$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87f82de6-75c2-3d91-8c25-46d46339f6f4.roa File: 87f82de6-75c2-3d91-8c25-46d46339f6f4.roa (raw, json) Hash identifier: ON+zPiCEn4uw1kH1W2/R4/9RUMIN0bT6V7bDu8aubN4= Subject key identifier: 0F:07:02:BE:62:A6:6B:0C:1F:CB:18:D8:8F:F9:7B:D2:D5:AE:78:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9E0407297AD9259EC860 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87f82de6-75c2-3d91-8c25-46d46339f6f4.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396579 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9e:04:07:29:7a:d9:25:9e:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=250987e1-a0da-4291-9f9a-0bc8e609821c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:de:fc:e5:0d:95:c4:f7:9a:fd:d6:1b:16: 35:70:e7:b7:f0:7f:ed:bc:42:94:3d:f4:ac:b1:d3: de:c7:46:18:91:7f:ba:4c:d5:19:5f:cf:9b:0f:9f: f8:99:c7:d2:c3:c7:3e:cf:c5:a1:fe:e0:ea:ee:d5: 9e:34:6d:5a:eb:9e:9d:ae:63:b9:4b:b5:b3:01:62: dd:77:bf:fb:4a:0b:36:f7:1e:24:a4:8b:ed:71:bd: f3:32:e1:5c:a8:28:ac:ba:d1:da:0b:a7:98:f6:72: 85:d5:19:c1:ca:49:78:af:5e:a8:e1:c2:f4:a8:5c: a7:e4:c3:b8:99:c0:5d:61:0b:c0:76:89:f9:a1:93: 1c:bb:99:17:ed:48:2d:74:d2:af:4c:e5:ac:fc:90: 94:bc:87:b9:f6:d8:0f:8e:da:5d:ad:31:11:16:6e: 59:f1:e7:9e:50:17:b5:04:c8:23:3d:e4:72:92:6d: a1:45:31:eb:81:32:cc:9a:16:37:ff:01:47:2c:b7: 67:20:8c:35:09:50:f5:d0:d5:1a:97:70:ae:58:10: d4:27:fb:b7:84:7e:19:ff:b3:29:3d:92:36:6f:49: b9:d7:2c:76:c5:4b:1f:d4:ba:95:cb:ff:30:ea:60: ab:70:fa:54:c4:12:d1:1c:d1:bc:8f:50:9b:41:76: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:02:BE:62:A6:6B:0C:1F:CB:18:D8:8F:F9:7B:D2:D5:AE:78:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87f82de6-75c2-3d91-8c25-46d46339f6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c0:c1:67:65:a2:be:07:a6:d0:0f:ea:99:87:70:5b:4b:0b: a7:f4:d4:47:e2:86:c4:e2:9e:a7:d8:f7:a7:de:15:57:97:2f: 19:8a:fe:c0:db:52:2e:99:4d:17:aa:32:0b:00:f5:18:76:a8: d3:53:f5:e3:35:e3:dd:4b:97:1c:1f:c3:e7:10:80:44:2a:e2: 8f:7c:72:01:66:79:7b:1a:08:63:b3:43:bc:6c:28:7d:d3:7e: 5c:3d:f8:d7:ab:2c:02:52:14:10:e4:87:06:39:57:e7:42:f0: d1:38:2b:26:5d:72:37:e1:72:63:da:98:c6:0f:ce:2e:3d:ba: f7:5f:78:8f:00:c1:11:10:d3:c3:5b:c0:6e:35:6a:fb:b5:84: b5:10:2b:7c:3f:21:56:7e:e6:a5:35:3c:b7:ac:92:91:33:79: bb:f7:e0:34:d8:23:a0:01:a0:02:2b:b5:fa:11:8a:b5:17:87: f1:e6:30:fb:6a:ba:b0:34:89:24:0b:da:a3:38:40:0d:a4:cb: 53:84:03:ee:ce:cc:90:63:8f:31:fc:9a:8a:f6:3e:c1:d1:1d: a3:ad:a5:49:ed:32:a6:78:c5:1c:4b:0e:c2:17:58:14:a6:9f: a2:48:76:c3:f7:46:b2:6e:51:c2:50:6a:05:4e:e9:c0:91:5e: 11:60:7a:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK54EByl62SWeyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MjUwOTg3ZTEtYTBkYS00MjkxLTlmOWEtMGJjOGU2MDk4MjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwze/OUNlcT3mv3WGxY1cOe38H/tvEKUPfSs sdPex0YYkX+6TNUZX8+bD5/4mcfSw8c+z8Wh/uDq7tWeNG1a656drmO5S7WzAWLd d7/7Sgs29x4kpIvtcb3zMuFcqCisutHaC6eY9nKF1RnBykl4r16o4cL0qFyn5MO4 mcBdYQvAdon5oZMcu5kX7UgtdNKvTOWs/JCUvIe59tgPjtpdrTERFm5Z8eeeUBe1 BMgjPeRykm2hRTHrgTLMmhY3/wFHLLdnIIw1CVD10NUal3CuWBDUJ/u3hH4Z/7Mp PZI2b0m51yx2xUsf1LqVy/8w6mCrcPpUxBLRHNG8j1CbQXZIKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA8HAr5ipmsMH8sY2I/5e9LVrngbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdmODJkZTYtNzVjMi0z ZDkxLThjMjUtNDZkNDYzMzlmNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPwMFnZaK+B6bQD+qZh3BbSwun9NRH4obE4p6n 2Pen3hVXly8Ziv7A21IumU0XqjILAPUYdqjTU/XjNePdS5ccH8PnEIBEKuKPfHIB Znl7Gghjs0O8bCh9035cPfjXqywCUhQQ5IcGOVfnQvDROCsmXXI34XJj2pjGD84u Pbr3X3iPAMERENPDW8BuNWr7tYS1ECt8PyFWfualNTy3rJKRM3m79+A02COgAaAC K7X6EYq1F4fx5jD7arqwNIkkC9qjOEANpMtThAPuzsyQY48x/JqK9j7B0R2jraVJ 7TKmeMUcSw7CF1gUpp+iSHbD90ayblHCUGoFTunAkV4RYHqn -----END CERTIFICATE-----Generated at Wed Aug 6 13:19:42 2025 by rpki-client