$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19fcc3fd-ee66-311b-9685-3590c27c1b10.roa File: 19fcc3fd-ee66-311b-9685-3590c27c1b10.roa (raw, json) Hash identifier: RVtgVR97xTKGKwCoTEnY3hZnGvXQh0PF/m4VpQxOvlQ= Subject key identifier: C6:06:E2:63:64:9E:D1:65:F6:09:20:CC:F2:F3:36:4E:C4:C5:5B:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B999568FBE0A74BCBC510 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19fcc3fd-ee66-311b-9685-3590c27c1b10.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 211369 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:99:95:68:fb:e0:a7:4b:cb:c5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=2ec04a53-fa7a-456e-825f-393c1e15c068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:1d:39:a2:57:4c:8a:2c:74:50:87:95:f2: 4b:9c:3b:d8:1a:ed:ec:d8:4b:81:fe:05:16:9a:e1: 95:b7:dc:ad:a1:bc:40:a4:b5:84:44:6c:15:6b:9f: 5f:c1:bd:37:a2:e1:41:86:ab:4d:33:13:a4:16:82: 46:35:f4:54:90:48:39:f9:01:b7:11:46:6a:cc:81: 8c:05:ea:65:be:2e:10:ec:ea:40:67:ec:8b:b4:56: c9:23:69:c9:80:14:38:b4:21:42:98:40:15:ac:78: e7:04:da:24:1b:a3:26:ca:3a:6c:27:6f:09:f5:5f: ee:b9:2e:e4:c5:2b:7c:7d:df:b7:a9:1d:2d:95:3a: e6:7d:d9:5b:b3:d7:1f:dc:22:c9:60:64:0b:fd:72: c2:1a:77:99:06:2c:fa:0f:12:88:eb:ee:aa:32:a4: 44:7c:76:a4:a2:e2:2c:98:16:8d:b6:64:5f:f5:4e: 3f:b9:f4:2f:1d:67:4d:a5:82:27:f7:c4:d0:22:3d: ea:e0:02:11:cc:9a:9f:38:42:ae:35:92:77:c8:7c: c1:2b:5f:2f:0a:30:7e:25:40:1f:d5:9f:00:3f:67: d4:bb:bb:8e:4d:fb:6f:a3:66:c2:00:63:bf:99:f8: 30:4d:7e:e3:14:0f:ff:a4:ea:ed:27:81:b0:f7:82: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:E2:63:64:9E:D1:65:F6:09:20:CC:F2:F3:36:4E:C4:C5:5B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19fcc3fd-ee66-311b-9685-3590c27c1b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0a:b1:f3:ab:c2:1d:83:6e:fa:33:d2:1b:f3:70:38:19:3d: da:0a:0a:61:17:12:62:cc:b9:98:b6:fb:74:a4:d3:8f:ba:a3: 6c:0e:26:e0:58:02:24:f9:db:c1:ad:c4:f5:f3:02:03:de:d9: ba:49:00:25:4c:08:17:e2:38:b0:48:1c:77:8e:07:a9:9a:7e: 7e:fd:9e:32:34:df:52:0d:47:c8:97:e9:d0:1a:f5:dc:dd:fd: 04:20:9b:ff:9f:da:be:05:90:a9:93:4c:a0:12:96:c9:f6:54: 3c:36:e8:70:c7:f8:c3:9f:fc:70:31:b6:20:80:6a:5c:29:e5: 10:4f:6d:d5:c0:76:66:2c:02:58:86:38:27:91:c0:36:1e:b8: a5:ae:70:4d:79:f7:2c:50:4f:c0:b9:be:9e:c1:10:1d:0d:74: 15:4d:53:e4:97:a1:ab:b7:3c:55:6d:b8:f3:e3:0d:91:78:2b: 02:d1:a0:c9:ce:c7:4f:f3:bd:2b:66:1f:43:2a:a0:90:86:fa: 88:a5:dc:35:af:22:9b:15:72:85:57:1c:4e:83:28:d0:c2:bd: 79:b3:0e:3a:cf:fc:de:b3:14:f3:fa:0e:0c:01:2a:1e:e0:64: f9:8e:35:f9:f2:07:77:31:87:bc:a3:76:85:ae:a8:b1:c4:fc: 51:22:f2:92 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5mVaPvgp0vLxRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MmVjMDRhNTMtZmE3YS00NTZlLTgyNWYtMzkzYzFlMTVjMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldAdOaJXTIosdFCHlfJLnDvYGu3s2EuB/gUW muGVt9ytobxApLWERGwVa59fwb03ouFBhqtNMxOkFoJGNfRUkEg5+QG3EUZqzIGM Beplvi4Q7OpAZ+yLtFbJI2nJgBQ4tCFCmEAVrHjnBNokG6MmyjpsJ28J9V/uuS7k xSt8fd+3qR0tlTrmfdlbs9cf3CLJYGQL/XLCGneZBiz6DxKI6+6qMqREfHakouIs mBaNtmRf9U4/ufQvHWdNpYIn98TQIj3q4AIRzJqfOEKuNZJ3yHzBK18vCjB+JUAf 1Z8AP2fUu7uOTftvo2bCAGO/mfgwTX7jFA//pOrtJ4Gw94IMRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMYG4mNkntFl9gkgzPLzNk7ExVupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTlmY2MzZmQtZWU2Ni0z MTFiLTk2ODUtMzU5MGMyN2MxYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6CrHzq8Idg276M9Ib83A4GT3aCgphFxJizLmY tvt0pNOPuqNsDibgWAIk+dvBrcT18wID3tm6SQAlTAgX4jiwSBx3jgepmn5+/Z4y NN9SDUfIl+nQGvXc3f0EIJv/n9q+BZCpk0ygEpbJ9lQ8Nuhwx/jDn/xwMbYggGpc KeUQT23VwHZmLAJYhjgnkcA2HrilrnBNefcsUE/Aub6ewRAdDXQVTVPkl6GrtzxV bbjz4w2ReCsC0aDJzsdP870rZh9DKqCQhvqIpdw1ryKbFXKFVxxOgyjQwr15sw46 z/zesxTz+g4MASoe4GT5jjX58gd3MYe8o3aFrqixxPxRIvKS -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:07 2025 by rpki-client