$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa File: 9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa (raw, json) Hash identifier: mMJPlo0YLRT0XSanfKc5j3p3TWvV7YwwK0Q72tfmkVw= Subject key identifier: BC:92:E1:92:3F:C9:D6:1D:47:C7:1A:10:09:77:0C:97:A4:FF:AD:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AADF1380A93D4355EC0277AA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:84::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:38:0a:93:d4:35:5e:c0:27:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=d847bfd8-4795-48ac-ac72-3e4738fea14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:6d:0b:e6:c5:09:3b:1b:50:7b:54:fc:56: 4c:c8:11:e0:19:6f:4e:ba:e1:4c:52:c8:eb:b2:d1: 0a:d4:d4:a5:97:ed:87:e1:01:07:b4:c4:e7:e7:d2: af:10:07:a2:48:bb:20:0c:0a:1e:be:b7:0c:44:8c: 98:98:4b:7c:f8:d8:0e:83:87:21:a6:37:93:49:9a: f5:83:1a:0c:b2:d1:dd:4a:8d:91:cd:b8:f4:8f:22: 00:bc:ca:cf:93:93:43:ba:a2:b6:7b:f7:2f:2d:32: 7e:dc:d5:d9:94:1c:9a:90:ae:00:ab:32:3e:96:43: c6:cc:52:aa:f3:f1:c2:5a:b9:b9:d5:f8:8b:50:9d: 31:53:66:6e:47:4e:af:af:b8:53:bb:46:3b:6c:3b: 3e:ef:64:7d:33:0f:03:cc:a4:23:84:4d:37:ae:fc: 36:43:3d:46:38:2f:01:ad:00:29:42:ce:0a:a0:12: 17:9c:a0:e0:03:c2:e3:94:9a:70:fb:7f:1b:ce:f9: c9:32:fa:f6:8b:5b:b4:69:d3:2e:dd:07:4d:c3:41: b5:67:ae:8c:d1:6e:aa:87:60:99:ad:40:0e:53:34: 40:e1:05:c3:c6:fd:36:7d:4c:5e:e4:56:8c:ad:cb: 4d:72:72:e3:82:0e:02:d5:bb:12:f8:5c:b3:a3:7b: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:E1:92:3F:C9:D6:1D:47:C7:1A:10:09:77:0C:97:A4:FF:AD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1d:48:c4:61:ec:42:0a:ab:fa:58:b1:6c:64:ce:f3:e6:7a: 5c:90:d3:e3:78:90:3e:82:2b:65:be:40:9f:e8:5a:7b:90:15: 56:22:6a:51:27:eb:fd:c7:d4:86:da:27:4e:c8:00:fc:2f:87: c4:de:7d:ce:d6:74:79:fe:cf:7b:06:14:75:b3:2e:bd:bc:be: 1c:ce:34:a0:cc:10:9b:e3:fd:c7:ba:fb:90:8b:93:dd:d1:b0: c7:d6:4d:19:f0:50:a8:89:04:ee:3f:cb:87:37:f9:59:92:e9: 9b:d5:7a:5b:23:43:ac:4c:91:33:46:73:f6:89:47:bd:cb:d5: ab:20:4a:8a:a2:bd:53:18:e0:f6:c4:26:e0:dc:a9:2e:f3:83: 68:f9:3b:5c:5b:b6:06:ad:e1:5e:6f:bc:e5:5d:f7:bf:13:81: 2e:27:26:a5:0a:63:e6:18:51:4e:c0:e0:42:a2:3e:18:2e:4e: 5b:a7:87:30:77:f1:f0:44:7d:9b:f3:0d:58:dc:f7:06:49:7f: dd:d1:49:59:be:81:f6:d0:59:b3:4a:13:cd:2b:e7:dd:46:bb: f0:ca:4e:10:f6:48:bb:07:a7:ea:fb:91:73:bc:9f:78:d5:10: a3:a8:a0:d1:4f:c8:5e:ec:d8:0c:29:40:60:2a:e9:fe:b6:71: 30:9f:9e:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8TgKk9Q1XsAneqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZDg0N2JmZDgtNDc5NS00OGFjLWFjNzItM2U0NzM4ZmVhMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL1tC+bFCTsbUHtU/FZMyBHgGW9OuuFMUsjr stEK1NSll+2H4QEHtMTn59KvEAeiSLsgDAoevrcMRIyYmEt8+NgOg4chpjeTSZr1 gxoMstHdSo2Rzbj0jyIAvMrPk5NDuqK2e/cvLTJ+3NXZlByakK4AqzI+lkPGzFKq 8/HCWrm51fiLUJ0xU2ZuR06vr7hTu0Y7bDs+72R9Mw8DzKQjhE03rvw2Qz1GOC8B rQApQs4KoBIXnKDgA8LjlJpw+38bzvnJMvr2i1u0adMu3QdNw0G1Z66M0W6qh2CZ rUAOUzRA4QXDxv02fUxe5FaMrctNcnLjgg4C1bsS+Fyzo3s5+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyS4ZI/ydYdR8caEAl3DJek/60HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWFjMzk3MzUtZmQzMi0z YmM3LWFkMjEtMGQwY2NkZDYxZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACcdSMRh7EIKq/pYsWxkzvPmelyQ0+N4kD6CK2W+QJ/oWnuQFVYi alEn6/3H1IbaJ07IAPwvh8Tefc7WdHn+z3sGFHWzLr28vhzONKDMEJvj/ce6+5CL k93RsMfWTRnwUKiJBO4/y4c3+VmS6ZvVelsjQ6xMkTNGc/aJR73L1asgSoqivVMY 4PbEJuDcqS7zg2j5O1xbtgat4V5vvOVd978TgS4nJqUKY+YYUU7A4EKiPhguTlun hzB38fBEfZvzDVjc9wZJf93RSVm+gfbQWbNKE80r591Gu/DKThD2SLsHp+r7kXO8 n3jVEKOooNFPyF7s2AwpQGAq6f62cTCfnvk= -----END CERTIFICATE-----Generated at Tue Aug 5 17:07:59 2025 by rpki-client