$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/876852cb-0c93-3cf3-9c07-e73af46b04a8.roa File: 876852cb-0c93-3cf3-9c07-e73af46b04a8.roa (raw, json) Hash identifier: Pz/DErWMGiAHNgVDqMiBE55XK2XmxcDzUFmTc5vG+2o= Subject key identifier: 94:AA:5A:EA:A8:B6:47:0A:A6:24:8B:C2:A1:75:F1:D5:C3:7F:B4:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9E6519EE9AA12A37A400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/876852cb-0c93-3cf3-9c07-e73af46b04a8.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397206 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9e:65:19:ee:9a:a1:2a:37:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=1a340d0c-e2f6-4832-bf58-5081a1b5d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:8f:b0:b9:f0:a7:ff:5b:3b:dd:08:3c:66: fe:dc:99:11:8b:41:37:59:11:5d:76:ec:fd:14:f1: ed:48:5c:2f:6f:f7:d8:a2:b3:ae:06:69:fd:c1:be: ce:e3:31:3b:64:e4:97:0d:70:76:c6:56:88:62:38: 7c:11:0c:bc:f0:04:4b:bf:f4:71:8d:26:36:ae:b0: 0c:26:e3:9d:10:63:66:68:ae:bc:33:07:ae:63:f1: 63:cb:a3:06:c5:65:b3:3b:81:e0:99:13:9d:3a:58: 79:73:dc:ad:34:bf:64:6d:cd:21:dd:46:47:ac:99: 2a:34:20:87:25:a5:cf:39:d8:50:de:ac:7c:77:ad: 85:b1:ae:ce:8c:f5:96:94:17:af:02:6b:75:fc:97: c6:f1:a9:1a:33:63:b9:fd:a1:54:39:94:01:47:ed: 7a:60:2d:09:38:5f:2a:6c:77:ab:19:c8:51:9c:c3: 01:d4:bf:65:61:a6:78:08:23:c9:ba:25:91:0e:e8: 1f:17:b2:b6:70:e1:3d:cb:e6:1d:60:5f:03:00:3e: 65:92:11:b0:a3:b5:d9:e7:0c:9d:bb:73:36:cc:ce: 71:5e:d4:62:a4:af:76:e2:f5:08:55:31:8c:2f:ae: 9f:0e:ee:08:44:0b:f0:e4:0b:33:1c:5c:a1:0b:47: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AA:5A:EA:A8:B6:47:0A:A6:24:8B:C2:A1:75:F1:D5:C3:7F:B4:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/876852cb-0c93-3cf3-9c07-e73af46b04a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a7:69:ee:45:ad:1e:24:d1:9c:f5:e8:3e:d2:c1:95:49:5e: 72:fb:ca:67:dd:d9:75:f0:28:ec:6c:12:09:8f:37:29:1d:8a: 44:09:98:10:9d:62:05:85:21:9b:e1:8b:e9:df:a1:ca:cd:d3: fb:51:7b:c5:27:7d:fa:35:b9:49:5f:b4:7f:89:ff:69:14:d7: 42:58:8a:80:a4:8a:b6:b0:7e:17:df:31:a4:27:cc:8a:31:63: 45:79:3d:58:a5:f2:35:10:1a:f5:64:2a:b9:91:38:9d:ad:bf: 7a:e4:93:be:65:ab:d6:d6:60:b1:2b:ca:a3:82:9f:ee:7b:6e: 61:05:ba:3a:2b:f3:6a:79:56:4d:d2:02:c6:6e:fb:71:6d:0f: ec:2d:c7:8a:67:72:7e:69:86:28:e2:cc:b6:e8:fb:4f:72:3b: 7c:ab:79:6d:d4:dc:ad:96:38:05:a5:a0:13:c6:1d:5c:69:bd: 74:f3:92:18:0c:0e:80:39:a9:7e:29:ad:19:2d:6d:3e:5f:b9: ec:ed:8e:d7:47:b6:d5:b5:1a:17:d9:96:28:0d:df:68:7c:03: 23:bb:1b:a4:ed:a3:ce:f5:c6:b3:a2:fb:c0:39:19:46:1e:5e: 66:01:4e:8c:5d:31:2d:c0:4a:b6:11:66:85:e0:71:79:26:e1: 75:95:e8:85 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK55lGe6aoSo3pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MWEzNDBkMGMtZTJmNi00ODMyLWJmNTgtNTA4MWExYjVkOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTuPsLnwp/9bO90IPGb+3JkRi0E3WRFdduz9 FPHtSFwvb/fYorOuBmn9wb7O4zE7ZOSXDXB2xlaIYjh8EQy88ARLv/RxjSY2rrAM JuOdEGNmaK68MweuY/Fjy6MGxWWzO4HgmROdOlh5c9ytNL9kbc0h3UZHrJkqNCCH JaXPOdhQ3qx8d62Fsa7OjPWWlBevAmt1/JfG8akaM2O5/aFUOZQBR+16YC0JOF8q bHerGchRnMMB1L9lYaZ4CCPJuiWRDugfF7K2cOE9y+YdYF8DAD5lkhGwo7XZ5wyd u3M2zM5xXtRipK924vUIVTGML66fDu4IRAvw5AszHFyhC0c2FQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJSqWuqotkcKpiSLwqF18dXDf7TdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODc2ODUyY2ItMGM5My0z Y2YzLTljMDctZTczYWY0NmIwNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBWp2nuRa0eJNGc9eg+0sGVSV5y+8pn3dl18Cjs bBIJjzcpHYpECZgQnWIFhSGb4Yvp36HKzdP7UXvFJ336NblJX7R/if9pFNdCWIqA pIq2sH4X3zGkJ8yKMWNFeT1YpfI1EBr1ZCq5kTidrb965JO+ZavW1mCxK8qjgp/u e25hBbo6K/NqeVZN0gLGbvtxbQ/sLceKZ3J+aYYo4sy26PtPcjt8q3lt1NytljgF paATxh1cab1085IYDA6AOal+Ka0ZLW0+X7ns7Y7XR7bVtRoX2ZYoDd9ofAMjuxuk 7aPO9cazovvAORlGHl5mAU6MXTEtwEq2EWaF4HF5JuF1leiF -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:46 2025 by rpki-client