$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afb7aa4a-02a7-3488-8fda-585f32d697c2.roa File: afb7aa4a-02a7-3488-8fda-585f32d697c2.roa (raw, json) Hash identifier: wGqg6EWTGk+vZZbrV7Ak/MSePv/3SXziyAJNP46BZqw= Subject key identifier: BD:22:23:2E:AB:E4:95:80:37:38:E1:D7:59:0F:12:4F:6B:CA:45:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B946180023683CA624D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afb7aa4a-02a7-3488-8fda-585f32d697c2.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397207 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:94:61:80:02:36:83:ca:62:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=c5b910e2-336b-4dbe-a19f-275cfa715ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a9:d7:70:92:92:09:0b:97:c2:88:5b:d7:d4: 51:2b:62:1a:99:f3:96:99:fa:89:d6:71:d2:d4:67: 43:96:84:48:74:64:49:24:a7:72:9c:cc:11:b4:75: 1f:73:a0:aa:b0:3d:4e:58:61:c4:81:9b:88:d5:c9: 51:58:08:4d:40:a2:f8:0e:3f:25:b2:f5:5d:6d:76: 27:66:a8:fb:15:a8:94:65:b5:99:99:93:70:2f:45: 0d:df:0e:84:6f:42:0b:7d:9f:d3:7a:57:98:a5:dc: c5:aa:ad:63:02:72:04:ea:3b:c7:a5:9e:38:a0:4c: fc:de:7b:e4:0d:5e:8b:b8:f1:4d:1e:a9:1a:5b:70: 6c:b5:b8:14:e6:e7:5c:12:36:80:52:61:44:85:a9: f2:9e:90:5e:94:6e:2a:42:02:7f:15:32:91:42:d4: 1b:52:b5:7d:19:e3:40:70:1c:ca:54:41:a5:6e:fc: a8:9a:cd:72:be:30:de:8d:8a:17:20:80:31:f1:ab: 00:4d:7d:63:04:a3:ed:9c:f5:fc:07:83:c9:8a:7a: df:81:59:13:50:aa:42:97:0e:ec:15:c8:ca:38:96: 92:da:d2:bd:58:17:38:77:81:9d:dc:47:0b:35:46: e0:50:dd:ea:44:75:79:bd:2b:e5:6a:e8:05:83:ca: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:23:2E:AB:E4:95:80:37:38:E1:D7:59:0F:12:4F:6B:CA:45:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afb7aa4a-02a7-3488-8fda-585f32d697c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ec:d7:25:57:6a:dc:e4:c9:8f:84:43:a7:47:ad:67:18:0b: 78:c7:58:34:d3:d6:23:6d:5a:d3:0f:8c:f9:e1:12:3b:5a:7f: 2e:07:4c:c0:5a:42:46:74:e1:b6:f7:48:ff:69:7b:21:f8:c4: 4b:0a:5e:5c:72:07:10:8f:6e:47:73:12:07:2f:1c:01:52:57: 7d:a0:4e:8a:b3:84:cc:5a:9c:71:b9:68:5e:a4:af:dc:db:88: 25:99:b3:93:67:14:f9:45:95:bb:05:5c:30:58:8a:f0:76:ca: 70:21:66:4f:d3:f9:f9:5e:7b:0e:a6:1a:0a:fc:00:7f:bb:2b: d9:6d:12:d4:cd:3e:8d:ea:e1:c2:d6:26:63:2e:ba:91:e4:a4: 89:8e:32:a8:48:2f:b5:5b:8e:75:d9:b6:f7:09:ad:c0:c5:e5: d3:34:51:93:a9:59:99:a2:84:22:75:47:b9:10:aa:6f:44:49: 0d:77:13:9e:da:17:54:07:4a:0c:1f:1a:48:46:96:d3:ae:b7: 25:86:7d:e8:01:9d:95:c9:46:f3:e0:38:ad:b0:94:c3:1e:14: 5a:9a:47:f7:8f:78:3a:67:f3:f4:a8:00:58:ce:f6:e5:cc:c6: 15:2c:40:b8:1a:c6:0d:6a:11:be:aa:53:e7:1a:ee:46:50:05: 28:06:31:23 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5RhgAI2g8piTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YzViOTEwZTItMzM2Yi00ZGJlLWExOWYtMjc1Y2ZhNzE1YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKnXcJKSCQuXwohb19RRK2IamfOWmfqJ1nHS 1GdDloRIdGRJJKdynMwRtHUfc6CqsD1OWGHEgZuI1clRWAhNQKL4Dj8lsvVdbXYn Zqj7FaiUZbWZmZNwL0UN3w6Eb0ILfZ/TeleYpdzFqq1jAnIE6jvHpZ44oEz83nvk DV6LuPFNHqkaW3BstbgU5udcEjaAUmFEhanynpBelG4qQgJ/FTKRQtQbUrV9GeNA cBzKVEGlbvyoms1yvjDejYoXIIAx8asATX1jBKPtnPX8B4PJinrfgVkTUKpClw7s FcjKOJaS2tK9WBc4d4Gd3EcLNUbgUN3qRHV5vSvlaugFg8r2cwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL0iIy6r5JWANzjh11kPEk9rykWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZiN2FhNGEtMDJhNy0z NDg4LThmZGEtNTg1ZjMyZDY5N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAB7NclV2rc5MmPhEOnR61nGAt4x1g009YjbVrT D4z54RI7Wn8uB0zAWkJGdOG290j/aXsh+MRLCl5ccgcQj25HcxIHLxwBUld9oE6K s4TMWpxxuWhepK/c24glmbOTZxT5RZW7BVwwWIrwdspwIWZP0/n5XnsOphoK/AB/ uyvZbRLUzT6N6uHC1iZjLrqR5KSJjjKoSC+1W4512bb3Ca3AxeXTNFGTqVmZooQi dUe5EKpvREkNdxOe2hdUB0oMHxpIRpbTrrclhn3oAZ2VyUbz4DitsJTDHhRamkf3 j3g6Z/P0qABYzvblzMYVLEC4GsYNahG+qlPnGu5GUAUoBjEj -----END CERTIFICATE-----Generated at Wed Aug 6 13:03:28 2025 by rpki-client