$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa File: 71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa (raw, json) Hash identifier: cNhYugmK4Ze6iQymM2BsaMjc38CMwejqtFXTtXFWo9M= Subject key identifier: 3F:6F:D8:85:B8:ED:62:15:26:67:77:C8:E0:EE:B4:AC:83:2E:C4:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814635AE073B33879BD87400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36616 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:35:ae:07:3b:33:87:9b:d8:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2a52fc38-e158-44ab-88bf-3853b539299e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:5e:fe:c2:d1:6e:90:c5:3e:f6:00:1f:0a: 1e:14:61:88:51:f9:e4:f1:f0:c5:60:ea:bf:b2:32: 91:2d:28:4c:32:2b:50:a9:57:95:b0:01:f9:24:ad: 7a:34:a4:c3:59:06:d7:8a:ff:93:dc:b0:bf:de:df: e0:23:17:f0:87:98:75:eb:dc:45:c5:3b:1f:7c:88: 40:11:fe:ac:01:e5:fc:1d:c9:33:e5:d5:c9:2c:07: 3e:45:23:69:7d:b9:6f:1d:f6:e8:94:6d:3c:b3:d0: fd:21:b7:93:d9:e8:c3:a0:06:9c:46:71:3e:a2:46: 66:b4:f8:26:4b:55:11:b7:68:44:fe:db:a8:ad:85: dd:87:b3:fe:51:86:a7:e4:e7:42:50:f9:90:df:d3: 55:b1:8a:c2:5b:1c:e7:75:62:73:42:46:d5:5b:fd: ec:80:55:b5:62:1e:a3:8a:a1:25:5a:c0:c9:8d:18: 0e:87:7d:0e:7c:9b:c1:ef:7c:e4:f3:ad:16:17:b5: 54:64:b1:61:cd:c0:10:d9:22:0b:1d:6f:05:23:84: 60:6d:9d:3f:6a:df:30:9a:3e:d7:09:59:1d:a6:5c: f4:46:20:81:c4:5d:42:ca:69:44:cd:fb:97:89:fe: 27:b9:86:fd:c2:9f:c4:c0:26:c6:32:53:f7:44:f1: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:D8:85:B8:ED:62:15:26:67:77:C8:E0:EE:B4:AC:83:2E:C4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6b:77:f4:ee:47:62:fc:0f:a7:25:03:8a:f0:bd:43:bd:9f: b8:af:ad:8a:8d:7d:4f:a6:7f:53:9f:6c:10:3c:64:b5:f6:dc: cc:80:ca:ac:dc:7b:01:a6:fa:c5:ae:00:26:89:25:05:3b:a8: 80:4b:5b:c6:bb:d1:a0:79:98:84:4f:ec:4f:c0:d8:8e:e4:33: c3:cc:42:7c:0c:fa:50:91:9b:fe:ee:58:6a:8e:62:ad:f0:06: 34:98:71:af:ba:84:d5:25:df:7a:54:29:67:4f:4f:ce:9c:16: 13:c6:1e:11:ca:80:3e:41:4a:fd:4c:3c:f5:a5:fe:25:00:94: 8f:7e:fb:cb:49:0d:a7:34:24:7e:45:46:76:c7:04:56:bb:63: f3:e5:fd:62:d4:b8:e8:d9:e7:5a:76:a1:8c:1c:28:be:e2:91: 05:14:db:bd:cd:70:ab:44:c9:73:d2:c7:11:55:10:70:3a:36: 81:f2:17:7b:89:b5:5c:26:3e:a3:9d:a6:bf:74:aa:dd:6b:e0: 92:a2:54:e2:d3:bd:e4:69:81:a0:00:74:72:d6:de:c9:bd:45: a8:fb:e2:2e:94:90:0f:a8:61:bb:23:7c:bb:ef:49:04:e1:00: db:2d:e8:75:1e:ec:e4:ce:b2:89:22:80:de:e9:ad:cc:bc:4c: c6:32:20:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjWuBzszh5vYdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmE1MmZjMzgtZTE1OC00NGFiLTg4YmYtMzg1M2I1MzkyOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqNe/sLRbpDFPvYAHwoeFGGIUfnk8fDFYOq/ sjKRLShMMitQqVeVsAH5JK16NKTDWQbXiv+T3LC/3t/gIxfwh5h169xFxTsffIhA Ef6sAeX8Hckz5dXJLAc+RSNpfblvHfbolG08s9D9IbeT2ejDoAacRnE+okZmtPgm S1URt2hE/tuorYXdh7P+UYan5OdCUPmQ39NVsYrCWxzndWJzQkbVW/3sgFW1Yh6j iqElWsDJjRgOh30OfJvB73zk860WF7VUZLFhzcAQ2SILHW8FI4RgbZ0/at8wmj7X CVkdplz0RiCBxF1CymlEzfuXif4nuYb9wp/EwCbGMlP3RPEhCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9v2IW47WIVJmd3yODutKyDLsTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzFlYzRkZTctMmI0MS0z MTBmLWI3ZTgtYzEwY2ZhYzVhNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5rd/TuR2L8D6clA4rwvUO9n7ivrYqNfU+mf1OfbBA8ZLX23MyA yqzcewGm+sWuACaJJQU7qIBLW8a70aB5mIRP7E/A2I7kM8PMQnwM+lCRm/7uWGqO Yq3wBjSYca+6hNUl33pUKWdPT86cFhPGHhHKgD5BSv1MPPWl/iUAlI9++8tJDac0 JH5FRnbHBFa7Y/Pl/WLUuOjZ51p2oYwcKL7ikQUU273NcKtEyXPSxxFVEHA6NoHy F3uJtVwmPqOdpr90qt1r4JKiVOLTveRpgaAAdHLW3sm9Raj74i6UkA+oYbsjfLvv SQThANst6HUe7OTOsokigN7prcy8TMYyICs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:40 2025 by rpki-client