$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa File: 2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa (raw, json) Hash identifier: kQPhhlNQXpGbR7bovncIiST+A4T1csDAV3OJnyLZs/o= Subject key identifier: 6E:4B:2A:57:E7:A8:13:33:5C:5E:68:1A:52:D0:4D:AE:42:70:BE:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B915C793939B1FB4D1680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397211 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:91:5c:79:39:39:b1:fb:4d:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=b7700ac2-5300-4aed-b011-b95e9f100255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:a0:f9:04:ba:7f:f5:df:1b:89:dd:8a:4e: a8:d4:a4:07:37:8f:42:3d:58:b0:f4:ab:09:ed:03: 76:f0:94:45:9e:72:67:7b:b9:64:ac:d8:7d:1d:44: 6f:0f:4c:52:a6:2f:85:32:aa:1a:3d:64:85:b7:3c: e5:47:a7:fd:54:15:48:12:6f:61:dc:43:5a:3a:5b: e3:af:ae:cc:0d:ab:aa:c2:34:be:27:23:c7:54:04: 16:50:e1:47:bf:00:5a:6c:ac:98:c1:c7:2b:71:63: ea:cd:82:ca:06:97:cc:36:77:05:29:fe:cf:3b:7c: d9:ff:13:88:54:c8:3c:99:35:5a:90:72:9d:6a:7d: 9b:e3:a4:30:7b:de:e1:53:a5:13:8b:ae:90:29:3f: 23:61:0a:65:60:6e:27:9b:2e:b0:77:c8:cc:03:f3: 65:2c:d0:c4:5c:3f:22:61:23:dc:82:71:c2:47:01: 70:d9:fd:36:2c:61:ab:cd:63:cc:fc:86:86:44:0e: bd:40:af:3d:97:29:93:5b:a8:2e:ec:8f:cc:ec:29: 32:5a:8a:55:06:9a:66:31:c9:e1:e4:3d:26:d7:1a: f5:0e:9d:e0:16:96:2b:aa:c6:38:65:0c:51:55:58: bc:8f:9c:8c:70:cc:5f:d3:16:28:0c:5a:79:0e:72: 55:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4B:2A:57:E7:A8:13:33:5C:5E:68:1A:52:D0:4D:AE:42:70:BE:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2f:f4:d3:d7:43:05:e0:27:28:f4:8f:ab:85:0e:f5:38:18: ae:52:11:d4:c9:16:cf:70:32:95:3c:8c:13:fb:30:55:79:97: 4d:b2:4a:cb:f4:a5:80:fe:97:ed:30:e3:80:12:1b:68:f1:69: d9:cc:8a:ff:65:6f:0e:80:d9:67:a8:33:a5:98:46:3c:e5:66: 1c:bb:ec:d2:84:97:1c:cb:85:78:5d:41:ef:3f:3e:d8:3c:b9: 02:e4:74:c1:92:26:2d:d9:7c:af:09:d3:8a:c6:5a:68:9b:07: e5:52:b7:73:7d:2a:a8:51:aa:a1:5f:72:0e:66:24:7e:d1:7e: 51:3e:9b:0b:aa:34:5a:e9:55:3b:84:d0:a1:33:85:72:2c:11: 1f:da:c8:38:a0:87:5a:7c:46:32:88:e6:d8:b5:3c:71:dd:c3: 7d:74:53:43:28:48:a7:e2:6b:7f:0e:61:75:b5:c3:ad:09:15: 39:8d:eb:2c:ee:1f:c0:4b:ad:3a:69:90:12:d3:fc:8a:67:cf: 2e:fc:0c:56:56:66:b9:f1:97:90:d9:f9:11:99:aa:3e:1a:8a: 9b:02:4a:44:06:4a:b8:8e:c0:4f:eb:6f:8e:dc:d1:b9:63:b1: e9:54:64:18:71:f7:5a:5e:23:b5:f9:a3:1e:05:7b:24:d4:67: 32:8d:b9:f2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5FceTk5sftNFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk Yjc3MDBhYzItNTMwMC00YWVkLWIwMTEtYjk1ZTlmMTAwMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Kg+QS6f/XfG4ndik6o1KQHN49CPViw9KsJ 7QN28JRFnnJne7lkrNh9HURvD0xSpi+FMqoaPWSFtzzlR6f9VBVIEm9h3ENaOlvj r67MDauqwjS+JyPHVAQWUOFHvwBabKyYwccrcWPqzYLKBpfMNncFKf7PO3zZ/xOI VMg8mTVakHKdan2b46Qwe97hU6UTi66QKT8jYQplYG4nmy6wd8jMA/NlLNDEXD8i YSPcgnHCRwFw2f02LGGrzWPM/IaGRA69QK89lymTW6gu7I/M7CkyWopVBppmMcnh 5D0m1xr1Dp3gFpYrqsY4ZQxRVVi8j5yMcMxf0xYoDFp5DnJVnwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG5LKlfnqBMzXF5oGlLQTa5CcL7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmFiNGE0YWEtODY3Ni0z MTk4LWIwZmQtNzhhNTE0NzFkYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASL/TT10MF4Cco9I+rhQ71OBiuUhHUyRbPcDKV PIwT+zBVeZdNskrL9KWA/pftMOOAEhto8WnZzIr/ZW8OgNlnqDOlmEY85WYcu+zS hJccy4V4XUHvPz7YPLkC5HTBkiYt2XyvCdOKxlpomwflUrdzfSqoUaqhX3IOZiR+ 0X5RPpsLqjRa6VU7hNChM4VyLBEf2sg4oIdafEYyiObYtTxx3cN9dFNDKEin4mt/ DmF1tcOtCRU5jess7h/AS606aZAS0/yKZ88u/AxWVma58ZeQ2fkRmao+GoqbAkpE Bkq4jsBP62+O3NG5Y7HpVGQYcfdaXiO1+aMeBXsk1Gcyjbny -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:58 2025 by rpki-client