$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa File: cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa (raw, json) Hash identifier: WKJT8SStye4fCJ/fqT+KVs5DkaLiU4PagR0vM/Pvkxo= Subject key identifier: DF:C1:C1:CB:ED:10:4B:6D:C2:E7:9F:83:06:C9:68:48:34:F2:9B:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB220B9C04764E916A66E57A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 0 IP address blocks: 2620:74:22::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:b9:c0:47:64:e9:16:a6:6e:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=ea494f79-72bd-4bc3-9857-292e2ef8b7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:9e:2f:22:ba:20:ce:3f:ce:f7:ab:18:d6: 10:aa:5a:cf:e4:c8:a0:5d:1a:d0:b9:fe:ce:93:e4: 5d:58:1e:20:a1:49:3c:f8:da:19:63:90:f2:b2:44: 37:1d:c1:0b:92:b7:bf:3d:05:50:78:30:1b:57:de: 81:97:02:6e:0c:62:27:96:ec:83:dc:c1:e3:fa:02: ca:fb:b8:2d:e9:ab:0f:19:19:e0:78:73:1d:7a:40: e6:4b:20:12:f1:ae:3c:a5:1f:f8:26:75:46:e1:3f: 32:9f:80:f1:78:b5:3a:85:57:cb:b9:b9:8d:87:09: a1:84:4c:f2:d3:cb:12:37:66:94:ff:69:b2:c3:e5: 88:5e:1c:50:8d:56:1d:ea:93:2d:0d:38:f6:d2:89: 39:79:0b:92:ce:39:08:d2:df:cd:4f:70:63:28:c2: 7b:cd:9e:71:09:4a:74:f5:54:fc:50:df:c8:76:b0: 75:37:90:6b:d7:a1:89:6e:22:d8:a1:bb:73:87:02: d2:d1:53:eb:4f:b8:aa:2d:b6:8e:f1:00:fa:71:e8: d3:26:b6:a9:a8:bf:a7:06:61:b8:4b:56:63:7c:15: 5f:71:91:5f:b7:d8:d5:64:24:03:e4:71:d5:95:d1: 86:ef:e2:38:29:e1:bd:e5:28:0f:69:dd:fd:1d:30: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C1:C1:CB:ED:10:4B:6D:C2:E7:9F:83:06:C9:68:48:34:F2:9B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:22::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4c:a4:4b:65:46:17:f2:5e:6e:fd:c5:9c:d8:f2:69:2d:19: e1:9f:33:80:22:0d:04:16:f9:37:a6:84:29:13:78:c3:58:d3: 50:5e:aa:e7:d6:3b:a7:64:ad:80:58:d0:82:09:e8:b5:c0:59: cb:93:b5:6a:3c:26:e9:6c:07:de:4a:e0:e6:43:5f:35:e4:d9: 71:78:d3:70:30:71:a1:76:46:8b:76:00:ec:21:45:ad:3d:b2: fe:61:a9:1c:fd:d1:69:90:af:12:c4:ba:05:93:a2:b1:23:4c: db:14:09:7d:6b:e2:2b:5b:e7:a6:37:b1:97:5a:49:5d:a3:9b: 22:9d:3c:26:21:f2:cc:59:eb:76:41:f7:00:d6:be:0b:1b:1b: 2f:b8:33:a2:34:47:2e:be:1b:8b:4b:60:47:17:0e:5e:d8:a1: 70:a6:8a:a0:5f:a9:32:c2:15:f2:18:f0:60:62:b6:c6:e8:f2: 99:34:46:2b:38:3f:95:98:7c:f7:a8:3e:ae:65:1d:b4:53:66: 8e:3a:57:0b:a0:94:5d:df:7d:fd:b9:07:50:1c:1b:c0:ba:e5: 14:58:91:bd:6c:4e:1e:cb:d1:3d:f1:ff:cf:cf:a2:d0:ab:ee: d7:b1:c7:9e:be:35:7f:94:94:4c:4d:5e:c3:09:53:42:f6:87: d2:43:4a:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqyILnAR2TpFqZuV6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWE0OTRmNzktNzJiZC00YmMzLTk4NTctMjkyZTJlZjhiN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9meLyK6IM4/zverGNYQqlrP5MigXRrQuf7O k+RdWB4goUk8+NoZY5DyskQ3HcELkre/PQVQeDAbV96BlwJuDGInluyD3MHj+gLK +7gt6asPGRngeHMdekDmSyAS8a48pR/4JnVG4T8yn4DxeLU6hVfLubmNhwmhhEzy 08sSN2aU/2myw+WIXhxQjVYd6pMtDTj20ok5eQuSzjkI0t/NT3BjKMJ7zZ5xCUp0 9VT8UN/IdrB1N5Br16GJbiLYobtzhwLS0VPrT7iqLbaO8QD6cejTJrapqL+nBmG4 S1ZjfBVfcZFft9jVZCQD5HHVldGG7+I4KeG95SgPad39HTCYTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/BwcvtEEttwuefgwbJaEg08pu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2MxNzUzMDUtYmMxZC0z OGIxLTk0YTAtYjA2ZjZmNGJlY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABBMpEtlRhfyXm79xZzY8mktGeGfM4AiDQQW+TemhCkTeMNY01Be qufWO6dkrYBY0IIJ6LXAWcuTtWo8JulsB95K4OZDXzXk2XF403AwcaF2Rot2AOwh Ra09sv5hqRz90WmQrxLEugWTorEjTNsUCX1r4itb56Y3sZdaSV2jmyKdPCYh8sxZ 63ZB9wDWvgsbGy+4M6I0Ry6+G4tLYEcXDl7YoXCmiqBfqTLCFfIY8GBitsbo8pk0 Ris4P5WYfPeoPq5lHbRTZo46VwuglF3fff25B1AcG8C65RRYkb1sTh7L0T3x/8/P otCr7texx56+NX+UlExNXsMJU0L2h9JDSvs= -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:25 2025 by rpki-client