$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a314d9be-15b8-30d0-9a8e-c1e32a9d5ddd.roa File: a314d9be-15b8-30d0-9a8e-c1e32a9d5ddd.roa (raw, json) Hash identifier: Exz0QDfDBZMRPYxVXdDKrW7F3xGiy1V1jpZh37NCtAo= Subject key identifier: 17:D7:75:8F:D7:6F:04:67:D0:B6:5B:E4:63:A1:8F:70:02:5A:EB:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9C89A6C01A9D7F396B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a314d9be-15b8-30d0-9a8e-c1e32a9d5ddd.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396551 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9c:89:a6:c0:1a:9d:7f:39:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=74b24986-021c-4589-96ce-7d97cdd618a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:09:b3:9c:c2:6a:cf:f0:04:c6:1c:80:a4: 58:62:9d:ae:b8:28:a1:b7:ce:c2:05:ab:64:ca:b7: b4:8b:9b:a5:bd:34:d5:bc:a6:a3:83:ae:cf:ee:1a: 8b:47:10:7b:5a:71:91:84:c7:bb:eb:95:37:dc:a4: b5:f0:91:4a:d4:e4:1b:9f:0e:75:f6:b3:c8:ef:41: c7:3b:88:8f:69:de:29:03:e0:74:2f:ce:ae:be:12: 29:6f:da:1d:a8:03:0a:56:da:69:d2:db:97:01:53: 6c:fd:cc:6d:6c:4e:17:b6:b4:5a:17:a2:64:1f:61: a9:e1:13:9a:b1:c6:89:1e:fe:91:83:a2:0b:d0:58: 3d:70:b6:34:76:d1:34:1a:2e:e9:32:8e:22:4a:79: 0f:33:be:d9:c7:8d:ea:bc:08:b9:f8:30:08:52:03: 65:b4:78:47:f7:c2:23:38:69:34:18:bf:69:0f:c4: 73:99:b1:99:0d:ec:81:16:9a:72:84:e9:a7:95:a5: b6:e5:8a:87:5d:40:e1:5f:d8:3d:85:6d:3b:6d:bd: f1:92:9e:63:b7:de:02:14:62:a3:2d:ff:24:00:87: 28:7f:48:60:91:83:47:4d:44:77:d1:d2:dc:c6:a2: 44:6e:74:20:66:fd:e2:cd:0b:85:e9:17:00:9e:70: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D7:75:8F:D7:6F:04:67:D0:B6:5B:E4:63:A1:8F:70:02:5A:EB:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a314d9be-15b8-30d0-9a8e-c1e32a9d5ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0c:d3:59:79:37:da:fc:7a:a4:59:09:73:e9:4d:46:9f:c5: 4d:45:ab:a3:e6:1e:f6:64:95:88:63:7f:a9:05:19:00:ba:b6: 15:83:8d:0d:e9:96:09:a0:2f:a8:c8:94:fd:0f:7a:df:b9:e7: 3a:f4:d3:ff:01:b2:28:87:1d:c8:e5:c5:4d:eb:ac:be:58:c1: 8e:d4:0a:7c:5e:2a:07:e0:f9:a0:e8:96:a0:1f:69:7c:88:7b: 3a:d3:9d:74:61:d2:a3:db:b6:bf:6c:b6:41:ae:9f:2b:04:e4: c8:f0:a1:d9:05:6c:60:33:69:81:74:c9:93:6a:e3:45:2b:30: 78:8b:6b:2c:86:9f:ba:93:b1:17:13:1f:82:30:83:48:e0:c1: 44:44:7f:6a:73:f2:38:4d:14:d5:3e:86:42:df:06:48:9b:c8: 43:57:0e:b9:0f:5e:6f:f2:77:03:94:3f:c5:42:5a:43:e4:fc: fd:5e:86:8a:a5:62:b8:76:f7:b0:fe:38:4a:e7:60:54:64:24: 5c:c8:18:8c:8f:17:c4:5f:36:d1:0f:73:06:fa:a9:37:96:4c: 03:72:8b:ca:e7:25:07:65:fa:a0:5a:99:ec:46:62:2f:d3:23: ea:f6:2f:f5:a7:e9:23:d9:6f:b3:32:24:4e:3c:4e:22:60:6c: be:03:2d:53 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5yJpsAanX85a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NzRiMjQ5ODYtMDIxYy00NTg5LTk2Y2UtN2Q5N2NkZDYxOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQJs5zCas/wBMYcgKRYYp2uuCiht87CBatk yre0i5ulvTTVvKajg67P7hqLRxB7WnGRhMe765U33KS18JFK1OQbnw519rPI70HH O4iPad4pA+B0L86uvhIpb9odqAMKVtpp0tuXAVNs/cxtbE4XtrRaF6JkH2Gp4ROa scaJHv6Rg6IL0Fg9cLY0dtE0Gi7pMo4iSnkPM77Zx43qvAi5+DAIUgNltHhH98Ij OGk0GL9pD8RzmbGZDeyBFppyhOmnlaW25YqHXUDhX9g9hW07bb3xkp5jt94CFGKj Lf8kAIcof0hgkYNHTUR30dLcxqJEbnQgZv3izQuF6RcAnnAxwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBfXdY/XbwRn0LZb5GOhj3ACWuu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTMxNGQ5YmUtMTViOC0z MGQwLTlhOGUtYzFlMzJhOWQ1ZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCODNNZeTfa/HqkWQlz6U1Gn8VNRauj5h72ZJWI Y3+pBRkAurYVg40N6ZYJoC+oyJT9D3rfuec69NP/AbIohx3I5cVN66y+WMGO1Ap8 XioH4Pmg6JagH2l8iHs60510YdKj27a/bLZBrp8rBOTI8KHZBWxgM2mBdMmTauNF KzB4i2sshp+6k7EXEx+CMINI4MFERH9qc/I4TRTVPoZC3wZIm8hDVw65D15v8ncD lD/FQlpD5Pz9XoaKpWK4dvew/jhK52BUZCRcyBiMjxfEXzbRD3MG+qk3lkwDcovK 5yUHZfqgWpnsRmIv0yPq9i/1p+kj2W+zMiROPE4iYGy+Ay1T -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:23 2025 by rpki-client