$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa File: 0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa (raw, json) Hash identifier: tkVyawQ48VKEmyxYDPHmfv5Rl9cfTWVTCs9u0HIxa10= Subject key identifier: EE:08:F7:B9:5A:9C:4A:86:F6:0E:84:80:43:8C:0A:90:C3:85:84:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE00C3AD368C652859480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36630 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e0:0c:3a:d3:68:c6:52:85:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=f2f4f0bf-ca77-4057-bf04-7f36b01e25a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:34:f2:e8:ac:30:07:1d:9f:92:80:8b:c2:a6: de:4b:db:d4:65:cf:0a:69:e5:a0:bf:ef:9b:4f:87: e4:6b:71:50:ed:89:65:04:b8:b3:38:b5:b4:8d:47: 34:9a:b3:46:5b:86:77:9b:59:60:a9:34:e6:bc:78: 87:4f:31:99:db:a6:cc:18:51:90:73:ad:20:87:e5: a0:82:48:3e:f1:3d:35:d5:d6:92:f9:fe:63:8b:d6: 75:42:3e:93:5e:27:d9:ba:5f:aa:13:8f:28:e6:f1: 41:01:53:12:77:16:d5:e8:12:7c:36:87:fa:ad:c6: b8:82:86:f7:c9:91:73:65:99:d1:ce:c6:1e:31:33: 46:a4:d6:db:06:d9:78:b2:4a:6a:fa:d4:f1:a9:05: 01:81:f6:9d:1c:4c:dd:7b:51:c5:e6:6c:32:72:a7: 2e:f0:df:c1:2d:ed:c2:8a:b7:65:90:48:f0:2a:9f: bb:16:56:31:f2:cf:9b:c1:da:a5:66:9c:a5:93:b5: b2:91:85:aa:73:9a:f3:d8:ac:82:e8:c4:42:20:e9: e4:13:74:5b:8c:5f:32:44:95:a7:ac:5b:81:20:b6: 29:f9:62:83:4a:d7:74:9e:e0:3b:6d:4c:8f:0c:6f: 28:c2:3e:5f:c5:c4:31:ec:82:15:57:cd:e1:6c:cc: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:08:F7:B9:5A:9C:4A:86:F6:0E:84:80:43:8C:0A:90:C3:85:84:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:43:93:2b:fb:96:ea:a8:59:49:d4:44:21:fe:3e:6d:ed:22: 8b:e6:44:0d:93:5f:92:f8:6d:cb:7c:e0:c1:8f:50:e2:49:c0: f2:73:d4:26:65:dc:34:09:b2:ee:70:fe:0a:b7:a1:25:03:c3: 92:f7:c3:94:11:d3:07:25:9b:9c:9e:c9:85:3f:1d:e1:95:e5: 70:ac:80:3c:9c:30:90:52:60:93:9d:d8:b2:95:74:a4:87:34: db:c3:64:b3:47:27:89:f1:99:dd:b9:4d:cb:d3:2d:ce:96:dd: 1b:9f:2a:13:e0:48:54:6b:d1:87:9e:8b:54:4b:49:74:09:8f: d6:9a:27:1b:06:09:2c:25:c6:98:5e:20:29:2a:a8:1c:1e:b5: 01:fa:91:bc:df:d7:1d:b2:76:b5:4a:0f:32:51:ad:01:75:72: 80:e4:6f:5d:9a:02:c8:88:b1:8a:48:f9:3c:69:b6:23:54:2b: 92:83:8f:8f:cd:ff:54:45:b0:94:e4:c8:f1:14:19:59:d8:10: 1b:4d:86:f8:31:58:87:32:f1:92:7c:fc:6c:01:ed:63:93:c5: 58:43:18:3a:d8:98:ce:6e:fd:33:a7:1c:1a:09:2e:d4:b9:5d: d6:42:20:6d:9d:b5:12:1d:09:32:8c:41:61:f1:63:63:88:5f: a5:6d:f3:fc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+AMOtNoxlKFlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjJmNGYwYmYtY2E3Ny00MDU3LWJmMDQtN2YzNmIwMWUyNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTTy6KwwBx2fkoCLwqbeS9vUZc8KaeWgv++b T4fka3FQ7YllBLizOLW0jUc0mrNGW4Z3m1lgqTTmvHiHTzGZ26bMGFGQc60gh+Wg gkg+8T011daS+f5ji9Z1Qj6TXifZul+qE48o5vFBAVMSdxbV6BJ8Nof6rca4gob3 yZFzZZnRzsYeMTNGpNbbBtl4skpq+tTxqQUBgfadHEzde1HF5mwycqcu8N/BLe3C irdlkEjwKp+7FlYx8s+bwdqlZpylk7WykYWqc5rz2KyC6MRCIOnkE3RbjF8yRJWn rFuBILYp+WKDStd0nuA7bUyPDG8owj5fxcQx7IIVV83hbMyCWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO4I97lanEqG9g6EgEOMCpDDhYQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFlNmJlNGYtYmEzZC0z ZjRhLTgxN2QtNmVhMjU5ZTBkNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANQ5Mr+5bqqFlJ1EQh/j5t7SKL5kQNk1+S+G3L fODBj1DiScDyc9QmZdw0CbLucP4Kt6ElA8OS98OUEdMHJZucnsmFPx3hleVwrIA8 nDCQUmCTndiylXSkhzTbw2SzRyeJ8ZnduU3L0y3Olt0bnyoT4EhUa9GHnotUS0l0 CY/WmicbBgksJcaYXiApKqgcHrUB+pG839cdsna1Sg8yUa0BdXKA5G9dmgLIiLGK SPk8abYjVCuSg4+Pzf9URbCU5MjxFBlZ2BAbTYb4MViHMvGSfPxsAe1jk8VYQxg6 2JjObv0zpxwaCS7UuV3WQiBtnbUSHQkyjEFh8WNjiF+lbfP8 -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:00 2025 by rpki-client