$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa File: a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa (raw, json) Hash identifier: QvH1vNzU+E9nMqHlzM12bjE12HkabsZECHFCPGNhz54= Subject key identifier: 8D:B9:F5:DA:36:42:C1:BB:85:23:12:65:2B:1E:05:4A:58:87:EC:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B92B7622FA5754A4DBF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 19836 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:92:b7:62:2f:a5:75:4a:4d:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=8797d24b-6dbd-4099-ae3a-e3e1313a16bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:d8:6d:79:a5:fc:9d:a7:c6:f3:27:c1:b0: 69:0b:a4:b9:05:38:e6:02:d9:00:26:b3:2a:d1:bd: 79:c1:35:4f:d1:2c:2e:60:16:89:31:f1:dd:9e:84: c6:d2:48:02:8b:92:69:64:ee:97:8b:5a:a0:ef:ec: 1d:a3:8b:c9:83:88:21:a2:36:b5:58:f5:57:7e:67: 1f:c0:ac:8b:4f:34:ec:33:a8:eb:f8:ab:d0:0b:bd: f6:68:c3:07:ae:92:13:fe:4d:99:ed:bc:84:17:45: 2e:62:87:61:b7:4a:cc:db:90:30:ac:ba:dd:53:71: 17:96:d9:41:84:9e:05:22:68:a6:3a:15:fc:c5:d4: f7:1b:8d:f0:67:1c:a3:77:22:b4:48:46:45:42:4e: c8:16:0d:52:8d:96:8c:7b:9a:af:66:57:6d:bc:e6: 73:08:91:bc:f5:e1:b1:40:9e:8d:e3:b1:b7:cb:f3: 4f:6d:1a:18:fb:67:e8:55:50:34:e7:10:af:a8:d6: fa:a2:a3:ed:51:4c:84:c9:4d:e3:1c:5d:e2:69:c3: b1:68:3f:f1:41:6a:74:8f:5f:fc:c8:b2:e3:58:8d: 18:c6:cd:68:70:f6:b6:aa:00:cc:fe:21:ab:47:6e: 34:c1:ae:2a:2d:73:3f:5d:c8:03:d2:f3:7e:1a:91: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B9:F5:DA:36:42:C1:BB:85:23:12:65:2B:1E:05:4A:58:87:EC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3b:eb:ef:09:fb:db:bb:78:8a:68:23:b9:7f:a7:ec:4a:1c: a5:b0:20:89:b4:a0:2a:94:ba:21:2a:5c:1b:af:6e:4a:25:b5: 1c:8f:81:70:1d:68:3e:a9:88:a2:a5:b9:cd:d5:6e:ac:9a:42: b0:8e:72:45:ff:8d:db:29:8d:e4:c1:4b:a6:d0:03:16:ba:00: ed:06:66:49:66:bd:92:18:07:27:d0:8e:f5:58:86:31:bb:5f: 98:0b:43:8d:a3:d1:9e:b7:91:ce:ae:ae:ca:63:b4:8f:d2:a1: 13:10:d9:3e:79:53:93:08:be:9b:25:37:12:15:c5:ec:b6:b8: 8b:68:50:6b:af:79:c7:bb:aa:bc:a2:83:ad:68:7a:50:de:76: 39:58:f2:8f:20:74:03:d3:57:a4:38:12:b9:77:f9:16:21:bd: fb:9a:51:ac:2e:8a:64:13:aa:35:50:11:56:26:cf:4c:7b:da: 0f:13:bf:e1:b5:da:ed:e1:01:65:00:78:e9:99:70:cb:8e:24: 45:00:e0:b7:50:68:dd:4b:43:b6:25:c6:63:fc:08:ba:63:11: 20:57:41:2b:a9:47:87:0a:1a:6d:23:0d:69:14:3b:c7:76:03: 73:48:ba:14:a5:67:d6:ca:35:67:7c:0f:61:d3:60:7b:ee:08: 0f:3a:ff:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5K3Yi+ldUpNv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ODc5N2QyNGItNmRiZC00MDk5LWFlM2EtZTNlMTMxM2ExNmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsrYbXml/J2nxvMnwbBpC6S5BTjmAtkAJrMq 0b15wTVP0SwuYBaJMfHdnoTG0kgCi5JpZO6Xi1qg7+wdo4vJg4ghoja1WPVXfmcf wKyLTzTsM6jr+KvQC732aMMHrpIT/k2Z7byEF0UuYodht0rM25AwrLrdU3EXltlB hJ4FImimOhX8xdT3G43wZxyjdyK0SEZFQk7IFg1SjZaMe5qvZldtvOZzCJG89eGx QJ6N47G3y/NPbRoY+2foVVA05xCvqNb6oqPtUUyEyU3jHF3iacOxaD/xQWp0j1/8 yLLjWI0Yxs1ocPa2qgDM/iGrR240wa4qLXM/XcgD0vN+GpFZwwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI259do2QsG7hSMSZSseBUpYh+zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTcwNWRjZjYtN2IwMy0z OWI2LTliZWYtZGM1YTMxNzI2NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApO+vvCfvbu3iKaCO5f6fsShylsCCJtKAqlLoh Klwbr25KJbUcj4FwHWg+qYiipbnN1W6smkKwjnJF/43bKY3kwUum0AMWugDtBmZJ Zr2SGAcn0I71WIYxu1+YC0ONo9Get5HOrq7KY7SP0qETENk+eVOTCL6bJTcSFcXs triLaFBrr3nHu6q8ooOtaHpQ3nY5WPKPIHQD01ekOBK5d/kWIb37mlGsLopkE6o1 UBFWJs9Me9oPE7/htdrt4QFlAHjpmXDLjiRFAOC3UGjdS0O2JcZj/Ai6YxEgV0Er qUeHChptIw1pFDvHdgNzSLoUpWfWyjVnfA9h02B77ggPOv9l -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:07 2025 by rpki-client