$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4eb3a03c-6d3e-32cd-8340-534fd4086d5f.roa File: 4eb3a03c-6d3e-32cd-8340-534fd4086d5f.roa (raw, json) Hash identifier: /Amv6aextvtY+DCOE6nuWn5h+c/oS9O8qVfR7pcNpf8= Subject key identifier: 52:C8:A7:19:1F:99:C8:44:73:B5:59:B5:C3:32:FC:C0:71:97:33:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9BFFFD2C4BDF03D79A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4eb3a03c-6d3e-32cd-8340-534fd4086d5f.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 36627 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9b:ff:fd:2c:4b:df:03:d7:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=81bd9b5c-a3d5-448f-8d4d-59dfa0f1cd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:ef:ed:1f:70:34:c5:c5:8c:d8:bd:32:66: 24:87:45:40:4a:c7:d1:71:15:08:5e:92:8a:cf:51: a1:6c:20:d2:27:fe:50:32:47:35:4c:b5:07:7f:86: 2f:cc:a6:c1:33:3f:50:49:c0:f6:d8:ee:bd:62:ca: 4a:2c:30:4f:88:76:a4:7b:a6:73:43:41:73:3f:b0: ec:5a:6f:9a:5f:02:a2:71:29:c7:f6:80:e6:e9:1b: 89:13:50:b4:c8:cf:6c:ed:40:c6:b1:1d:e3:da:2a: b3:25:4f:44:06:4b:0a:48:b7:50:5a:9e:fc:4c:8d: 18:94:a5:f2:99:d0:cb:f7:6b:c5:bb:c0:55:78:6d: 63:5f:ff:67:7b:89:70:f0:29:b7:44:f0:65:ff:72: 1f:70:bd:32:de:0d:81:5a:0e:c4:df:a5:e9:74:97: 58:f3:6b:dc:1f:4d:70:a4:09:d4:0c:1d:ab:86:56: 12:a5:51:d6:70:6b:08:aa:7b:25:95:f1:9f:95:53: f3:46:91:e5:62:72:1f:a4:b9:44:b4:24:b0:02:5e: 17:ab:9a:a1:04:d9:dc:64:b3:fd:a5:d1:3d:fc:89: da:0b:18:5c:17:22:e3:09:ca:04:c6:2b:c3:88:e3: 6b:db:02:17:56:c2:82:f9:12:de:fa:94:cd:3b:47: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C8:A7:19:1F:99:C8:44:73:B5:59:B5:C3:32:FC:C0:71:97:33:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4eb3a03c-6d3e-32cd-8340-534fd4086d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7c:6e:ad:20:cd:4d:1c:8a:d8:ad:95:c1:cf:f3:ce:8e:79: f3:82:7b:43:a0:bd:3e:73:06:8e:13:51:62:f9:20:fd:75:91: 02:0e:d0:68:34:0b:06:8e:1d:31:a0:f4:5c:73:d0:f3:70:ba: 01:de:c1:fd:79:58:54:7c:ef:75:4b:56:ee:87:e9:b2:7e:74: fc:4e:b5:2f:79:a7:a3:c7:c4:85:f4:32:41:32:f0:02:df:26: 13:51:05:b7:75:e2:1a:2c:7d:f8:7c:aa:d9:3e:69:11:66:e5: d9:e6:50:a5:01:a8:cc:47:75:1d:fb:e5:f1:2f:80:7a:3e:3e: b7:54:c0:fd:a0:da:36:69:ed:7a:d2:76:89:b3:eb:55:a1:11: f6:26:c0:8f:f5:b0:0a:a6:4f:13:a0:b6:e9:bc:55:0e:6c:09: 77:fc:98:f7:b7:56:b3:82:a4:d1:00:bf:31:d7:e5:a6:d4:1b: a2:58:cd:b2:77:03:d6:39:3b:c4:17:8a:9e:59:71:13:9f:14: d0:1d:ef:3c:6c:61:d5:11:f9:53:65:5f:20:3a:98:63:75:a8: df:8c:10:82:1b:e5:1e:ad:0a:4a:af:9a:ed:5f:bc:17:39:c1: 0c:aa:32:da:77:08:9a:d3:aa:51:a5:9f:f7:f4:a4:8b:c7:42: ad:43:58:e1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5v//SxL3wPXmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ODFiZDliNWMtYTNkNS00NDhmLThkNGQtNTlkZmEwZjFjZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJfv7R9wNMXFjNi9MmYkh0VASsfRcRUIXpKK z1GhbCDSJ/5QMkc1TLUHf4YvzKbBMz9QScD22O69YspKLDBPiHake6ZzQ0FzP7Ds Wm+aXwKicSnH9oDm6RuJE1C0yM9s7UDGsR3j2iqzJU9EBksKSLdQWp78TI0YlKXy mdDL92vFu8BVeG1jX/9ne4lw8Cm3RPBl/3IfcL0y3g2BWg7E36XpdJdY82vcH01w pAnUDB2rhlYSpVHWcGsIqnsllfGflVPzRpHlYnIfpLlEtCSwAl4Xq5qhBNncZLP9 pdE9/InaCxhcFyLjCcoExivDiONr2wIXVsKC+RLe+pTNO0dZjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFLIpxkfmchEc7VZtcMy/MBxlzP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGViM2EwM2MtNmQzZS0z MmNkLTgzNDAtNTM0ZmQ0MDg2ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6fG6tIM1NHIrYrZXBz/POjnnzgntDoL0+cwaO E1Fi+SD9dZECDtBoNAsGjh0xoPRcc9DzcLoB3sH9eVhUfO91S1buh+myfnT8TrUv eaejx8SF9DJBMvAC3yYTUQW3deIaLH34fKrZPmkRZuXZ5lClAajMR3Ud++XxL4B6 Pj63VMD9oNo2ae160naJs+tVoRH2JsCP9bAKpk8ToLbpvFUObAl3/Jj3t1azgqTR AL8x1+Wm1BuiWM2ydwPWOTvEF4qeWXETnxTQHe88bGHVEflTZV8gOphjdajfjBCC G+UerQpKr5rtX7wXOcEMqjLadwia06pRpZ/39KSLx0KtQ1jh -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:07 2025 by rpki-client