$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa File: 90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa (raw, json) Hash identifier: v/Gfec5abjl1CJhHjoUAyqlIpoRNqtXPCZ+Y4ZywsSw= Subject key identifier: 04:02:1D:CD:AC:C6:03:AE:8F:D8:EC:23:DE:DD:36:D4:DB:D6:32:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B927EFE6375335E8267F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396826 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:92:7e:fe:63:75:33:5e:82:67:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=5b69be6c-4e12-4a15-a03b-6cea9f229060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:2c:0e:f7:fd:76:5a:30:07:a0:12:a2:b7: f0:cf:f2:46:9e:b4:78:5c:dd:a4:40:77:c4:46:39: 30:88:06:8f:7d:94:c4:21:53:39:a8:48:87:f8:15: 99:0a:d0:43:4e:14:bf:4c:6c:96:d6:07:59:09:6e: 78:5a:fd:a8:67:42:b8:05:5d:73:31:cd:a7:85:39: 7b:1b:4a:c7:e6:40:6c:9e:50:aa:fa:4d:40:af:51: 17:fc:a8:4d:04:b4:f8:7a:50:1f:44:85:89:e3:54: 2c:10:43:ad:20:85:35:a0:1f:7b:00:2d:68:26:56: b7:91:1d:0f:57:68:c9:74:9c:c5:cf:88:50:5d:28: 9a:6b:e3:d7:28:ba:b8:9c:38:dd:25:b6:0a:7c:1a: de:ce:da:77:f6:1c:c0:dd:63:fc:43:cf:95:f7:97: 10:bb:b5:f1:f8:6d:32:2b:4a:f7:bd:0c:b9:cf:9f: bc:d7:67:85:c6:41:a0:6c:58:10:d7:11:37:09:14: d2:19:c9:bf:ee:2e:26:7c:4c:8c:17:fb:47:38:4e: 7e:16:41:4a:d3:87:a5:fb:71:bb:da:fe:3e:6e:ab: 6f:a9:83:09:c6:bf:85:30:04:85:e5:3e:ca:9e:34: ba:c3:97:aa:28:ac:13:7c:84:ee:2b:f7:8f:9c:86: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:1D:CD:AC:C6:03:AE:8F:D8:EC:23:DE:DD:36:D4:DB:D6:32:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:74:99:c7:ec:15:4a:f2:7d:9f:42:db:4e:f0:fe:32:f4:07: 9c:9f:00:06:0e:0d:c4:77:6d:a5:4a:9d:14:99:b9:d4:45:e0: ed:65:67:bc:4a:97:af:3c:95:b8:aa:df:f3:b9:46:e1:7f:30: 3b:e5:72:e1:53:70:d3:e1:0f:7d:dd:c7:d2:7a:30:2a:03:1d: 43:78:c0:55:1a:db:6e:74:b2:ee:4c:c2:45:fe:16:16:6a:f2: 93:e5:3b:a1:27:45:45:56:ff:33:b9:30:b8:9a:fb:39:cb:eb: ed:e7:18:c5:ff:77:3c:98:76:1b:d2:68:47:61:82:54:3a:2f: c8:c2:db:39:bf:49:7e:b9:63:80:71:de:02:ad:75:e4:b4:e8: b0:60:2b:c4:ee:4a:1f:e7:f3:97:39:a1:75:a7:34:d8:79:ba: a6:0f:3a:b0:ea:4a:64:96:ea:e0:7c:fb:18:6d:f7:3b:0b:50: 4d:bf:1f:ca:bf:71:2d:88:93:03:ca:7f:f5:ca:a7:40:cd:ee: bc:58:c4:3b:cf:bc:0e:3d:73:f7:f2:2a:d8:ec:f7:92:f6:37: ab:9e:b6:7c:83:90:d1:d8:fb:58:b1:f8:ab:f9:db:c0:52:d8: aa:77:92:d5:e6:ad:70:b0:e0:86:41:be:37:43:e3:1c:eb:70: 3c:97:f5:c8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5J+/mN1M16CZ/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NWI2OWJlNmMtNGUxMi00YTE1LWEwM2ItNmNlYTlmMjI5MDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCAsDvf9dlowB6ASorfwz/JGnrR4XN2kQHfE RjkwiAaPfZTEIVM5qEiH+BWZCtBDThS/TGyW1gdZCW54Wv2oZ0K4BV1zMc2nhTl7 G0rH5kBsnlCq+k1Ar1EX/KhNBLT4elAfRIWJ41QsEEOtIIU1oB97AC1oJla3kR0P V2jJdJzFz4hQXSiaa+PXKLq4nDjdJbYKfBreztp39hzA3WP8Q8+V95cQu7Xx+G0y K0r3vQy5z5+812eFxkGgbFgQ1xE3CRTSGcm/7i4mfEyMF/tHOE5+FkFK04el+3G7 2v4+bqtvqYMJxr+FMASF5T7KnjS6w5eqKKwTfITuK/ePnIacTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAQCHc2sxgOuj9jsI97dNtTb1jJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBiYTJiNGEtMWQ2My0z ZDIxLTlkMGQtN2NhNjVkY2FkOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAUdJnH7BVK8n2fQttO8P4y9AecnwAGDg3Ed22l Sp0UmbnUReDtZWe8SpevPJW4qt/zuUbhfzA75XLhU3DT4Q993cfSejAqAx1DeMBV GttudLLuTMJF/hYWavKT5TuhJ0VFVv8zuTC4mvs5y+vt5xjF/3c8mHYb0mhHYYJU Oi/Iwts5v0l+uWOAcd4CrXXktOiwYCvE7kof5/OXOaF1pzTYebqmDzqw6kpklurg fPsYbfc7C1BNvx/Kv3EtiJMDyn/1yqdAze68WMQ7z7wOPXP38irY7PeS9jernrZ8 g5DR2PtYsfir+dvAUtiqd5LV5q1wsOCGQb43Q+Mc63A8l/XI -----END CERTIFICATE-----Generated at Mon Aug 4 14:51:01 2025 by rpki-client