$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa File: 37af780a-7ad0-3a7d-8e72-f9650b109811.roa (raw, json) Hash identifier: WthQ/6DL3Doq8VB8bzjNDHCLVXC0kjXpQkzhW4v0pdg= Subject key identifier: FA:E0:E1:CC:FC:91:3B:F5:01:29:24:B1:46:8A:E6:3F:2C:E4:A4:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9615E5246DEA59A31180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 20172 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:96:15:e5:24:6d:ea:59:a3:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=76bb4234-4f9e-4499-88a4-bcf3fcc486bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:f8:ce:df:c5:3a:4f:bc:2f:85:b9:62:48: 0b:f5:d8:ec:af:60:19:10:b4:fc:15:88:43:c4:bf: 90:d9:70:79:f9:31:41:88:c6:50:55:8f:0c:53:bc: e1:62:19:86:74:5c:92:e9:aa:bc:dd:a5:1a:9f:ce: 2e:45:1d:5b:4d:1d:72:25:f6:74:0e:c6:97:b5:0d: 56:d3:ac:e0:a1:87:7f:66:2f:27:1c:61:67:ab:96: 73:82:97:d6:6a:b5:51:28:76:70:4f:71:81:26:28: 1f:53:62:05:1b:65:bf:36:30:a5:c3:a7:35:3c:0a: b9:45:66:57:71:79:ba:38:5b:6c:62:74:af:3e:a9: 5e:f3:d7:bd:89:ff:16:4a:9f:b1:80:84:15:49:be: b6:30:d4:01:e4:02:1d:49:b6:e6:24:bd:b8:54:12: 29:30:3e:07:b1:6b:1f:b3:10:0f:cf:3b:1a:b9:7e: 9d:0f:62:7f:52:cb:a4:80:54:d2:7b:84:34:45:7e: a0:0a:e2:9d:f2:f7:7d:c6:77:7f:e3:5e:4d:55:b1: 04:c1:fa:4a:bd:75:88:ed:63:0a:ea:ca:32:79:77: 6d:1b:cc:59:e6:9e:0a:6c:0e:e8:7f:da:b2:fb:1f: 2c:03:7f:72:04:79:b6:8e:21:a2:62:7e:2f:7e:58: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E0:E1:CC:FC:91:3B:F5:01:29:24:B1:46:8A:E6:3F:2C:E4:A4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ff:55:00:b3:27:b2:b1:81:44:8d:7d:43:8a:4a:e7:cd:ef: 71:5b:73:cd:f5:9d:25:77:0d:ec:83:0f:10:90:9f:c5:71:8d: 8e:db:11:c3:45:71:e7:45:05:9c:50:cb:dd:36:2c:f4:5d:45: ad:e5:27:26:91:4b:35:21:99:b0:8a:80:98:1c:45:f5:ec:26: 10:6a:81:d8:bb:74:5f:73:6d:49:c6:34:79:0d:1c:ed:b0:83: 0b:82:f5:02:3c:67:33:6f:29:c2:63:7e:8e:67:14:e2:74:37: d6:21:e1:8b:17:03:41:39:cb:26:c6:a2:e7:28:a7:3e:b8:a5: 65:d4:10:c5:56:e6:5a:03:b9:fa:27:14:69:55:2e:f8:2b:de: d6:79:ee:20:05:65:ce:ac:c9:ed:e0:ba:8f:76:07:b4:fa:1e: 25:9b:e9:5a:86:22:f1:53:bc:f6:c3:c0:87:35:67:ab:76:00: c3:68:2d:e3:88:43:22:bc:dc:71:6e:a5:e8:83:44:f2:e1:a5: 42:e7:ae:c0:14:da:c0:3c:3b:70:c3:e5:d0:0f:fb:4e:d1:9b: 9f:f5:30:3b:f4:63:81:cc:a9:2b:84:e0:46:98:21:b5:b4:cf: f0:08:df:e9:06:7e:ab:b3:a1:c6:ef:82:f8:b3:13:90:ab:8f: fc:da:de:ba -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5YV5SRt6lmjEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NzZiYjQyMzQtNGY5ZS00NDk5LTg4YTQtYmNmM2ZjYzQ4NmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8D4zt/FOk+8L4W5YkgL9djsr2AZELT8FYhD xL+Q2XB5+TFBiMZQVY8MU7zhYhmGdFyS6aq83aUan84uRR1bTR1yJfZ0DsaXtQ1W 06zgoYd/Zi8nHGFnq5ZzgpfWarVRKHZwT3GBJigfU2IFG2W/NjClw6c1PAq5RWZX cXm6OFtsYnSvPqle89e9if8WSp+xgIQVSb62MNQB5AIdSbbmJL24VBIpMD4HsWsf sxAPzzsauX6dD2J/UsukgFTSe4Q0RX6gCuKd8vd9xnd/415NVbEEwfpKvXWI7WMK 6soyeXdtG8xZ5p4KbA7of9qy+x8sA39yBHm2jiGiYn4vflhZPQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPrg4cz8kTv1ASkksUaK5j8s5KQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzdhZjc4MGEtN2FkMC0z YTdkLThlNzItZjk2NTBiMTA5ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBE/1UAsyeysYFEjX1Dikrnze9xW3PN9Z0ldw3s gw8QkJ/FcY2O2xHDRXHnRQWcUMvdNiz0XUWt5ScmkUs1IZmwioCYHEX17CYQaoHY u3Rfc21JxjR5DRztsIMLgvUCPGczbynCY36OZxTidDfWIeGLFwNBOcsmxqLnKKc+ uKVl1BDFVuZaA7n6JxRpVS74K97Wee4gBWXOrMnt4LqPdge0+h4lm+lahiLxU7z2 w8CHNWerdgDDaC3jiEMivNxxbqXog0Ty4aVC567AFNrAPDtww+XQD/tO0Zuf9TA7 9GOBzKkrhOBGmCG1tM/wCN/pBn6rs6HG74L4sxOQq4/82t66 -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:44 2025 by rpki-client