$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9211a31c-b403-39ea-a16b-3f1f3f3443c1.roa File: 9211a31c-b403-39ea-a16b-3f1f3f3443c1.roa (raw, json) Hash identifier: 1xLyMnhOCwvHyszN2kdryXh+SeI6feQAy9b80vrapnc= Subject key identifier: 0A:61:0F:43:AA:92:D6:B1:F1:E9:F3:8F:23:A3:0C:F6:CB:8D:5C:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9DF70AB4B3BB7F9AE8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9211a31c-b403-39ea-a16b-3f1f3f3443c1.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396593 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9d:f7:0a:b4:b3:bb:7f:9a:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=fbf619b7-72a3-4cc4-a63d-ae6dce854b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:b6:42:c1:74:67:66:eb:98:8c:b6:d2:da: 83:3e:a2:3b:1e:9c:db:d6:1c:85:01:41:04:d2:d8: 99:fb:c5:1f:90:bd:f1:8e:2a:59:7b:da:c1:86:65: ab:99:aa:68:9e:24:e5:f8:03:82:15:85:30:0c:35: 71:27:94:cc:ff:8c:cb:07:ce:9b:0e:c9:4f:0a:78: ce:61:e2:89:77:ea:d7:82:87:c9:26:ee:1e:fe:27: a3:cc:6e:c2:5c:48:5a:06:05:84:86:d8:49:d9:36: 43:65:b3:ec:03:30:7b:6c:3f:1b:a5:31:b5:1f:e0: 49:f5:aa:33:e2:d8:ea:15:c8:90:78:1d:45:6a:0f: f7:ca:29:e5:ce:13:2d:04:b7:92:90:c6:fd:08:0c: 8b:1b:8b:77:f3:14:59:88:51:74:88:09:71:3f:4f: 5c:bc:f8:fa:90:61:b1:d6:2f:e3:aa:cd:00:60:5f: 5b:92:3a:42:0f:48:de:e7:00:b7:31:08:77:7d:6a: 5a:b4:54:ab:cd:82:87:2f:89:40:ca:6a:8c:c6:5e: 2b:a2:88:c0:04:09:e2:b6:d5:46:98:ca:c5:d0:75: 2a:85:dc:55:e9:2c:dc:ce:ec:3b:7f:89:63:f6:a8: d4:47:39:e1:32:b4:36:ce:ae:88:11:46:e0:e2:22: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:61:0F:43:AA:92:D6:B1:F1:E9:F3:8F:23:A3:0C:F6:CB:8D:5C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9211a31c-b403-39ea-a16b-3f1f3f3443c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:de:b3:7f:6e:55:87:3d:c2:6c:b6:95:cf:58:0a:ec:4c:e0: 79:d6:8f:8b:81:01:3b:16:42:62:51:43:af:f0:f4:d0:6f:4a: f0:ee:d1:37:e9:f8:2e:66:be:c8:d6:31:bb:69:b5:05:0d:79: 7a:09:00:19:ce:0f:d4:c5:8b:53:e0:9f:5f:16:bd:ae:40:a6: 57:d8:c7:8f:ae:a7:c9:f1:41:16:61:49:03:21:0d:ac:fc:50: 86:42:3a:1e:93:a7:ed:f6:57:0f:2f:b0:e4:08:5a:a9:d8:d2: 0d:fd:a4:67:c0:67:f3:07:9a:a6:a6:b9:a9:c6:b0:9b:32:fa: 39:6a:87:e1:63:fb:27:89:6c:7d:6a:eb:47:24:cb:fd:57:26: ca:3f:fe:40:37:0f:28:38:ef:ff:05:52:20:f4:60:5a:d2:5c: e0:20:f1:ae:2a:2a:10:b5:f0:31:79:10:92:17:70:c6:ed:21: c2:5b:79:78:8d:f8:4e:4f:13:cf:6b:55:5d:04:66:0d:bc:90: 38:57:0f:19:17:a5:f2:bc:bd:f5:de:db:68:b5:92:d0:05:ba: 9f:b2:23:ce:86:59:0e:f0:e3:b4:c3:7a:4c:95:7a:57:db:b6: 4e:6c:d9:74:96:60:e3:12:e2:2b:c8:d8:46:7a:87:06:0b:46: e4:6a:0f:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK533CrSzu3+a6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZmJmNjE5YjctNzJhMy00Y2M0LWE2M2QtYWU2ZGNlODU0YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX22QsF0Z2brmIy20tqDPqI7Hpzb1hyFAUEE 0tiZ+8UfkL3xjipZe9rBhmWrmaponiTl+AOCFYUwDDVxJ5TM/4zLB86bDslPCnjO YeKJd+rXgofJJu4e/iejzG7CXEhaBgWEhthJ2TZDZbPsAzB7bD8bpTG1H+BJ9aoz 4tjqFciQeB1Fag/3yinlzhMtBLeSkMb9CAyLG4t38xRZiFF0iAlxP09cvPj6kGGx 1i/jqs0AYF9bkjpCD0je5wC3MQh3fWpatFSrzYKHL4lAymqMxl4roojABAnittVG mMrF0HUqhdxV6Szczuw7f4lj9qjURznhMrQ2zq6IEUbg4iJ6/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAphD0Oqktax8enzjyOjDPbLjVwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTIxMWEzMWMtYjQwMy0z OWVhLWExNmItM2YxZjNmMzQ0M2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAq3rN/blWHPcJstpXPWArsTOB51o+LgQE7FkJi UUOv8PTQb0rw7tE36fguZr7I1jG7abUFDXl6CQAZzg/UxYtT4J9fFr2uQKZX2MeP rqfJ8UEWYUkDIQ2s/FCGQjoek6ft9lcPL7DkCFqp2NIN/aRnwGfzB5qmprmpxrCb Mvo5aofhY/sniWx9autHJMv9VybKP/5ANw8oOO//BVIg9GBa0lzgIPGuKioQtfAx eRCSF3DG7SHCW3l4jfhOTxPPa1VdBGYNvJA4Vw8ZF6XyvL313ttotZLQBbqfsiPO hlkO8OO0w3pMlXpX27ZObNl0lmDjEuIryNhGeocGC0bkag+1 -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:22 2025 by rpki-client