$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afe64ea5-04b0-3478-b6bb-680e04301ee0.roa File: afe64ea5-04b0-3478-b6bb-680e04301ee0.roa (raw, json) Hash identifier: YgC30cgF7+vv3mPV/i/Fxe4u6dX9d/LDlX/e1jMHR5w= Subject key identifier: C4:5D:E5:04:45:CD:BC:03:61:56:BB:0D:BA:56:28:C4:C9:08:37:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B95D44721AC39A67CFA40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afe64ea5-04b0-3478-b6bb-680e04301ee0.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396565 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:95:d4:47:21:ac:39:a6:7c:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f97e1d47-a783-46a1-9884-d167329dd522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:b6:d9:27:c0:e8:61:c2:cf:ee:0a:9d:87: fe:98:fc:15:de:05:a2:1b:5b:cf:9b:fc:0a:20:58: d3:23:37:43:87:be:d5:52:b6:4f:ba:76:c1:3e:c5: 87:c2:34:fd:04:22:ed:55:23:99:0c:f0:32:50:c8: a6:75:ba:3e:d1:d3:74:83:1b:e4:ca:28:fb:da:fd: 83:35:48:2e:3f:8e:d1:19:ec:3a:48:84:cf:c1:0b: e4:1b:2f:2b:39:93:3b:99:8f:5a:06:1f:db:82:2b: 8d:99:19:11:45:c4:ce:80:d2:76:fc:0d:70:0b:92: 9f:83:37:7b:fa:26:c1:d3:fa:50:ac:89:b1:e5:3c: 1d:8f:8d:3a:73:b3:2c:01:95:ed:35:62:d8:4e:f8: db:ab:4f:90:32:2c:56:8a:06:73:dc:06:4a:ff:66: 98:40:4c:92:7b:c4:b6:3e:35:8e:bf:3f:d4:ed:40: 6f:30:3f:d5:c7:a5:81:9f:a1:aa:54:60:42:92:a6: 41:f1:6f:d3:bb:41:cd:cf:c1:c2:60:44:f6:16:25: 82:34:3f:20:25:4d:94:4d:b9:de:71:3b:94:0f:31: b0:09:68:5b:97:2e:54:7a:71:77:bd:ba:91:c2:e6: a2:25:ad:38:50:58:f3:6f:2d:85:d8:13:e6:5c:ce: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5D:E5:04:45:CD:BC:03:61:56:BB:0D:BA:56:28:C4:C9:08:37:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afe64ea5-04b0-3478-b6bb-680e04301ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2d:dc:76:49:32:a3:c5:c2:44:f2:46:22:6f:d0:66:6b:fa: 81:20:a3:0c:a0:92:16:38:f6:10:3a:96:81:90:e3:b8:04:cf: 21:78:bb:de:cb:c0:e0:a8:37:03:2e:b4:13:93:e6:a4:6d:47: 46:ce:95:f7:59:6d:54:7c:85:03:56:02:e2:ac:69:52:dd:c9: a9:32:be:80:3d:2e:b3:e0:6a:4b:3a:3c:f7:2d:ac:7b:c7:53: 9b:a3:e2:ca:c8:fa:03:b4:35:56:c0:52:80:6c:d6:f5:4f:76: 46:0f:df:8e:1a:87:e9:f7:6e:9d:74:47:71:00:1a:1c:f7:a5: c8:b5:19:04:45:33:32:db:e4:37:d3:19:6c:9e:6d:1e:3d:de: 29:4a:f5:71:ae:b8:6b:fa:ab:07:70:b9:dd:45:2e:39:29:6e: 9c:f0:06:e1:84:ee:c9:5e:22:97:ae:e2:a2:4a:32:17:48:59: fe:32:a7:f9:9a:15:44:e8:49:54:b9:10:ea:a1:1d:a9:fb:9b: 11:5b:fb:59:b6:1a:d6:2e:8a:d9:03:42:92:1f:93:eb:66:91: 08:8f:5a:22:8c:70:2a:fe:cb:10:fa:f0:39:c5:6d:db:24:57: 10:0c:b7:d2:d9:2c:23:b7:22:ae:52:e9:da:cb:5a:00:b1:fa: d6:2d:98:a0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5XURyGsOaZ8+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk Zjk3ZTFkNDctYTc4My00NmExLTk4ODQtZDE2NzMyOWRkNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiu22SfA6GHCz+4KnYf+mPwV3gWiG1vPm/wK IFjTIzdDh77VUrZPunbBPsWHwjT9BCLtVSOZDPAyUMimdbo+0dN0gxvkyij72v2D NUguP47RGew6SITPwQvkGy8rOZM7mY9aBh/bgiuNmRkRRcTOgNJ2/A1wC5Kfgzd7 +ibB0/pQrImx5Twdj406c7MsAZXtNWLYTvjbq0+QMixWigZz3AZK/2aYQEySe8S2 PjWOvz/U7UBvMD/Vx6WBn6GqVGBCkqZB8W/Tu0HNz8HCYET2FiWCND8gJU2UTbne cTuUDzGwCWhbly5UenF3vbqRwuaiJa04UFjzby2F2BPmXM4MvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMRd5QRFzbwDYVa7DbpWKMTJCDfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZlNjRlYTUtMDRiMC0z NDc4LWI2YmItNjgwZTA0MzAxZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhLdx2STKjxcJE8kYib9Bma/qBIKMMoJIWOPYQ OpaBkOO4BM8heLvey8DgqDcDLrQTk+akbUdGzpX3WW1UfIUDVgLirGlS3cmpMr6A PS6z4GpLOjz3Lax7x1Obo+LKyPoDtDVWwFKAbNb1T3ZGD9+OGofp926ddEdxABoc 96XItRkERTMy2+Q30xlsnm0ePd4pSvVxrrhr+qsHcLndRS45KW6c8AbhhO7JXiKX ruKiSjIXSFn+Mqf5mhVE6ElUuRDqoR2p+5sRW/tZthrWLorZA0KSH5PrZpEIj1oi jHAq/ssQ+vA5xW3bJFcQDLfS2SwjtyKuUunay1oAsfrWLZig -----END CERTIFICATE-----Generated at Wed Aug 6 10:08:57 2025 by rpki-client