$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84860586-bf9c-3ddf-aa5b-797e9014591f.roa File: 84860586-bf9c-3ddf-aa5b-797e9014591f.roa (raw, json) Hash identifier: WKAE/oZyLqLWSj3HrIvKaSbqKOYoVX4IsVNomdmQBek= Subject key identifier: 0E:A0:24:AE:55:9B:B1:F2:09:14:87:61:5C:83:FE:2D:FC:21:18:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B94769DDA46C39F5AF9E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84860586-bf9c-3ddf-aa5b-797e9014591f.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396560 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:94:76:9d:da:46:c3:9f:5a:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=ed640b14-87fb-425d-ade2-3667dac4526f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:92:9c:8a:45:64:94:ce:c6:c9:8c:b0:04: bc:0a:69:86:48:65:f0:98:73:28:e7:e7:35:29:71: a0:69:c5:fc:e1:39:6c:ae:80:9b:e9:77:29:8b:55: ff:ab:32:b4:e2:16:34:c5:6f:cd:b0:42:af:67:cf: 13:fc:43:1e:a6:fd:46:98:0b:f8:73:3a:15:0f:40: 3c:e2:3e:e7:d5:79:8c:c6:5f:c6:0a:17:e7:f0:cc: 7f:a3:4a:aa:97:83:4d:b5:55:4a:28:6b:13:42:c4: 17:10:73:38:54:52:eb:76:25:56:4b:7f:c6:03:79: ea:4a:c9:2d:19:9e:1c:0b:85:1c:bb:ad:a3:cf:63: 34:70:9f:66:1d:9a:c4:dc:b2:de:5f:b6:66:2f:57: 96:a6:56:38:d5:2b:0a:82:95:40:2d:b9:cd:a6:56: b7:73:d9:ae:7f:cb:a3:3f:eb:20:70:70:1a:9b:d3: 79:6e:69:59:aa:fc:2f:55:63:d0:7b:a0:28:60:93: 3f:73:f6:57:c2:95:23:a2:dc:34:9e:57:53:22:b5: 3c:91:31:39:7a:e5:8d:92:39:fe:4c:db:11:cc:35: e9:89:d0:72:e4:82:43:b4:08:67:8b:90:9d:d6:76: 91:7c:f0:0a:38:3d:ec:5e:86:af:e8:d9:4d:89:b8: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A0:24:AE:55:9B:B1:F2:09:14:87:61:5C:83:FE:2D:FC:21:18:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84860586-bf9c-3ddf-aa5b-797e9014591f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6d:46:9c:e0:f0:a7:b9:7c:c7:a9:24:33:f8:37:3a:3a:5e: f6:c0:06:94:88:73:41:23:24:55:4f:f3:09:48:25:6c:ad:4e: 27:07:58:2a:bd:81:a2:d9:94:82:c1:f8:24:23:4b:ba:3e:03: dc:90:63:ae:09:44:18:89:0d:a3:fb:86:ed:1e:20:f8:5e:88: d5:a7:f7:7e:f1:eb:66:54:eb:dd:85:64:1f:7f:45:b0:f6:c7: 31:7a:b6:07:7a:a1:51:71:f6:0a:ae:8a:30:90:4e:79:2e:87: 0d:86:6d:ec:48:85:bb:b3:35:60:1e:2c:71:55:97:43:f1:5e: 2e:10:b9:07:96:35:a2:d9:97:3f:e6:d6:78:3f:28:fb:08:65: ce:7d:f0:fa:ac:dd:77:38:eb:7b:06:f8:3d:51:48:02:14:9f: db:10:05:d3:5d:1a:23:f9:50:78:0d:1e:d1:bb:5f:3d:41:ae: 46:1b:da:a5:61:5b:69:98:dd:b3:e5:8e:bc:b0:35:53:da:10: 29:22:8e:87:b4:28:bf:1e:a2:42:24:27:ea:5c:d0:11:fb:6c: 81:f4:00:20:34:a6:1e:9e:15:57:17:ab:ae:c9:22:23:16:17: 09:7a:0d:b3:93:bc:f8:15:72:f8:e4:cb:cb:e4:36:17:da:e5: e1:c7:76:bb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5R2ndpGw59a+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZWQ2NDBiMTQtODdmYi00MjVkLWFkZTItMzY2N2RhYzQ1MjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOeSnIpFZJTOxsmMsAS8CmmGSGXwmHMo5+c1 KXGgacX84TlsroCb6Xcpi1X/qzK04hY0xW/NsEKvZ88T/EMepv1GmAv4czoVD0A8 4j7n1XmMxl/GChfn8Mx/o0qql4NNtVVKKGsTQsQXEHM4VFLrdiVWS3/GA3nqSskt GZ4cC4Ucu62jz2M0cJ9mHZrE3LLeX7ZmL1eWplY41SsKgpVALbnNpla3c9muf8uj P+sgcHAam9N5bmlZqvwvVWPQe6AoYJM/c/ZXwpUjotw0nldTIrU8kTE5euWNkjn+ TNsRzDXpidBy5IJDtAhni5Cd1naRfPAKOD3sXoav6NlNibivjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA6gJK5Vm7HyCRSHYVyD/i38IRi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODQ4NjA1ODYtYmY5Yy0z ZGRmLWFhNWItNzk3ZTkwMTQ1OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMbUac4PCnuXzHqSQz+Dc6Ol72wAaUiHNBIyRV T/MJSCVsrU4nB1gqvYGi2ZSCwfgkI0u6PgPckGOuCUQYiQ2j+4btHiD4XojVp/d+ 8etmVOvdhWQff0Ww9scxerYHeqFRcfYKroowkE55LocNhm3sSIW7szVgHixxVZdD 8V4uELkHljWi2Zc/5tZ4Pyj7CGXOffD6rN13OOt7Bvg9UUgCFJ/bEAXTXRoj+VB4 DR7Ru189Qa5GG9qlYVtpmN2z5Y68sDVT2hApIo6HtCi/HqJCJCfqXNAR+2yB9AAg NKYenhVXF6uuySIjFhcJeg2zk7z4FXL45MvL5DYX2uXhx3a7 -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:56 2025 by rpki-client