$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9906aca8-4003-3a90-a1c7-3664ed754478.roa File: 9906aca8-4003-3a90-a1c7-3664ed754478.roa (raw, json) Hash identifier: zkBSAOmrj0VAmKPn6nOjSernugldl0vEPLkUjW6jpWI= Subject key identifier: DA:E5:A2:7D:A9:4D:52:51:7E:8F:B0:BC:58:DB:4E:E4:D8:62:D8:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9D9EB37EC3A91A19F380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9906aca8-4003-3a90-a1c7-3664ed754478.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396568 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9d:9e:b3:7e:c3:a9:1a:19:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=29d79e40-e6eb-4a61-9f5d-7b56d86bef86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:7a:4d:ad:64:72:cb:2c:be:fd:99:0d:39: da:5c:0e:c6:26:a5:3b:cb:ae:24:27:57:92:10:9d: 1e:3e:18:22:7a:1a:ae:45:a2:88:be:fe:a7:f5:ce: 4c:d8:8e:91:80:e0:80:f9:da:b4:6b:84:a3:f3:96: c3:a3:25:50:e5:5d:f3:44:53:fa:be:1b:79:4e:88: 37:2d:ac:70:57:04:30:c0:04:83:95:ec:07:43:6f: a6:0d:33:f3:fc:49:20:d9:0e:05:c8:20:0e:d3:74: e2:74:d2:43:30:85:40:c0:94:1f:97:d6:bb:6b:1d: 20:f8:66:13:c8:30:c7:b8:07:c8:5d:68:e3:60:b1: 11:8a:9f:85:e2:77:e4:f6:a1:d9:34:98:0d:b8:9a: 22:47:c0:7d:45:70:0a:76:bf:90:63:d5:d8:bf:88: dc:8a:e7:56:6c:4e:d9:7b:1d:e2:c9:24:b6:b6:ea: f0:10:33:a7:a6:8f:9a:8e:fe:ad:48:e0:ff:63:d1: 2c:40:0b:9e:aa:f5:c6:04:91:68:ab:60:5e:cd:84: 52:2b:61:77:db:bd:40:72:fe:3a:d6:91:14:b5:70: f1:b8:41:dc:c7:aa:73:20:14:1f:b8:f6:bc:59:0d: 2f:8f:f8:f8:2e:c2:88:44:4a:dd:33:88:b3:65:67: ac:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E5:A2:7D:A9:4D:52:51:7E:8F:B0:BC:58:DB:4E:E4:D8:62:D8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9906aca8-4003-3a90-a1c7-3664ed754478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:29:ea:90:b0:16:11:31:48:d6:8d:f9:66:cc:be:8b:61:fb: 11:a7:b1:5e:25:e3:54:8e:c4:39:6f:cf:90:43:5e:fb:e5:eb: b7:65:86:4c:81:08:eb:58:7d:ba:07:91:f4:99:17:a1:a4:bc: 97:ee:a9:47:24:b0:85:d9:08:04:09:d2:99:bf:23:87:25:02: 36:ff:a8:0d:aa:5f:e1:2b:2e:81:a3:cb:73:e7:eb:c5:f5:e8: a7:c8:85:01:68:17:e6:ed:d9:15:e3:fa:f9:09:ee:88:07:66: 61:3b:0b:f8:aa:be:fb:f1:20:7a:fe:46:9a:18:a3:64:fd:54: 73:60:98:57:6e:df:26:ae:8e:c4:f7:e1:f7:3c:4c:fb:bb:5e: 3c:1f:59:9f:af:52:51:74:b6:d7:58:73:90:d3:c1:37:17:95: be:53:0e:e4:60:23:69:58:1b:b5:3e:ef:be:21:8e:8a:27:99: de:bd:9e:64:ca:4d:79:82:e1:ed:75:a2:40:95:55:8d:c0:a5: ff:74:78:99:7b:3b:c6:2f:50:b6:f1:8a:3c:6e:63:1e:5e:63: f8:b8:2b:53:23:7d:b5:b8:30:7d:4c:12:5f:f1:77:ba:6c:99: c4:aa:06:16:08:d1:1c:b4:c8:5a:4b:9c:c8:30:bd:1e:60:d2: a7:c0:33:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK52es37DqRoZ84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MjlkNzllNDAtZTZlYi00YTYxLTlmNWQtN2I1NmQ4NmJlZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAird6Ta1kcsssvv2ZDTnaXA7GJqU7y64kJ1eS EJ0ePhgiehquRaKIvv6n9c5M2I6RgOCA+dq0a4Sj85bDoyVQ5V3zRFP6vht5Tog3 LaxwVwQwwASDlewHQ2+mDTPz/Ekg2Q4FyCAO03TidNJDMIVAwJQfl9a7ax0g+GYT yDDHuAfIXWjjYLERip+F4nfk9qHZNJgNuJoiR8B9RXAKdr+QY9XYv4jciudWbE7Z ex3iySS2turwEDOnpo+ajv6tSOD/Y9EsQAueqvXGBJFoq2BezYRSK2F3271Acv46 1pEUtXDxuEHcx6pzIBQfuPa8WQ0vj/j4LsKIRErdM4izZWesLwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNrlon2pTVJRfo+wvFjbTuTYYtjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTkwNmFjYTgtNDAwMy0z YTkwLWExYzctMzY2NGVkNzU0NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKKeqQsBYRMUjWjflmzL6LYfsRp7FeJeNUjsQ5 b8+QQ1775eu3ZYZMgQjrWH26B5H0mRehpLyX7qlHJLCF2QgECdKZvyOHJQI2/6gN ql/hKy6Bo8tz5+vF9einyIUBaBfm7dkV4/r5Ce6IB2ZhOwv4qr778SB6/kaaGKNk /VRzYJhXbt8mro7E9+H3PEz7u148H1mfr1JRdLbXWHOQ08E3F5W+Uw7kYCNpWBu1 Pu++IY6KJ5nevZ5kyk15guHtdaJAlVWNwKX/dHiZezvGL1C28Yo8bmMeXmP4uCtT I321uDB9TBJf8Xe6bJnEqgYWCNEctMhaS5zIML0eYNKnwDML -----END CERTIFICATE-----Generated at Wed Aug 6 11:17:43 2025 by rpki-client