$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa File: 125825cb-4616-3038-8492-1ab7b635d97e.roa (raw, json) Hash identifier: g81kGQtLiM4jyuwPtTKHWhUCuxyJpHq/B5DdfiaQX6U= Subject key identifier: CD:B4:90:5F:0E:97:BC:29:5D:2F:D5:A3:D1:DF:A3:7E:42:C8:14:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B91EB07911B470F050440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396587 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:91:eb:07:91:1b:47:0f:05:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=fbea0bc7-b984-404f-9538-c08f22f1bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:99:c5:a7:37:91:1e:54:44:09:bf:74:da: 90:de:c6:f6:8a:37:c3:77:16:4a:7b:16:8e:6f:50: 8f:45:85:24:5b:f6:f7:ec:ad:2b:e6:a5:16:b8:63: 8a:bc:98:55:a4:41:24:9c:6f:2a:2c:51:a4:be:2c: f9:8a:dd:85:f8:6d:df:71:ba:74:ca:0d:92:b2:ce: bd:15:1a:b8:09:63:98:f9:04:fa:8a:5d:05:64:3a: ed:05:5c:59:0c:d5:e4:6d:cd:6f:8e:c9:75:3f:14: e2:2e:48:61:19:32:c3:33:e7:81:87:33:8f:2e:75: 2a:b1:38:5c:b7:db:67:bd:c4:48:82:fd:15:07:50: 8b:4c:a6:75:c0:8c:52:59:81:9d:80:91:16:c1:fa: 25:ba:14:9b:d7:86:bb:09:8c:0f:8e:cc:ff:eb:48: b6:e9:ab:b5:8b:07:55:33:d2:6d:51:41:d3:08:ae: 19:9d:c5:74:65:fd:15:2b:0f:7e:39:65:c2:5e:45: e5:02:3e:13:78:82:a6:39:0a:cd:8b:fd:d0:e6:ea: c3:cb:60:3e:7d:84:d1:8e:fc:e8:58:91:11:61:f8: d5:5a:81:0e:25:1e:03:83:2c:2d:f0:f7:a6:e3:7c: 9c:13:a2:66:b0:23:05:b1:23:f6:c6:6d:47:a6:9a: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:90:5F:0E:97:BC:29:5D:2F:D5:A3:D1:DF:A3:7E:42:C8:14:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2b:25:90:b1:27:7f:9f:50:27:7e:d1:69:67:7b:73:61:4b: 62:a6:79:1e:8c:90:b5:c2:9f:df:c3:03:1a:bf:26:b8:72:12: 51:4f:b0:94:62:ec:81:8f:1c:f7:17:bf:f2:bc:6d:4e:3f:b9: 55:fa:9a:0f:78:5a:90:7f:08:71:25:59:ef:9a:8d:de:8b:4c: 67:cd:e3:77:97:6f:c7:41:20:cc:bf:5f:76:45:c0:e9:9e:f1: 03:68:0e:66:80:51:60:6c:de:bd:e1:c4:49:77:52:d3:21:b6: 6e:e2:e8:50:83:d1:8d:ea:9a:1b:6e:bc:37:72:2f:e6:65:4e: ea:20:54:ed:66:dd:e7:36:00:c8:df:8d:11:99:6b:fe:53:49: 7a:25:9e:51:a6:24:95:37:81:bb:7b:3f:fa:82:8d:ff:68:b5: cf:28:e1:8a:4f:85:8c:4a:e1:3e:6f:b7:73:7b:f9:a6:c5:1d: 6f:96:01:88:b1:86:d5:75:06:12:2d:8d:4d:ba:29:b5:6f:a4: f2:de:5b:4b:d5:25:cf:08:79:7e:ed:92:22:95:ad:cc:a8:dd: bc:49:16:1c:67:e8:40:55:63:be:fb:40:d0:5f:a3:f3:fe:be: ec:53:28:bb:76:3f:ba:2b:8b:52:b8:05:a8:b1:51:e0:aa:ad: 90:01:f3:e5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5HrB5EbRw8FBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZmJlYTBiYzctYjk4NC00MDRmLTk1MzgtYzA4ZjIyZjFiYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHKZxac3kR5URAm/dNqQ3sb2ijfDdxZKexaO b1CPRYUkW/b37K0r5qUWuGOKvJhVpEEknG8qLFGkviz5it2F+G3fcbp0yg2Sss69 FRq4CWOY+QT6il0FZDrtBVxZDNXkbc1vjsl1PxTiLkhhGTLDM+eBhzOPLnUqsThc t9tnvcRIgv0VB1CLTKZ1wIxSWYGdgJEWwfoluhSb14a7CYwPjsz/60i26au1iwdV M9JtUUHTCK4ZncV0Zf0VKw9+OWXCXkXlAj4TeIKmOQrNi/3Q5urDy2A+fYTRjvzo WJERYfjVWoEOJR4Dgywt8Pem43ycE6JmsCMFsSP2xm1HppqBNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM20kF8Ol7wpXS/Vo9Hfo35CyBSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTI1ODI1Y2ItNDYxNi0z MDM4LTg0OTItMWFiN2I2MzVkOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlKyWQsSd/n1AnftFpZ3tzYUtipnkejJC1wp/f wwMavya4chJRT7CUYuyBjxz3F7/yvG1OP7lV+poPeFqQfwhxJVnvmo3ei0xnzeN3 l2/HQSDMv192RcDpnvEDaA5mgFFgbN694cRJd1LTIbZu4uhQg9GN6pobbrw3ci/m ZU7qIFTtZt3nNgDI340RmWv+U0l6JZ5RpiSVN4G7ez/6go3/aLXPKOGKT4WMSuE+ b7dze/mmxR1vlgGIsYbVdQYSLY1Nuim1b6Ty3ltL1SXPCHl+7ZIila3MqN28SRYc Z+hAVWO++0DQX6Pz/r7sUyi7dj+6K4tSuAWosVHgqq2QAfPl -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:44 2025 by rpki-client