$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa File: a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa (raw, json) Hash identifier: u1ZEcw2XURMUynDfjUPGz1Pyi/cgeOyLt1xm0IWrJ2M= Subject key identifier: 4D:D9:DD:DF:C4:83:A9:4E:FF:BA:4B:A7:04:83:FF:34:18:9B:DC:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE4897C3938A3712D9E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396587 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e4:89:7c:39:38:a3:71:2d:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d80ac5c8-d859-46a4-987b-c03e1bdaceba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d7:56:30:64:10:cd:aa:e1:00:c6:11:26:2d: 52:fe:9c:ae:2c:5b:75:96:49:fd:78:27:e3:77:8d: b8:1b:89:79:2a:2b:a5:03:70:8a:59:0a:fe:2b:12: 8e:2f:9a:e3:af:01:3f:21:07:4e:26:4e:2e:d2:c9: 01:49:e7:ed:3d:ad:80:4c:f6:f6:68:9e:21:1c:eb: b9:c7:a8:c0:30:41:c4:d1:f1:12:44:3f:9f:5e:b2: 47:d7:e2:6c:58:a9:6d:44:fd:1a:45:9c:f5:4e:b0: 44:ba:52:b2:27:bd:3e:8c:ec:7b:3e:b8:c6:de:9a: 8d:b8:f4:d0:4d:97:aa:2e:69:24:67:b5:f8:4a:d4: 1c:fe:40:45:d1:6d:21:cb:09:6c:46:e4:b4:d7:6f: ba:3b:cb:31:04:21:1f:6a:8b:87:f0:68:89:26:df: d7:34:6a:9c:70:77:2f:fb:b6:87:4b:46:31:25:3e: d9:25:37:c2:9b:dd:1a:61:5a:23:4c:55:07:88:06: 86:e5:ee:1b:de:cd:26:fa:ef:34:b4:69:f6:98:d1: d2:11:36:22:7c:36:d6:2c:4f:9b:dc:48:37:43:e3: d0:0e:6e:9a:85:26:97:af:c7:b3:af:09:21:60:8d: f3:11:ad:ae:80:6e:e9:c7:94:86:0e:61:24:2c:89: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D9:DD:DF:C4:83:A9:4E:FF:BA:4B:A7:04:83:FF:34:18:9B:DC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:84:f6:c6:9b:6a:b5:a4:87:ab:29:c8:80:9c:6b:2c:d5:03: be:0d:45:22:8c:1f:bd:b0:dd:aa:57:43:57:0e:7a:94:18:d0: f5:4a:fa:e2:ca:23:c7:41:d5:92:5a:6c:d3:b1:2c:3a:aa:46: d1:f8:9d:2b:fd:9d:4e:f0:22:40:73:ba:a7:13:21:30:09:e0: 86:37:e2:c6:9d:96:3e:c0:aa:56:8d:c8:aa:8d:ce:28:a2:49: 79:fb:84:59:d9:5a:00:64:c6:a1:5c:1e:b4:c2:b2:a2:90:1d: dd:bc:7d:3b:7f:44:e5:94:37:ac:c1:3a:72:c9:b9:57:a8:48: 64:ec:fe:7e:8c:cc:22:9e:29:d0:61:41:69:19:07:32:61:db: 9c:61:98:be:cf:67:e1:4a:59:67:cd:fb:50:13:8d:78:4f:73: 14:04:98:89:9c:83:31:0a:c4:2e:e1:a4:db:34:eb:8b:f9:37: 49:e9:e9:f3:81:c4:fc:ae:4a:a6:6b:c8:b1:0a:83:8c:c4:17: a9:69:43:f8:15:0b:91:7f:4a:06:5b:83:86:b3:d3:f8:f5:e4: 3f:b0:7c:52:6c:1f:3c:b4:1f:e6:18:68:f5:8e:6f:cc:34:c9: 83:69:fe:d6:24:a8:91:e8:9e:69:91:96:71:bd:b1:04:72:3d: 5a:58:2b:a0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+SJfDk4o3EtngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDgwYWM1YzgtZDg1OS00NmE0LTk4N2ItYzAzZTFiZGFjZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNdWMGQQzarhAMYRJi1S/pyuLFt1lkn9eCfj d424G4l5KiulA3CKWQr+KxKOL5rjrwE/IQdOJk4u0skBSeftPa2ATPb2aJ4hHOu5 x6jAMEHE0fESRD+fXrJH1+JsWKltRP0aRZz1TrBEulKyJ70+jOx7PrjG3pqNuPTQ TZeqLmkkZ7X4StQc/kBF0W0hywlsRuS012+6O8sxBCEfaouH8GiJJt/XNGqccHcv +7aHS0YxJT7ZJTfCm90aYVojTFUHiAaG5e4b3s0m+u80tGn2mNHSETYifDbWLE+b 3Eg3Q+PQDm6ahSaXr8ezrwkhYI3zEa2ugG7px5SGDmEkLInQSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE3Z3d/Eg6lO/7pLpwSD/zQYm9zxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZmMzlkNDAtZjJkMS0z NGQ3LTllYzMtNmEwNTdkYjAwODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAahPbGm2q1pIerKciAnGss1QO+DUUijB+9sN2q V0NXDnqUGND1SvriyiPHQdWSWmzTsSw6qkbR+J0r/Z1O8CJAc7qnEyEwCeCGN+LG nZY+wKpWjciqjc4ookl5+4RZ2VoAZMahXB60wrKikB3dvH07f0TllDeswTpyyblX qEhk7P5+jMwininQYUFpGQcyYducYZi+z2fhSllnzftQE414T3MUBJiJnIMxCsQu 4aTbNOuL+TdJ6enzgcT8rkqma8ixCoOMxBepaUP4FQuRf0oGW4OGs9P49eQ/sHxS bB88tB/mGGj1jm/MNMmDaf7WJKiR6J5pkZZxvbEEcj1aWCug -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:45 2025 by rpki-client