$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa File: 9fa7604e-6116-387d-b30a-5905d9aea60c.roa (raw, json) Hash identifier: JfjgqASxs8AZB2u6GEj7+X2AcZL65M4iI+AdEYQ1B/I= Subject key identifier: A2:65:48:E7:1F:A4:31:1A:CB:02:C7:C3:43:3F:F7:95:6A:5F:94:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B92C72250D091D17F3600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397197 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:92:c7:22:50:d0:91:d1:7f:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=794184ec-d159-463b-b414-7214696cd586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:14:5e:c7:d2:a2:d4:ad:67:b4:34:3a:2e: 85:77:56:d2:68:1c:d8:e8:42:b7:1c:d5:ae:0e:0c: 5d:2b:51:42:06:fc:50:93:09:25:c3:c3:1c:ee:a1: 4b:04:c9:07:0d:fa:f8:31:81:06:3b:98:8f:fd:a1: 18:60:c6:4c:20:7a:bd:b0:0e:3c:a5:03:20:41:13: de:4f:94:fc:3a:14:eb:81:8e:9a:5f:1c:fe:ea:a3: 65:d5:45:9e:ff:51:fa:fe:dc:60:97:08:73:1f:ca: 4e:ea:a4:fb:82:17:ff:32:95:0f:83:54:72:1b:42: a9:4e:7d:91:86:a8:eb:91:da:24:54:32:bd:05:76: c7:91:b5:0e:1f:a4:10:29:e3:55:00:91:23:bc:df: bc:5c:e4:67:57:2b:03:4a:58:dc:bd:1a:ec:67:bc: 73:93:dd:0a:cd:a2:e4:18:37:ed:63:d6:43:3f:cf: cc:6e:fe:f7:39:98:b2:2f:ff:34:7b:bf:2c:86:4f: 87:f3:30:b7:dc:16:ee:b1:6c:cb:9a:06:25:72:fe: 6c:e1:82:62:37:9c:7e:95:91:51:34:55:1c:f2:ef: d6:bc:51:40:60:83:fe:63:e2:26:37:b5:5c:07:ad: 07:85:c0:ed:37:fe:25:74:9a:06:23:24:7e:79:b1: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:65:48:E7:1F:A4:31:1A:CB:02:C7:C3:43:3F:F7:95:6A:5F:94:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6a:c0:72:2c:fa:42:f0:4a:f4:ac:48:c8:0b:96:b0:16:f0: e5:31:be:f6:07:f1:a3:b1:2e:b7:6e:8b:61:1f:71:1c:84:2c: 09:cf:dc:d1:93:37:00:d8:09:07:51:ef:d9:59:0a:10:fa:c4: 0e:87:3f:c3:5b:7d:75:23:e1:68:0d:8c:9a:c9:07:46:be:9b: c0:8d:4e:4f:2c:d5:dc:ec:c6:8f:05:71:8e:dd:dc:a8:8f:d7: ad:c6:95:c0:33:77:d0:d2:ed:63:91:0e:dc:e7:6a:dc:07:7e: 9d:42:3c:65:5e:d9:1f:63:40:f9:98:5c:c5:90:29:86:d3:af: d4:6e:f1:27:de:09:81:d8:44:d1:18:91:c9:d7:2a:59:9d:41: e9:83:09:5c:2c:d2:b4:3b:a9:b0:93:72:f1:65:e0:76:ff:0d: 8b:05:e7:8f:01:fd:4f:90:09:3a:46:d0:6d:fa:fe:ef:bd:f0: 7e:31:4c:de:ff:fc:3d:08:79:3b:1f:c9:19:3d:2e:f8:52:8a: ee:0f:4d:21:4a:b4:41:df:7a:75:46:23:7c:2b:88:31:8b:55: b7:db:ca:92:4a:b9:29:3f:02:b2:5f:f1:79:bf:ba:34:15:1d: 59:31:ae:39:67:22:0f:de:8d:08:49:88:15:83:58:46:f6:28: 8e:de:ad:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5LHIlDQkdF/NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk Nzk0MTg0ZWMtZDE1OS00NjNiLWI0MTQtNzIxNDY5NmNkNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYMUXsfSotStZ7Q0Oi6Fd1bSaBzY6EK3HNWu DgxdK1FCBvxQkwklw8Mc7qFLBMkHDfr4MYEGO5iP/aEYYMZMIHq9sA48pQMgQRPe T5T8OhTrgY6aXxz+6qNl1UWe/1H6/txglwhzH8pO6qT7ghf/MpUPg1RyG0KpTn2R hqjrkdokVDK9BXbHkbUOH6QQKeNVAJEjvN+8XORnVysDSljcvRrsZ7xzk90KzaLk GDftY9ZDP8/Mbv73OZiyL/80e78shk+H8zC33BbusWzLmgYlcv5s4YJiN5x+lZFR NFUc8u/WvFFAYIP+Y+ImN7VcB60HhcDtN/4ldJoGIyR+ebGTUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKJlSOcfpDEaywLHw0M/95VqX5QtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWZhNzYwNGUtNjExNi0z ODdkLWIzMGEtNTkwNWQ5YWVhNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBbasByLPpC8Er0rEjIC5awFvDlMb72B/GjsS63 bothH3EchCwJz9zRkzcA2AkHUe/ZWQoQ+sQOhz/DW311I+FoDYyayQdGvpvAjU5P LNXc7MaPBXGO3dyoj9etxpXAM3fQ0u1jkQ7c52rcB36dQjxlXtkfY0D5mFzFkCmG 06/UbvEn3gmB2ETRGJHJ1ypZnUHpgwlcLNK0O6mwk3LxZeB2/w2LBeePAf1PkAk6 RtBt+v7vvfB+MUze//w9CHk7H8kZPS74UoruD00hSrRB33p1RiN8K4gxi1W328qS SrkpPwKyX/F5v7o0FR1ZMa45ZyIP3o0ISYgVg1hG9iiO3q29 -----END CERTIFICATE-----Generated at Thu Aug 7 03:32:16 2025 by rpki-client