$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659d3322-be64-3219-a49c-5740744e0e25.roa File: 659d3322-be64-3219-a49c-5740744e0e25.roa (raw, json) Hash identifier: 3+mPA8OSLhM9WENY+mw6S/MiRCmQakJ+Nqb3aY4gtRs= Subject key identifier: 6E:04:86:C8:E9:B5:42:07:8B:2C:AC:4E:5D:1A:D6:74:69:0B:EA:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B956DDAB1DB9A9874A880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659d3322-be64-3219-a49c-5740744e0e25.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396569 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:95:6d:da:b1:db:9a:98:74:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=1170d752-775d-405d-9441-7d770dafac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f1:37:8e:c9:d2:86:5b:bb:be:d2:a5:0d:4d: 26:5a:67:78:7b:ec:bf:a1:ee:c4:0a:bc:95:9c:b8: 7a:8b:69:e8:1a:68:d5:a9:91:cd:d9:d5:7d:2a:36: bf:cb:c3:b9:51:9e:15:23:9f:b0:cf:54:4e:4f:b0: 20:bb:20:e3:56:50:f9:7d:37:7f:8b:af:d9:a9:02: ac:bd:31:c0:69:ca:85:69:73:71:02:c2:ad:e7:4c: b5:e1:97:ee:43:44:09:99:31:ac:97:68:9e:a0:4e: 84:ee:68:61:e3:22:b2:34:a7:43:27:c8:06:de:07: 86:06:2d:78:83:dc:80:9f:81:61:f2:43:34:51:64: ca:38:78:45:36:84:41:cf:b8:3d:d6:e2:48:22:85: 83:64:f9:52:e7:c3:5d:15:f9:c7:b8:56:79:62:1d: 05:2c:41:61:1b:ce:01:0a:ad:73:28:d9:dc:43:cc: 82:3a:da:37:3c:6d:db:6e:e7:c4:7d:50:30:74:c3: 3d:8f:ba:9e:78:2c:5a:93:04:82:60:28:fd:79:73: 3a:75:0a:7d:2e:b2:96:b7:67:38:fe:65:87:92:50: 15:25:57:44:8d:dd:f1:c2:3b:95:eb:5c:96:e6:5c: 0a:3a:25:b1:c0:e9:0a:92:cd:f6:e6:24:3d:97:e3: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:04:86:C8:E9:B5:42:07:8B:2C:AC:4E:5D:1A:D6:74:69:0B:EA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659d3322-be64-3219-a49c-5740744e0e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e9:9f:b5:bc:38:75:41:09:b0:bc:da:f7:3e:a5:43:0d:9f: e4:57:8b:df:f7:4c:91:91:72:32:00:00:fe:3e:aa:92:1d:69: 9c:d4:ad:c5:bc:6f:24:da:00:36:7f:f7:ed:4d:d8:96:79:ca: c9:fb:e4:7b:f4:95:da:59:9a:77:46:55:e6:87:ea:89:80:3d: 40:24:5c:00:df:7b:19:a3:da:59:bf:8e:88:eb:b8:a1:9d:f6: 57:f5:11:57:0b:5d:52:15:db:c5:99:ec:45:e5:07:95:c9:53: 59:80:18:7b:c4:78:25:14:0c:c9:de:79:25:c5:67:f3:8f:67: 52:4d:e4:fd:87:a2:64:ae:d3:ed:2b:02:28:02:47:f1:44:9e: 23:f4:dc:62:80:71:05:20:cd:4d:39:d8:e0:b8:df:0d:79:92: a9:b3:d7:70:db:8c:24:fe:ea:e8:26:35:92:40:77:46:36:cd: 67:50:ef:4f:9f:5c:66:e5:78:e6:f0:f9:e5:47:1c:c5:29:f3: a9:fa:47:07:04:d8:99:ee:aa:0f:7a:ee:e7:9b:92:08:b6:f3: 80:c3:61:0d:4d:c1:30:11:c8:5d:f5:d2:57:1c:b0:a7:6f:ac: 7c:e5:d1:5c:e1:74:27:0f:00:20:ff:a4:0b:df:48:ad:cc:3d: 9e:4e:8c:14 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5Vt2rHbmph0qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MTE3MGQ3NTItNzc1ZC00MDVkLTk0NDEtN2Q3NzBkYWZhYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvE3jsnShlu7vtKlDU0mWmd4e+y/oe7ECryV nLh6i2noGmjVqZHN2dV9Kja/y8O5UZ4VI5+wz1ROT7AguyDjVlD5fTd/i6/ZqQKs vTHAacqFaXNxAsKt50y14ZfuQ0QJmTGsl2ieoE6E7mhh4yKyNKdDJ8gG3geGBi14 g9yAn4Fh8kM0UWTKOHhFNoRBz7g91uJIIoWDZPlS58NdFfnHuFZ5Yh0FLEFhG84B Cq1zKNncQ8yCOto3PG3bbufEfVAwdMM9j7qeeCxakwSCYCj9eXM6dQp9LrKWt2c4 /mWHklAVJVdEjd3xwjuV61yW5lwKOiWxwOkKks325iQ9l+OAHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG4EhsjptUIHiyysTl0a1nRpC+pGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjU5ZDMzMjItYmU2NC0z MjE5LWE0OWMtNTc0MDc0NGUwZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBI6Z+1vDh1QQmwvNr3PqVDDZ/kV4vf90yRkXIy AAD+PqqSHWmc1K3FvG8k2gA2f/ftTdiWecrJ++R79JXaWZp3RlXmh+qJgD1AJFwA 33sZo9pZv46I67ihnfZX9RFXC11SFdvFmexF5QeVyVNZgBh7xHglFAzJ3nklxWfz j2dSTeT9h6JkrtPtKwIoAkfxRJ4j9NxigHEFIM1NOdjguN8NeZKps9dw24wk/uro JjWSQHdGNs1nUO9Pn1xm5Xjm8PnlRxzFKfOp+kcHBNiZ7qoPeu7nm5IItvOAw2EN TcEwEchd9dJXHLCnb6x85dFc4XQnDwAg/6QL30itzD2eTowU -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:18 2025 by rpki-client