$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa File: 4add2be0-489a-3b89-b772-9357bf488d7c.roa (raw, json) Hash identifier: BPDqoSfVr1Zrfc9PwbNb507D74XhJT0GjXL1JkCkar4= Subject key identifier: B8:6B:B1:7C:9F:97:FA:60:EE:3C:8A:16:11:3E:63:03:2F:BE:FC:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B95E1476A3616C01CA440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397197 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:95:e1:47:6a:36:16:c0:1c:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=480b9da7-74b9-4a47-84ae-1fd3c1dae6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:a9:bf:41:52:b4:06:72:b5:c0:f3:88:22: 68:99:2b:a2:0f:d3:c7:97:2f:ac:cb:5d:44:74:1d: 9a:c5:2b:a9:70:05:3c:85:07:22:75:ae:59:4a:ad: da:2c:64:c4:88:b6:e8:66:8d:4e:42:7c:3b:e2:01: b0:bc:fd:30:e4:2c:c2:9d:fc:2c:60:45:66:78:8b: 68:cb:24:01:bf:a2:df:72:8e:27:c8:00:6d:be:b8: 73:38:ec:8c:5a:9f:a7:d6:b9:45:63:ec:e6:d8:a4: 1a:46:57:a8:4f:2d:a6:e4:e5:05:47:1d:f6:b5:d6: f0:20:21:18:4d:1f:e7:65:6a:7c:e4:40:64:dd:9a: 42:b1:90:5a:c7:1e:a7:75:be:93:85:0d:e1:8a:4b: dd:da:1f:22:45:fa:a0:19:16:bb:59:29:9b:e8:58: 97:bd:b4:29:0c:c9:41:7d:a8:30:5a:78:15:46:9b: 99:3e:09:22:67:a2:f8:5f:6e:78:40:31:23:dc:aa: 10:3e:ec:c8:5a:cb:70:4c:5e:2d:01:80:01:c2:3a: a1:66:58:b4:6c:df:07:05:26:71:d5:85:77:b0:58: 18:43:48:5f:27:0b:61:ac:79:b2:9e:cf:41:e7:77: 40:ab:f3:3e:c6:df:61:98:0b:ec:9b:8a:d8:94:17: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6B:B1:7C:9F:97:FA:60:EE:3C:8A:16:11:3E:63:03:2F:BE:FC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:99:4b:85:63:54:78:49:94:45:65:4f:39:4c:9b:6c:ba:05: e7:df:78:71:c2:84:5e:4f:d4:91:6b:30:40:09:5c:61:f4:f6: 50:e5:ac:38:2d:c4:a1:3d:66:39:45:35:33:0b:1a:16:26:12: 8b:e6:52:df:4b:08:8e:4d:f8:97:b6:0a:ce:cb:2d:13:a6:3e: 67:99:16:04:48:8b:81:52:0e:3f:f0:e8:84:2b:a2:df:a3:22: d6:97:f3:4e:f9:4b:f5:7d:16:65:c4:93:35:78:f3:4a:f8:ad: c1:65:af:55:b3:95:78:e0:9b:4a:2d:04:2d:c9:ab:3b:e5:98: e2:3e:20:94:90:e0:fc:a6:e3:55:de:8f:45:c7:71:ce:18:cd: e9:36:b8:57:29:a3:6d:fc:38:c3:b6:f6:2a:c1:44:67:e2:44: 20:0c:19:24:c5:85:7c:9a:63:75:94:56:09:a1:6b:ed:e2:3d: be:0f:f9:82:fe:e7:1c:59:2d:69:3b:99:2f:7c:86:66:ed:74: 38:12:d4:b9:a5:07:76:90:7b:02:12:0d:d7:29:34:09:4a:86: a3:41:20:65:0f:07:1d:5f:3d:58:60:15:cc:17:11:0e:df:cc: 3f:96:d4:ec:48:f8:9c:f9:87:ad:78:bd:32:e1:41:93:22:44: 8f:19:ed:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5XhR2o2FsAcpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NDgwYjlkYTctNzRiOS00YTQ3LTg0YWUtMWZkM2MxZGFlNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR2pv0FStAZytcDziCJomSuiD9PHly+sy11E dB2axSupcAU8hQcida5ZSq3aLGTEiLboZo1OQnw74gGwvP0w5CzCnfwsYEVmeIto yyQBv6Lfco4nyABtvrhzOOyMWp+n1rlFY+zm2KQaRleoTy2m5OUFRx32tdbwICEY TR/nZWp85EBk3ZpCsZBaxx6ndb6ThQ3hikvd2h8iRfqgGRa7WSmb6FiXvbQpDMlB fagwWngVRpuZPgkiZ6L4X254QDEj3KoQPuzIWstwTF4tAYABwjqhZli0bN8HBSZx 1YV3sFgYQ0hfJwthrHmyns9B53dAq/M+xt9hmAvsm4rYlBdT/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLhrsXyfl/pg7jyKFhE+YwMvvvxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFkZDJiZTAtNDg5YS0z Yjg5LWI3NzItOTM1N2JmNDg4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQABmUuFY1R4SZRFZU85TJtsugXn33hxwoReT9SR azBACVxh9PZQ5aw4LcShPWY5RTUzCxoWJhKL5lLfSwiOTfiXtgrOyy0Tpj5nmRYE SIuBUg4/8OiEK6LfoyLWl/NO+Uv1fRZlxJM1ePNK+K3BZa9Vs5V44JtKLQQtyas7 5ZjiPiCUkOD8puNV3o9Fx3HOGM3pNrhXKaNt/DjDtvYqwURn4kQgDBkkxYV8mmN1 lFYJoWvt4j2+D/mC/uccWS1pO5kvfIZm7XQ4EtS5pQd2kHsCEg3XKTQJSoajQSBl DwcdXz1YYBXMFxEO38w/ltTsSPic+YeteL0y4UGTIkSPGe2l -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:52 2025 by rpki-client