$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa File: 7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa (raw, json) Hash identifier: O68zobMpe1Ykcq4PHg/fwAfA1o5KHDTzdZurkDvBbaE= Subject key identifier: 3F:79:EB:C7:86:72:04:9B:5C:30:25:3C:68:F0:E9:42:9E:1D:33:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9B20A5D38B6B500E8B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396613 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9b:20:a5:d3:8b:6b:50:0e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d1cdac9d-8778-4f0b-8734-2d09edf25401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:19:f9:e6:e3:1f:7b:ce:e1:43:f8:b6:8f:68: e9:b0:39:d1:72:4c:5c:ed:2e:54:bc:6f:ac:8a:65: 8f:6f:16:63:5b:48:51:5d:56:8e:ab:21:b3:07:00: c7:8d:91:cd:01:6c:18:ac:75:bc:ef:32:1b:33:89: 25:da:7e:f6:7e:f6:fe:fd:71:7b:85:9f:89:af:de: ce:cf:ac:c6:f2:de:cb:ef:0d:36:5b:b6:ff:48:3f: 97:ab:b5:41:90:07:c6:eb:56:86:2e:00:3e:62:7a: 50:fe:47:36:97:ae:72:c8:18:e0:30:7a:9f:d8:56: 43:cb:30:93:c8:f4:7c:8c:01:59:81:b4:48:67:d1: e4:59:13:69:6d:5f:de:e4:af:b5:91:05:29:76:31: bf:91:e3:78:13:76:0a:25:46:da:91:d4:d8:f3:4c: e7:15:7c:69:cf:ee:de:d4:12:70:a1:24:4d:0d:ab: 53:2b:f5:43:91:b9:04:0b:3e:63:6e:76:6f:76:8e: b4:7e:90:ed:9e:bf:ed:9e:ba:27:bc:8f:7d:0a:25: 1f:d9:5e:6a:05:97:1b:c4:3c:0c:b8:df:b9:ec:c7: 9e:6e:15:b1:0d:6c:96:e6:09:25:fd:7c:16:9e:35: 72:18:cf:a5:19:1b:f7:7b:53:4f:74:ca:8d:65:fa: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:79:EB:C7:86:72:04:9B:5C:30:25:3C:68:F0:E9:42:9E:1D:33:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1b:33:b3:cf:7d:6f:39:24:cf:17:82:5a:37:a9:b4:5c:f3: 01:1e:88:dc:c8:d8:e0:a7:8f:b2:9c:cd:a3:23:6e:a3:41:1c: 1a:02:e2:8e:55:83:76:8a:b5:32:ec:d6:94:a4:b0:a5:f2:65: 67:8c:c8:d4:6f:13:a4:03:52:d2:b3:f2:15:8f:72:de:b4:3a: 8d:20:cb:f0:ce:b9:45:87:83:ae:ed:b5:ed:f2:3b:aa:bc:2d: 08:c9:db:0b:7c:7b:7a:6d:4b:84:ee:22:26:82:94:5f:be:fa: 57:7d:a0:d9:8c:29:d6:22:09:10:80:25:b9:4e:08:fd:7e:14: d3:d7:99:32:e0:e4:72:e3:31:f3:8f:12:95:75:56:e1:56:c8: ca:ab:69:87:fc:2e:6a:ea:47:5b:21:86:0c:9f:bd:0c:db:53: c9:fa:69:35:90:4d:7c:b6:22:ec:2d:74:76:64:c8:8c:3d:5c: 91:61:2c:50:ba:a0:55:ac:01:e5:85:21:4d:ae:6e:10:7d:2c: 8a:96:2c:4a:3d:9a:7e:fe:f8:a5:67:ea:83:79:d5:9f:12:44: bb:af:59:cc:06:a8:f6:bf:76:66:16:b7:40:41:8c:cd:f5:00: 6f:95:a2:8a:d3:98:4e:89:72:73:4e:5c:f8:9a:80:38:1f:e5: 16:ac:6a:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5sgpdOLa1AOi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDFjZGFjOWQtODc3OC00ZjBiLTg3MzQtMmQwOWVkZjI1NDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhn55uMfe87hQ/i2j2jpsDnRckxc7S5UvG+s imWPbxZjW0hRXVaOqyGzBwDHjZHNAWwYrHW87zIbM4kl2n72fvb+/XF7hZ+Jr97O z6zG8t7L7w02W7b/SD+Xq7VBkAfG61aGLgA+YnpQ/kc2l65yyBjgMHqf2FZDyzCT yPR8jAFZgbRIZ9HkWRNpbV/e5K+1kQUpdjG/keN4E3YKJUbakdTY80znFXxpz+7e 1BJwoSRNDatTK/VDkbkECz5jbnZvdo60fpDtnr/tnronvI99CiUf2V5qBZcbxDwM uN+57MeebhWxDWyW5gkl/XwWnjVyGM+lGRv3e1NPdMqNZfqRfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD9568eGcgSbXDAlPGjw6UKeHTORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2JiOWI3ODktYmJlMC0z YjJjLWIyNTItZmQ1Y2QyZjVlMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjGzOzz31vOSTPF4JaN6m0XPMBHojcyNjgp4+y nM2jI26jQRwaAuKOVYN2irUy7NaUpLCl8mVnjMjUbxOkA1LSs/IVj3LetDqNIMvw zrlFh4Ou7bXt8juqvC0IydsLfHt6bUuE7iImgpRfvvpXfaDZjCnWIgkQgCW5Tgj9 fhTT15ky4ORy4zHzjxKVdVbhVsjKq2mH/C5q6kdbIYYMn70M21PJ+mk1kE18tiLs LXR2ZMiMPVyRYSxQuqBVrAHlhSFNrm4QfSyKlixKPZp+/vilZ+qDedWfEkS7r1nM Bqj2v3ZmFrdAQYzN9QBvlaKK05hOiXJzTlz4moA4H+UWrGpQ -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:46 2025 by rpki-client