$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa File: 3ab73f9d-44f7-3713-aada-20aa6abfe251.roa (raw, json) Hash identifier: 7f3O5FR5jz740AG7vP5IoXgkhfIZu3wKdcbSoqlQJEo= Subject key identifier: 8F:6F:84:73:6B:6C:58:8A:33:56:FE:53:08:A4:C5:31:65:69:58:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE163E46CBABD940CE460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 397205 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e1:63:e4:6c:ba:bd:94:0c:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d81fb7b2-d910-4590-a944-f65ce86d7445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:31:a8:66:cc:42:3b:63:77:d7:4e:86:9d: 87:b6:b8:d8:50:13:4d:7b:ab:d3:6c:ec:d1:c0:e0: 97:3e:d4:37:c9:34:e9:14:46:74:08:73:66:b3:bd: b6:c1:16:8c:97:66:15:d2:80:e0:97:0e:67:b4:99: e0:3a:a1:1e:12:b8:77:14:c2:6d:e0:2a:ee:e8:dc: 99:99:c5:76:12:03:81:b0:c5:98:01:a8:b2:90:a8: 23:04:17:67:d4:25:cc:d5:1c:2b:75:05:de:6c:b7: a2:7f:df:07:6f:8b:d2:7c:34:38:85:4e:92:18:45: cc:bb:a1:87:af:9d:40:93:41:2d:b2:bb:e7:2e:9c: 14:33:a4:6e:11:76:87:2d:d7:19:cc:9e:c1:80:e1: ab:c7:b0:43:66:08:e8:db:3c:11:4d:97:51:d0:36: 6d:b4:7a:b1:44:1c:bf:9a:36:40:43:21:c4:af:6d: d6:8a:97:66:00:b3:e5:67:fa:83:ce:f9:f4:85:7e: 10:c7:41:37:4e:b4:d0:a3:12:b7:db:a4:2c:92:3b: 6a:f6:83:cf:3c:b6:04:42:2c:38:20:66:e2:a4:c2: a5:9e:03:3e:31:82:0a:a2:c7:b7:bb:2c:ac:a5:61: 2b:ab:23:65:8b:b5:cc:0a:dc:9d:42:af:62:44:e7: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:84:73:6B:6C:58:8A:33:56:FE:53:08:A4:C5:31:65:69:58:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:59:86:92:11:85:23:cb:87:c7:f0:32:e2:22:93:01:c5:d1: ef:c5:bb:48:85:df:22:d9:18:6a:53:00:39:41:13:9c:24:4d: c9:8b:3f:92:cc:70:30:f2:e7:67:5b:5f:13:d1:aa:f0:c2:68: 41:64:a0:19:06:33:bc:e8:8f:e8:4d:2a:4d:f5:39:58:38:f0: 86:50:11:8b:e8:76:cc:d1:1e:bc:77:44:9c:f3:64:97:3a:86: 49:9e:d1:2d:b4:f6:55:eb:e8:71:2f:30:28:2c:6d:e9:ae:1f: ad:8a:5f:f7:5e:de:c8:17:d8:43:f1:cd:16:01:fc:a0:bf:7f: 27:79:73:dc:37:73:6a:86:0d:e8:81:b5:3f:c1:ea:fc:0b:1c: 01:d4:8c:55:d1:d2:10:3d:4e:e5:a9:d5:4c:8f:9d:53:63:0b: e7:0f:71:d4:28:c1:56:d2:30:84:a3:18:b6:5d:8d:fd:fc:26: 2a:53:92:24:4c:2e:3a:0c:d1:2b:48:67:eb:aa:22:db:a1:46: 92:93:a8:d2:48:06:c8:d6:d7:35:04:e1:aa:30:a7:32:78:7c: 6f:d8:d3:d0:78:98:c4:24:2e:96:dd:83:62:af:60:b6:c2:d1: 69:14:d1:4c:40:d7:24:5b:bc:59:ef:3d:a8:f5:47:b9:46:85: 2c:fe:14:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+Fj5Gy6vZQM5GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDgxZmI3YjItZDkxMC00NTkwLWE5NDQtZjY1Y2U4NmQ3NDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLIxqGbMQjtjd9dOhp2HtrjYUBNNe6vTbOzR wOCXPtQ3yTTpFEZ0CHNms722wRaMl2YV0oDglw5ntJngOqEeErh3FMJt4Cru6NyZ mcV2EgOBsMWYAaiykKgjBBdn1CXM1RwrdQXebLeif98Hb4vSfDQ4hU6SGEXMu6GH r51Ak0EtsrvnLpwUM6RuEXaHLdcZzJ7BgOGrx7BDZgjo2zwRTZdR0DZttHqxRBy/ mjZAQyHEr23WipdmALPlZ/qDzvn0hX4Qx0E3TrTQoxK326Qskjtq9oPPPLYEQiw4 IGbipMKlngM+MYIKose3uyyspWErqyNli7XMCtydQq9iROd4JQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI9vhHNrbFiKM1b+UwikxTFlaVhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2FiNzNmOWQtNDRmNy0z NzEzLWFhZGEtMjBhYTZhYmZlMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB9WYaSEYUjy4fH8DLiIpMBxdHvxbtIhd8i2Rhq UwA5QROcJE3Jiz+SzHAw8udnW18T0arwwmhBZKAZBjO86I/oTSpN9TlYOPCGUBGL 6HbM0R68d0Sc82SXOoZJntEttPZV6+hxLzAoLG3prh+til/3Xt7IF9hD8c0WAfyg v38neXPcN3Nqhg3ogbU/wer8CxwB1IxV0dIQPU7lqdVMj51TYwvnD3HUKMFW0jCE oxi2XY39/CYqU5IkTC46DNErSGfrqiLboUaSk6jSSAbI1tc1BOGqMKcyeHxv2NPQ eJjEJC6W3YNir2C2wtFpFNFMQNckW7xZ7z2o9Ue5RoUs/hRh -----END CERTIFICATE-----Generated at Mon Aug 4 15:34:45 2025 by rpki-client