$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa File: 05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa (raw, json) Hash identifier: y93MGGfFRGgatGOgS0wnK4fceDbWgcdz+HjgjBj6xQU= Subject key identifier: 22:30:3F:94:86:C3:D5:A3:F9:2A:2F:1C:8A:0C:C7:FC:C6:1F:9A:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE513BA3B5EB6931BF580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396612 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e5:13:ba:3b:5e:b6:93:1b:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=da6a0e4f-da30-4346-bf80-28b7ccaefc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:86:21:2a:87:96:09:83:e8:ca:c2:ba:ef: 11:54:3b:b5:96:e3:d0:04:67:3b:71:f0:10:1b:01: dd:f4:b9:30:d2:a2:83:92:0e:82:62:f3:94:b0:a7: 03:c5:1b:cc:4c:62:64:97:0a:71:16:24:fd:a5:61: 0a:04:f3:1d:76:92:ad:4f:95:98:31:a1:42:e2:d1: 22:b9:d1:73:d0:63:e8:a0:0d:b9:dd:d3:e0:81:41: 1c:b8:df:5d:98:33:36:01:c5:bb:a6:8a:7a:66:7f: b2:ed:b6:b3:54:d2:fb:53:b5:59:ff:10:17:f6:4f: 01:45:27:b4:eb:c9:22:6d:5e:25:54:e1:c7:ca:be: 67:79:66:7c:8b:65:5c:6d:d1:f2:36:96:b6:89:b1: e4:31:dd:4e:1d:15:48:cb:0d:84:42:3f:ec:49:7c: f3:f4:e4:2b:2f:09:ff:85:78:05:1b:17:ea:32:bd: e9:60:a1:e7:5c:a8:7a:a2:d1:b0:67:00:3a:93:63: 3a:e1:26:2d:ce:72:ca:61:45:58:b1:da:f9:e0:e6: c2:82:12:ca:d7:15:0c:65:cd:d7:06:5d:14:ef:7d: a9:be:ce:f7:26:95:04:04:e4:49:62:79:29:a1:cd: 90:82:06:c4:e2:60:33:d9:02:1b:96:4b:dd:37:88: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:30:3F:94:86:C3:D5:A3:F9:2A:2F:1C:8A:0C:C7:FC:C6:1F:9A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:20:6c:66:b5:18:bc:71:35:b3:1c:d8:b5:86:76:d6:87:56: b7:77:42:a2:5f:1d:13:b7:7a:57:a9:4b:8c:11:59:9e:7e:0c: cf:44:3e:2f:3a:49:4a:a2:df:24:7a:43:2a:7e:2c:94:f9:ba: 13:57:43:e8:55:fd:a0:ca:fe:5d:2b:2e:da:7a:53:cb:3e:15: 2e:3c:f7:8d:ce:ce:74:c9:4c:ea:b5:dc:2b:24:89:63:07:f7: 21:cb:7f:be:b7:fd:46:26:7d:0c:0d:15:c2:e1:e2:d0:71:f6: 42:c6:f9:06:e4:84:96:ce:7e:42:37:aa:30:ca:d8:ac:58:f4: 21:4f:d4:71:7a:32:b2:72:d9:48:34:f4:62:12:ea:67:ce:59: b3:ae:ea:77:3d:4d:1e:92:3c:f4:7b:41:18:7d:0e:19:1a:7e: 33:3f:31:a5:c3:67:00:a1:d8:6e:3a:86:04:f7:70:87:03:59: d1:05:e9:33:ca:2a:7b:da:a2:5f:a9:0c:4f:99:35:33:ee:7c: 2b:b9:a4:53:9b:0f:2c:d2:9b:08:17:46:49:5d:71:fd:1c:bc: a8:ce:3f:36:2e:ae:f9:14:d0:11:a6:6f:17:e3:93:ae:e5:c4: 53:51:78:d1:64:b8:94:2d:13:28:aa:2f:81:e9:38:31:6f:a7: 06:4f:5f:49 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+UTujtetpMb9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGE2YTBlNGYtZGEzMC00MzQ2LWJmODAtMjhiN2NjYWVmYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovGGISqHlgmD6MrCuu8RVDu1luPQBGc7cfAQ GwHd9Lkw0qKDkg6CYvOUsKcDxRvMTGJklwpxFiT9pWEKBPMddpKtT5WYMaFC4tEi udFz0GPooA253dPggUEcuN9dmDM2AcW7pop6Zn+y7bazVNL7U7VZ/xAX9k8BRSe0 68kibV4lVOHHyr5neWZ8i2VcbdHyNpa2ibHkMd1OHRVIyw2EQj/sSXzz9OQrLwn/ hXgFGxfqMr3pYKHnXKh6otGwZwA6k2M64SYtznLKYUVYsdr54ObCghLK1xUMZc3X Bl0U732pvs73JpUEBORJYnkpoc2QggbE4mAz2QIblkvdN4jj0wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCIwP5SGw9Wj+SovHIoMx/zGH5oIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDVkYzM3MzItM2FkMC0z ZDNmLThiNjktNWE3M2I3ZTZiMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7IGxmtRi8cTWzHNi1hnbWh1a3d0KiXx0Tt3pX qUuMEVmefgzPRD4vOklKot8kekMqfiyU+boTV0PoVf2gyv5dKy7aelPLPhUuPPeN zs50yUzqtdwrJIljB/chy3++t/1GJn0MDRXC4eLQcfZCxvkG5ISWzn5CN6owytis WPQhT9RxejKyctlINPRiEupnzlmzrup3PU0ekjz0e0EYfQ4ZGn4zPzGlw2cAodhu OoYE93CHA1nRBekzyip72qJfqQxPmTUz7nwruaRTmw8s0psIF0ZJXXH9HLyozj82 Lq75FNARpm8X45Ou5cRTUXjRZLiULRMoqi+B6Tgxb6cGT19J -----END CERTIFICATE-----Generated at Mon Aug 4 14:17:41 2025 by rpki-client