$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3b6deeb-4079-303c-9c18-f66b49ba5941.roa File: b3b6deeb-4079-303c-9c18-f66b49ba5941.roa (raw, json) Hash identifier: MH6z8y51tSe5LzC9Undnb0Y+1MkNUmF4Vx4YALkIqXU= Subject key identifier: 89:15:03:72:97:83:25:65:4B:C1:87:04:97:4E:62:2A:61:DF:61:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE30CEF8070A803C38900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3b6deeb-4079-303c-9c18-f66b49ba5941.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396595 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e3:0c:ef:80:70:a8:03:c3:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b2d85937-1ecc-496a-b2d9-53054161af6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:08:bc:3b:2e:ac:e6:35:f4:e0:f7:c1:9d: 82:45:22:7c:14:12:fe:2e:7a:31:af:b5:2f:90:28: 07:6f:d8:0c:4c:25:dd:7f:1c:ea:c9:3f:bd:d5:44: b4:4a:16:0b:4e:8d:d5:20:26:91:43:ed:21:76:7f: 3b:1d:99:73:89:ed:ed:27:0d:c4:4f:a5:61:6a:ce: 78:8c:df:74:e9:5d:7a:45:ce:21:89:a6:6b:47:5a: 34:01:2d:f7:2a:be:f9:97:26:17:5e:13:13:3e:9f: 45:7f:e4:c7:ea:46:19:6e:7e:f7:c2:c7:70:a8:f7: d2:0c:95:3b:20:89:bb:de:3a:9f:12:0d:57:40:27: 76:02:86:20:f5:40:69:a8:f2:37:5b:3f:9f:13:f2: 88:e8:1e:88:05:9e:e2:65:80:72:cc:d2:95:27:19: 09:cd:94:8c:80:2b:d0:c4:c1:4e:67:7c:95:11:65: 40:81:2f:4c:c2:29:71:b1:92:f1:3b:38:e7:e9:e9: be:aa:83:7e:d8:c0:d0:d9:78:31:f9:a7:33:dc:15: 85:c8:f7:cd:d6:8d:ea:37:57:0c:c3:c1:ac:84:5b: 10:44:38:df:37:cc:16:b8:63:7d:0a:b2:fa:22:d6: 47:e1:2a:66:10:ea:2b:66:8c:22:24:4a:e4:dc:2f: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:15:03:72:97:83:25:65:4B:C1:87:04:97:4E:62:2A:61:DF:61:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3b6deeb-4079-303c-9c18-f66b49ba5941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f2:ea:ca:44:1a:1f:b5:0d:a4:b4:18:71:c8:8d:58:ab:14: 5d:b5:2d:6f:8b:ad:73:cc:d4:fc:a6:99:cc:80:1b:6a:72:02: c3:50:90:6f:6c:dd:1a:10:79:bb:4a:52:9c:c8:78:b8:0b:15: b9:3e:03:ec:9f:87:bc:eb:7e:d2:c3:fd:20:e7:95:94:f0:1c: 30:67:73:d6:c5:05:94:26:16:27:05:68:f9:04:93:7c:ef:7f: 18:e7:98:2f:4d:45:a5:2b:a9:a7:17:fd:19:23:e8:b2:18:ad: 29:35:cd:25:5e:8f:12:71:12:26:a0:d3:6a:3e:d7:97:4a:83: 50:cf:9e:10:00:f6:ce:8a:d0:ae:f7:e1:cf:64:86:54:26:6d: 17:fb:c0:ee:c9:44:66:39:70:8a:ac:75:8f:69:93:0c:92:c3: 5d:45:0b:90:dd:cc:36:c8:e2:79:1d:7a:e5:c5:60:9a:b8:8f: 12:dd:a7:f2:06:e2:2a:fa:3e:d4:51:0e:6e:78:4a:d7:81:23: e9:09:09:cb:68:1b:a9:9c:4d:f9:db:8a:73:6b:84:5d:0f:17: 6a:3b:67:54:11:da:73:ec:95:39:67:ed:84:49:2a:4d:00:83: 9f:58:20:27:6e:fb:78:fd:57:61:bb:5b:e2:30:4c:22:34:2e: de:a1:59:c7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+MM74BwqAPDiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjJkODU5MzctMWVjYy00OTZhLWIyZDktNTMwNTQxNjFhZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/oIvDsurOY19OD3wZ2CRSJ8FBL+Lnoxr7Uv kCgHb9gMTCXdfxzqyT+91US0ShYLTo3VICaRQ+0hdn87HZlzie3tJw3ET6Vhas54 jN906V16Rc4hiaZrR1o0AS33Kr75lyYXXhMTPp9Ff+TH6kYZbn73wsdwqPfSDJU7 IIm73jqfEg1XQCd2AoYg9UBpqPI3Wz+fE/KI6B6IBZ7iZYByzNKVJxkJzZSMgCvQ xMFOZ3yVEWVAgS9MwilxsZLxOzjn6em+qoN+2MDQ2Xgx+acz3BWFyPfN1o3qN1cM w8GshFsQRDjfN8wWuGN9CrL6ItZH4SpmEOorZowiJErk3C9nmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIkVA3KXgyVlS8GHBJdOYiph32FDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNiNmRlZWItNDA3OS0z MDNjLTljMTgtZjY2YjQ5YmE1OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCH8urKRBoftQ2ktBhxyI1YqxRdtS1vi61zzNT8 ppnMgBtqcgLDUJBvbN0aEHm7SlKcyHi4CxW5PgPsn4e8637Sw/0g55WU8BwwZ3PW xQWUJhYnBWj5BJN8738Y55gvTUWlK6mnF/0ZI+iyGK0pNc0lXo8ScRImoNNqPteX SoNQz54QAPbOitCu9+HPZIZUJm0X+8DuyURmOXCKrHWPaZMMksNdRQuQ3cw2yOJ5 HXrlxWCauI8S3afyBuIq+j7UUQ5ueErXgSPpCQnLaBupnE3524pza4RdDxdqO2dU Edpz7JU5Z+2ESSpNAIOfWCAnbvt4/Vdhu1viMEwiNC7eoVnH -----END CERTIFICATE-----Generated at Wed Aug 6 00:33:40 2025 by rpki-client