$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa File: 877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa (raw, json) Hash identifier: e12sagEPvGaHoeBxMKei/0nlJEnUJy5/gLBnqbKyJ/k= Subject key identifier: 9D:2D:3E:CB:63:E0:13:63:9B:F0:37:28:E5:A6:AC:FE:1A:1C:9E:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE4BE9555CA4A1D416840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396572 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e4:be:95:55:ca:4a:1d:41:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=c24c4076-719c-43a0-bfe2-a5060fddaf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:0b:be:38:78:6b:56:9c:e8:77:25:5a:03: cb:e2:56:f2:75:fb:a2:7e:3e:a7:11:4b:df:b0:f2: 80:ef:a0:21:4e:17:b3:b7:c0:40:b6:e8:b5:e4:b4: 65:1a:2c:db:7b:af:a1:4b:bc:8b:ac:37:1b:47:b8: 2c:da:75:e0:39:20:05:40:e8:5f:83:1f:a3:09:c9: 7f:ab:1e:17:47:33:ba:35:bc:ca:dd:a2:af:7b:81: b8:75:60:c9:04:f1:bf:48:96:f0:0b:f7:bc:8c:53: 65:63:7f:62:35:28:7e:63:e2:04:2b:14:e2:1a:f7: c8:3f:97:af:35:76:ff:36:39:ef:03:6c:e8:2b:f9: 1d:d2:24:9b:4c:07:94:82:54:56:ac:1d:18:d1:24: 06:f7:a0:e3:4d:6f:73:45:6b:64:2b:5b:55:49:85: fe:b9:2d:36:5c:a8:74:88:be:11:a8:98:b8:26:91: d5:ec:2a:21:55:81:d0:bd:dc:e5:c7:6d:04:1e:32: 42:ce:9b:76:9d:56:a1:02:cb:5a:12:63:c1:11:b6: 1c:bd:35:b1:29:6a:4f:64:7a:19:5b:8b:da:ca:77: 8d:8a:aa:64:0f:b9:60:58:3d:25:ab:67:8b:68:e2: 2a:5a:76:d3:cd:a7:19:81:30:19:5b:a5:35:d8:c2: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2D:3E:CB:63:E0:13:63:9B:F0:37:28:E5:A6:AC:FE:1A:1C:9E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8f:4c:58:cd:03:e2:6d:7b:1d:72:92:af:1e:89:14:ed:1e: e5:db:01:a9:0a:14:10:3f:34:a3:5a:c5:d8:1f:8e:9c:3c:b1: 57:7e:48:d3:62:4f:c6:75:02:43:7c:a3:c0:03:67:cd:bf:35: 0d:ac:ec:c2:3a:cd:68:1b:76:f4:b8:f6:26:98:58:8b:75:cb: fe:11:63:42:0b:ba:df:bb:73:b5:fa:50:cf:9d:6c:ed:99:63: 2e:3e:ea:02:86:8b:93:61:9d:6c:02:0d:0a:42:09:94:ca:7e: b9:42:a6:74:5b:96:dd:f8:ae:65:b4:75:e0:9a:63:20:59:71: ae:86:4d:f0:65:c2:f3:11:b6:9c:b3:31:b4:59:4e:dc:cb:4d: 5c:bc:e9:5b:ef:8b:a9:d6:6f:11:1f:88:90:db:67:87:c3:12: 84:e6:dd:52:30:8c:cf:b6:99:1d:3b:0b:14:4c:93:33:6a:64: 3e:10:ed:88:7f:55:2e:87:ef:0d:d1:36:f8:76:b6:c4:7d:7f: ad:ae:5a:c6:7e:91:f5:dd:65:90:0a:ad:e3:d0:1e:f0:b4:47: 02:a4:fd:fb:3e:b0:30:dc:44:c5:9b:c9:e8:6e:75:48:89:62: 5b:96:89:ba:3b:cc:0e:85:7e:68:13:8f:91:3f:2b:45:98:a6: c2:f7:aa:49 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+S+lVXKSh1BaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzI0YzQwNzYtNzE5Yy00M2EwLWJmZTItYTUwNjBmZGRhZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9ILvjh4a1ac6HclWgPL4lbydfuifj6nEUvf sPKA76AhThezt8BAtui15LRlGizbe6+hS7yLrDcbR7gs2nXgOSAFQOhfgx+jCcl/ qx4XRzO6NbzK3aKve4G4dWDJBPG/SJbwC/e8jFNlY39iNSh+Y+IEKxTiGvfIP5ev NXb/NjnvA2zoK/kd0iSbTAeUglRWrB0Y0SQG96DjTW9zRWtkK1tVSYX+uS02XKh0 iL4RqJi4JpHV7CohVYHQvdzlx20EHjJCzpt2nVahAstaEmPBEbYcvTWxKWpPZHoZ W4vayneNiqpkD7lgWD0lq2eLaOIqWnbTzacZgTAZW6U12MLfJwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ0tPstj4BNjm/A3KOWmrP4aHJ7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODc3Yzg1YzQtMjc4YS0z ZjFlLWExZDAtZWQ1NmI3YjQzMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7j0xYzQPibXsdcpKvHokU7R7l2wGpChQQPzSj WsXYH46cPLFXfkjTYk/GdQJDfKPAA2fNvzUNrOzCOs1oG3b0uPYmmFiLdcv+EWNC C7rfu3O1+lDPnWztmWMuPuoChouTYZ1sAg0KQgmUyn65QqZ0W5bd+K5ltHXgmmMg WXGuhk3wZcLzEbacszG0WU7cy01cvOlb74up1m8RH4iQ22eHwxKE5t1SMIzPtpkd OwsUTJMzamQ+EO2If1Uuh+8N0Tb4drbEfX+trlrGfpH13WWQCq3j0B7wtEcCpP37 PrAw3ETFm8nobnVIiWJblom6O8wOhX5oE4+RPytFmKbC96pJ -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:09 2025 by rpki-client