$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95def923-049e-3b12-9fdc-a6faaf428489.roa File: 95def923-049e-3b12-9fdc-a6faaf428489.roa (raw, json) Hash identifier: qML169k3K7nOXO4eDXYVs7TYGN2JrCxjv7owZ7jwTt4= Subject key identifier: 5D:E3:B8:58:A5:41:F1:0C:D0:09:4B:7A:3D:48:1C:9A:5A:B7:2D:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE55AB4E7CC837360F240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95def923-049e-3b12-9fdc-a6faaf428489.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396594 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e5:5a:b4:e7:cc:83:73:60:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a86a266f-cd49-4036-8ab1-dc1eeefcea83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:9e:19:6b:01:2a:39:09:18:6e:b1:18:15: 48:6c:67:53:bb:74:3a:c7:c1:0c:f0:98:74:e8:b9: 99:7c:82:b7:fa:ce:81:88:5c:be:2d:1a:f2:81:d6: 3d:5f:58:24:85:04:72:c7:c5:a3:18:04:0a:78:b5: 9b:30:03:3d:81:f1:cb:c9:a8:2f:86:a2:b1:0f:e9: 22:d9:e8:d9:d3:2c:18:68:cd:f6:0b:27:f7:d3:29: 25:6d:f6:0c:7a:fa:af:2e:ed:7c:a3:4c:17:e8:f9: 6d:30:66:13:ea:f1:3c:2d:7c:8c:4f:d3:f0:f1:23: 23:64:88:dc:7e:48:33:a3:af:ea:a2:17:64:39:02: 11:b8:57:df:32:78:fe:c6:f4:9a:42:08:2c:45:50: 03:d3:25:38:49:dc:86:76:4d:d4:66:21:2f:aa:cc: 0b:f6:19:2b:8a:0e:44:f9:ad:f3:e6:f3:13:f5:c8: 79:c7:cb:ad:65:cd:b1:90:14:c1:22:b3:2d:4f:c3: ca:bf:07:60:0a:05:47:74:5f:f9:d2:d8:62:3f:4e: c4:a2:aa:85:bf:5b:f9:38:1d:84:e0:ba:5b:b1:7f: 89:d4:b3:2d:60:84:8c:d9:82:da:9b:8e:a9:aa:bb: 2f:49:09:7f:ff:bf:74:1e:22:cd:f4:a2:63:86:fe: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:B8:58:A5:41:F1:0C:D0:09:4B:7A:3D:48:1C:9A:5A:B7:2D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95def923-049e-3b12-9fdc-a6faaf428489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:79:80:fc:3c:3f:cd:e8:9f:18:93:03:a3:52:ac:e6:6b:34: 2a:3d:54:df:91:9b:6d:68:1b:77:d8:97:f3:dc:1d:60:4a:cb: 3d:02:25:4a:37:ed:c0:3f:bf:a4:39:c0:63:aa:26:bb:53:6b: 62:57:5e:f1:72:74:64:fc:80:45:94:01:53:3d:3c:87:01:9c: a2:55:a6:ee:b2:38:5d:d2:5c:a2:a4:d7:11:9f:e2:6b:3d:a7: f1:a7:29:2e:10:0a:57:08:6c:93:86:3f:0f:00:84:62:c2:95: 1d:b8:13:08:61:91:59:a4:aa:dd:31:ed:8c:46:07:14:35:bf: 8c:f6:f2:d4:e7:f9:28:0b:af:85:cc:ae:98:cb:d4:43:5b:ae: 25:7a:72:1f:bd:08:11:54:2d:f4:21:99:f9:47:b2:97:ff:ee: 45:87:7c:cb:5e:75:a7:63:1e:3d:67:ab:b8:a5:df:be:62:7f: 48:21:42:33:86:92:4f:2f:d7:0e:8f:d1:72:45:1b:4d:6a:f7: 01:dd:44:74:31:3b:40:57:3d:9b:09:d6:17:67:cc:f8:d3:ca: 77:f0:c7:a3:74:37:92:7d:c0:e7:24:7b:5a:54:44:ac:57:d4: 60:c2:f0:a5:20:fc:52:63:a0:51:18:2d:6e:3f:43:57:2b:ce: d9:9b:58:c8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+VatOfMg3Ng8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTg2YTI2NmYtY2Q0OS00MDM2LThhYjEtZGMxZWVlZmNlYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAGeGWsBKjkJGG6xGBVIbGdTu3Q6x8EM8Jh0 6LmZfIK3+s6BiFy+LRrygdY9X1gkhQRyx8WjGAQKeLWbMAM9gfHLyagvhqKxD+ki 2ejZ0ywYaM32Cyf30yklbfYMevqvLu18o0wX6PltMGYT6vE8LXyMT9Pw8SMjZIjc fkgzo6/qohdkOQIRuFffMnj+xvSaQggsRVAD0yU4SdyGdk3UZiEvqswL9hkrig5E +a3z5vMT9ch5x8utZc2xkBTBIrMtT8PKvwdgCgVHdF/50thiP07EoqqFv1v5OB2E 4LpbsX+J1LMtYISM2YLam46pqrsvSQl//790HiLN9KJjhv5leQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF3juFilQfEM0AlLej1IHJpaty1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkZWY5MjMtMDQ5ZS0z YjEyLTlmZGMtYTZmYWFmNDI4NDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGeYD8PD/N6J8YkwOjUqzmazQqPVTfkZttaBt3 2Jfz3B1gSss9AiVKN+3AP7+kOcBjqia7U2tiV17xcnRk/IBFlAFTPTyHAZyiVabu sjhd0lyipNcRn+JrPafxpykuEApXCGyThj8PAIRiwpUduBMIYZFZpKrdMe2MRgcU Nb+M9vLU5/koC6+FzK6Yy9RDW64lenIfvQgRVC30IZn5R7KX/+5Fh3zLXnWnYx49 Z6u4pd++Yn9IIUIzhpJPL9cOj9FyRRtNavcB3UR0MTtAVz2bCdYXZ8z408p38Mej dDeSfcDnJHtaVESsV9RgwvClIPxSY6BRGC1uP0NXK87Zm1jI -----END CERTIFICATE-----Generated at Wed Aug 6 00:56:40 2025 by rpki-client