$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa File: 6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa (raw, json) Hash identifier: 2U+hjqwokGiKbkTkRajxjX2v6mn2K7c/cqbsSyr6xKI= Subject key identifier: 7A:C3:9A:F0:EE:F7:B1:64:74:A5:80:F2:EF:75:BC:60:20:01:99:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B95EED8FD28E8732A1180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396590 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:95:ee:d8:fd:28:e8:73:2a:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d17e4e34-5cfe-4b65-9044-08ed69c3f6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:a9:89:e3:04:ee:d0:6f:9a:c7:cb:2a:72: d5:9c:83:5c:9f:35:c7:cf:df:fa:4c:81:a8:e5:9d: 54:91:70:d2:2d:5d:52:fe:4c:80:54:2f:c7:41:e8: 34:e7:3a:71:d2:23:91:f9:78:a6:67:68:0f:d1:ec: 83:4a:00:71:52:76:b2:49:52:7f:86:a3:d0:c2:c3: 02:c0:59:24:1d:3f:68:3a:e2:3a:e6:36:78:02:d3: 19:db:e7:89:02:81:19:de:d4:09:90:0d:44:6f:77: 3d:b7:3a:3d:ac:be:f1:25:bb:12:9d:02:c5:83:10: 5d:f0:46:4b:1a:3e:d7:0a:b8:ba:92:c1:71:0f:4f: 34:6f:2e:59:ec:32:6b:03:db:12:ae:21:42:cb:4c: e1:94:13:9e:61:48:d2:65:76:23:76:2f:0d:71:79: ba:f8:d8:96:68:5e:c7:db:9b:06:31:d0:eb:bb:8d: 58:5c:fc:0f:0f:58:cd:ff:63:c9:46:ee:6e:3b:5e: a4:33:36:32:89:56:f9:f1:a1:f6:4e:e9:71:6d:0e: c3:06:78:17:89:54:af:76:81:8e:4a:cd:da:28:36: 14:df:d2:06:87:a8:df:70:aa:c6:bf:ed:dd:3b:46: 47:68:c9:64:17:29:9d:44:f0:8c:a8:85:d1:05:84: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C3:9A:F0:EE:F7:B1:64:74:A5:80:F2:EF:75:BC:60:20:01:99:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6d:33:06:b6:1f:63:da:6a:d4:48:7f:fe:3b:93:42:00:b3: a4:ed:2b:9e:67:78:91:38:b1:78:d9:a8:ca:69:e6:6e:89:fd: b3:01:5a:1e:c2:33:43:87:22:a5:85:02:7e:d5:88:17:e4:8c: 74:d0:75:11:68:6b:a4:3b:99:c6:36:53:01:f7:bc:a4:b0:c4: 0f:85:c9:bc:81:df:02:4a:23:59:f4:69:2e:90:05:90:2e:bd: f4:37:66:70:f2:51:8c:f9:2d:eb:ee:3e:22:82:49:24:0e:01: aa:3e:ad:b4:37:1f:6f:b6:df:64:a5:38:ea:37:0a:e2:07:70: ac:4c:11:c9:36:45:94:59:89:c0:0d:5f:03:b6:26:63:44:76: 37:e0:c7:7f:93:69:2f:5b:92:c8:05:58:3d:ad:79:86:53:1c: 86:93:30:b9:8c:41:50:49:a0:9a:19:0c:bc:29:c1:cd:64:f1: b0:b0:2b:0a:99:3c:7a:0a:13:a0:f6:4b:3f:46:92:60:94:d5: bd:1d:64:f7:21:f3:c0:e1:db:ad:8c:1c:6b:69:5e:c4:7f:e9: b6:cb:78:1f:e7:94:e2:ed:66:67:be:e5:86:07:7f:52:e8:a3: fc:52:6b:73:1d:1f:50:48:e0:4a:b0:c1:22:76:7e:8a:6e:07: 3e:40:dc:d1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5Xu2P0o6HMqEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDE3ZTRlMzQtNWNmZS00YjY1LTkwNDQtMDhlZDY5YzNmNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCapieME7tBvmsfLKnLVnINcnzXHz9/6TIGo 5Z1UkXDSLV1S/kyAVC/HQeg05zpx0iOR+XimZ2gP0eyDSgBxUnaySVJ/hqPQwsMC wFkkHT9oOuI65jZ4AtMZ2+eJAoEZ3tQJkA1Eb3c9tzo9rL7xJbsSnQLFgxBd8EZL Gj7XCri6ksFxD080by5Z7DJrA9sSriFCy0zhlBOeYUjSZXYjdi8NcXm6+NiWaF7H 25sGMdDru41YXPwPD1jN/2PJRu5uO16kMzYyiVb58aH2TulxbQ7DBngXiVSvdoGO Ss3aKDYU39IGh6jfcKrGv+3dO0ZHaMlkFymdRPCMqIXRBYSsWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHrDmvDu97FkdKWA8u91vGAgAZm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmYzOGFhOTktYWFlMi0z Yjk2LTlhMDQtYTRhNmM2NjQ5OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCBbTMGth9j2mrUSH/+O5NCALOk7SueZ3iROLF4 2ajKaeZuif2zAVoewjNDhyKlhQJ+1YgX5Ix00HURaGukO5nGNlMB97yksMQPhcm8 gd8CSiNZ9GkukAWQLr30N2Zw8lGM+S3r7j4igkkkDgGqPq20Nx9vtt9kpTjqNwri B3CsTBHJNkWUWYnADV8DtiZjRHY34Md/k2kvW5LIBVg9rXmGUxyGkzC5jEFQSaCa GQy8KcHNZPGwsCsKmTx6ChOg9ks/RpJglNW9HWT3IfPA4dutjBxraV7Ef+m2y3gf 55Ti7WZnvuWGB39S6KP8UmtzHR9QSOBKsMEidn6Kbgc+QNzR -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:43 2025 by rpki-client