$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa File: c68a42b1-be3f-33b5-a424-037b4328a509.roa (raw, json) Hash identifier: 7U+/Dvrc9F3OK/h5MayvWRLX9EfyjUEEfKuB4wRV1F8= Subject key identifier: 12:AF:FC:08:D8:F3:BB:E0:E4:4D:EA:7E:58:A9:84:0E:ED:86:BE:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AADF131B6C8BA9A6E0228DB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 0 IP address blocks: 2620:74:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:31:b6:c8:ba:9a:6e:02:28:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=9064af6c-e5cb-466c-ac9b-61bce82aaf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:a0:20:0c:27:0d:cd:ab:d9:37:5d:63:f5: 7d:99:d6:53:54:b3:19:58:03:1f:f1:5f:1d:47:cf: 5a:5f:ef:26:61:f8:9c:ca:dc:7e:ba:90:ae:00:da: d3:6f:0c:d6:4f:6a:d2:14:f1:16:ac:38:96:8c:07: 65:19:cc:a5:ba:fb:ea:21:c6:a7:78:d8:b8:ce:f1: 26:7a:2d:6f:ab:d3:0c:30:b6:19:f9:1f:cb:45:15: 35:a5:03:a9:bb:65:90:18:4a:a7:e3:56:05:e5:f5: bd:05:a0:72:1e:d8:70:11:8f:ab:90:60:bc:af:b4: 7c:f6:73:9f:6f:70:18:51:6c:17:0d:d3:80:bc:d6: c7:87:24:15:b1:93:8f:8a:c8:d1:c8:23:46:49:a6: f0:9c:91:5b:4f:2e:70:2e:d1:0f:b9:0d:8a:8f:ed: 8c:71:e6:ec:b1:5a:60:95:1d:7b:de:29:27:c5:66: 51:be:6f:37:1a:bd:a6:5f:ed:d2:72:c8:cc:e2:f7: 2f:97:1b:10:21:1b:a8:81:aa:7e:aa:0a:45:8a:c9: 83:97:e8:a4:1d:5f:1a:31:09:f4:37:00:85:86:9d: 36:f6:d2:a7:48:c8:c7:a0:2d:50:39:b0:7b:39:87: fc:f1:3d:87:ba:e2:26:ef:25:75:95:19:2b:c1:46: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AF:FC:08:D8:F3:BB:E0:E4:4D:EA:7E:58:A9:84:0E:ED:86:BE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:90:4a:de:f6:cd:be:81:bc:6c:eb:17:a9:cf:ef:f0:ef:b5: 89:20:f0:57:66:b6:be:48:5b:fa:4a:e5:5f:36:1b:c4:ad:f4: 9e:84:4f:46:ba:ba:34:d1:39:cc:08:1b:ce:a0:2d:af:c1:20: f1:41:60:1a:b9:25:4e:47:18:b7:cd:bd:bd:8a:c3:ca:86:7c: 53:78:80:c3:c1:60:e5:8a:35:69:04:e0:e8:91:51:6e:cd:04: 4e:47:4c:33:b1:10:7a:6e:ea:93:c0:58:a2:79:22:e2:bc:71: be:0e:59:15:df:8d:04:a7:39:f5:16:61:00:98:32:33:ed:28: 9d:81:2e:b0:b1:9e:fc:46:50:05:ef:04:a5:a4:84:84:09:fe: 99:bb:e9:dc:26:c6:cb:d7:06:f5:84:2e:d5:70:84:eb:1d:5e: e4:cf:3f:c4:cf:56:97:2b:9e:8b:c5:54:5d:69:32:60:15:dc: 07:24:e1:9a:e3:94:0d:80:e0:b2:1b:92:7a:fc:57:da:95:e2: 85:32:37:ad:65:ae:25:d4:3d:e4:0d:eb:ba:de:10:92:21:fb: ab:e4:89:ef:75:0e:c2:7c:03:e4:46:ee:0e:93:30:11:5e:64: d0:ad:a5:a6:29:3b:b1:a4:5b:22:6c:13:c8:99:e3:25:50:4f: 52:8a:37:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8TG2yLqabgIo24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk OTA2NGFmNmMtZTVjYi00NjZjLWFjOWItNjFiY2U4MmFhZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSagIAwnDc2r2TddY/V9mdZTVLMZWAMf8V8d R89aX+8mYficytx+upCuANrTbwzWT2rSFPEWrDiWjAdlGcyluvvqIcaneNi4zvEm ei1vq9MMMLYZ+R/LRRU1pQOpu2WQGEqn41YF5fW9BaByHthwEY+rkGC8r7R89nOf b3AYUWwXDdOAvNbHhyQVsZOPisjRyCNGSabwnJFbTy5wLtEPuQ2Kj+2McebssVpg lR173iknxWZRvm83Gr2mX+3ScsjM4vcvlxsQIRuogap+qgpFismDl+ikHV8aMQn0 NwCFhp029tKnSMjHoC1QObB7OYf88T2HuuIm7yV1lRkrwUaiiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKv/AjY87vg5E3qfliphA7thr75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY4YTQyYjEtYmUzZi0z M2I1LWE0MjQtMDM3YjQzMjhhNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqQSt72zb6BvGzrF6nP7/DvtYkg8Fdmtr5IW/pK5V82G8St9J6E T0a6ujTROcwIG86gLa/BIPFBYBq5JU5HGLfNvb2Kw8qGfFN4gMPBYOWKNWkE4OiR UW7NBE5HTDOxEHpu6pPAWKJ5IuK8cb4OWRXfjQSnOfUWYQCYMjPtKJ2BLrCxnvxG UAXvBKWkhIQJ/pm76dwmxsvXBvWELtVwhOsdXuTPP8TPVpcrnovFVF1pMmAV3Ack 4ZrjlA2A4LIbknr8V9qV4oUyN61lriXUPeQN67reEJIh+6vkie91DsJ8A+RG7g6T MBFeZNCtpaYpO7GkWyJsE8iZ4yVQT1KKN5I= -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:04 2025 by rpki-client