4c:b7:21:9b:49:3d:71:88:85:e1:e1:89:5f:8d:f4:1e: 35:c8:75:46:ac:4f:d8:1c:6f:38:95:f3:c7:02:4e:dc:d9:c1: cc:6b:27:76:a5:9a:0d:f5:04:71:1f:6a:85:78:c0:87:26:66: 9c:2f:21:37:2a:67:29:45:3c:84:00:13:9e:5b:ed:bf:24:bc: 84:02:83:3d:af:74:55:93:41:94:66:79:1d:f8:02:6b:8b:ac: 17:9e:4e:4d:2e:8f:6a:94:7b:17:3b:9e:cc:1a:8a:8b:f7:8e: cf:1e:2e:4e:13:54:d0:c9:84:0d:55:87:2c:a4:64:5e:71:80: 8b:86:17:87:1b:d0:d2:c8:46:dd:57:38:aa:90:01:9c:02:8b: e4:5c:f8:aa:d2:6f:92:3d:a9:28:9e:38:0d:60:f4:04:78:29: e8:dd:4e:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8ThCa7eP8ysNBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NjQxYmI2NzQtZWEwOC00MmU0LTk4MGUtMDFhNGQ0MThmNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhaTGRBKGBJGPVq9yrkXBQgN0LdS9nvE3tre Hq2Pio1Rhe5Ba4wT9FiJWiXvsKhGT0Tb6qX39Vl1o3AlcUh+NFCBuF4NCpKZQZkv kwggGbEPDTLI9cqE9I2ZiZudDPqNxcDT7RTJaYrRJGKWRF3r/7M/e7BhM1km48eK /ai4OOX/vz/1MeFYcCwhtCsxUPxHJptOTIXwqKqAxt5jKRvC3PVgAaEA8YnL9xsK UondrbK4jA8peZ0rv2wiWHDPp6un/8fH1O/LplvC5eKP2sHRqal93/Fu6xno6cSy 2uDGZvVlO65f7bfgiPB15hVwTjvzlxv0UI7LOQsAGL+RStG9XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJRXr/aLdQG41ryZ17bgvWbAtBMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZWFmZjctOTdmMC0z YTkyLTg3NTktMzg4MGVkMmFmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7TAGt66ZxmnS6IfC2ina61PCIkG96YAhReDwfoyv2bB2Ek8okx 3hWWDK+p4jHIngRNCtWHAJWFWnDaXXU8AyhuopbHEXE3oB2ff+Jhnp+GLLd0Yk4X 3IQqBCZBTLchm0k9cYiF4eGJX430HjXIdUasT9gcbziV88cCTtzZwcxrJ3almg31 BHEfaoV4wIcmZpwvITcqZylFPIQAE55b7b8kvIQCgz2vdFWTQZRmeR34AmuLrBee Tk0uj2qUexc7nswaiov3js8eLk4TVNDJhA1VhyykZF5xgIuGF4cb0NLIRt1XOKqQ AZwCi+Rc+KrSb5I9qSieOA1g9AR4KejdToE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:02 2025 by rpki-client