$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa File: a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa (raw, json) Hash identifier: AaZk3ScC+WwD3h98fiBy7DTLD+phsIAVm0w5QokfZiU= Subject key identifier: 15:A5:E0:A6:78:53:59:78:DD:A0:2A:C6:6D:0E:2A:05:13:7C:E3:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B953798097CA3AE5820A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396581 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:95:37:98:09:7c:a3:ae:58:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=df1d15d2-142a-416d-8a0b-b155bf4514c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:76:31:14:e6:55:55:a4:c1:9e:e3:d9:3f: 8e:0b:8f:46:cd:51:c3:f6:c2:77:36:6a:ad:ce:0d: bb:b6:51:0e:7b:0d:d4:38:1c:b0:90:a4:2f:77:31: 25:f9:72:a1:e8:cd:ba:e6:7e:6a:30:70:86:2a:0c: 9a:af:b8:ff:f2:c2:43:9e:dc:b2:af:49:ab:93:06: 24:e1:26:71:05:1c:c7:3d:34:ab:04:fe:51:36:f8: cf:69:09:06:2e:d9:4e:40:66:6b:57:6f:2e:69:2f: f8:a8:b2:25:34:f3:59:2c:7f:fa:c1:3f:b2:5c:1c: 3e:26:1b:05:96:0f:dc:ad:98:2e:48:8d:6e:05:15: 5a:b0:b6:57:04:a3:12:be:09:2d:ef:e5:71:46:34: f4:1d:27:10:3c:29:35:17:51:dc:dc:ff:89:d6:5f: e7:89:75:87:07:1b:5a:88:d1:41:59:97:00:4c:20: 09:b9:a2:af:aa:dd:29:5d:ab:ce:53:65:cf:7e:4a: 52:96:6d:84:a7:44:19:fa:a8:41:41:f7:51:d6:1d: ba:81:0b:67:c3:72:8b:40:d2:ce:38:a0:6d:b2:f0: 2f:b1:60:d0:7a:b6:4b:98:55:a6:ec:ed:68:eb:31: f4:54:1b:ec:e6:1b:74:ca:0b:6c:3a:be:b3:2f:05: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A5:E0:A6:78:53:59:78:DD:A0:2A:C6:6D:0E:2A:05:13:7C:E3:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:de:b5:40:64:90:5e:75:de:29:05:23:8f:d7:45:26:39:d1: ee:0c:80:04:85:81:9b:6b:f5:8f:89:87:28:31:d6:8b:4d:86: 78:e2:06:65:01:ed:5c:8d:0d:23:4f:81:b5:ae:8a:3b:be:82: 3c:d0:3b:40:f0:da:03:d7:1c:0b:62:a8:44:ed:6b:f1:8b:5d: 08:83:fa:14:83:63:c6:df:77:f7:34:ee:45:75:24:e0:b4:c9: 9a:c8:8c:4b:18:8f:0b:f4:37:6e:18:ab:f6:1b:42:a4:36:be: c7:1d:d5:4f:38:b6:e4:8f:a8:b5:32:b5:5c:62:1d:3a:14:40: ad:67:83:6d:a7:cb:e4:18:63:3f:10:7e:88:84:3e:4b:ec:63: 53:5e:94:2d:b1:b3:39:09:45:19:ef:7f:e8:83:b9:01:cb:6e: 0b:8a:b3:76:7f:4a:c3:e4:77:1a:96:b9:1e:e0:07:61:68:30: 34:0d:4f:2e:41:6b:53:0b:f0:60:2d:0a:e6:fc:8e:6f:82:ec: e1:60:3b:93:95:09:87:88:56:d6:6b:10:11:ee:8c:89:23:3b: b4:1f:0d:91:33:e2:e5:b1:02:72:c4:1c:86:e4:57:a9:a5:8e: 88:f2:91:93:4d:cc:91:db:6d:b1:bd:26:9e:0e:d0:54:3b:c6: b6:b8:14:2d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5U3mAl8o65YIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZGYxZDE1ZDItMTQyYS00MTZkLThhMGItYjE1NWJmNDUxNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcd2MRTmVVWkwZ7j2T+OC49GzVHD9sJ3Nmqt zg27tlEOew3UOBywkKQvdzEl+XKh6M265n5qMHCGKgyar7j/8sJDntyyr0mrkwYk 4SZxBRzHPTSrBP5RNvjPaQkGLtlOQGZrV28uaS/4qLIlNPNZLH/6wT+yXBw+JhsF lg/crZguSI1uBRVasLZXBKMSvgkt7+VxRjT0HScQPCk1F1Hc3P+J1l/niXWHBxta iNFBWZcATCAJuaKvqt0pXavOU2XPfkpSlm2Ep0QZ+qhBQfdR1h26gQtnw3KLQNLO OKBtsvAvsWDQerZLmFWm7O1o6zH0VBvs5ht0ygtsOr6zLwWnXQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBWl4KZ4U1l43aAqxm0OKgUTfOMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJhMGM5NTYtMzBmOC0z YmYyLTgyZTMtYjBjYjRkNmY2MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBq3rVAZJBedd4pBSOP10UmOdHuDIAEhYGba/WP iYcoMdaLTYZ44gZlAe1cjQ0jT4G1roo7voI80DtA8NoD1xwLYqhE7Wvxi10Ig/oU g2PG33f3NO5FdSTgtMmayIxLGI8L9DduGKv2G0KkNr7HHdVPOLbkj6i1MrVcYh06 FECtZ4Ntp8vkGGM/EH6IhD5L7GNTXpQtsbM5CUUZ73/og7kBy24LirN2f0rD5Hca lrke4AdhaDA0DU8uQWtTC/BgLQrm/I5vguzhYDuTlQmHiFbWaxAR7oyJIzu0Hw2R M+LlsQJyxByG5FeppY6I8pGTTcyR222xvSaeDtBUO8a2uBQt -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:03 2025 by rpki-client