$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa File: b99dd4a8-503c-32d4-9964-02e419491b81.roa (raw, json) Hash identifier: 7PwqIX/NiOWWN5lyx97JCzspbhw56MqsUreWZWOHkKU= Subject key identifier: 08:AF:01:1C:BE:EB:B7:42:05:15:D2:B2:7D:84:D3:D7:E1:21:52:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B96AEC7A1D35B67DFC400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396564 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:96:ae:c7:a1:d3:5b:67:df:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=3513d477-5e2e-4dc4-bc31-1e5f7ccacb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:de:10:ff:e3:bc:7a:18:cd:08:10:d4:63: b6:16:8d:cb:68:54:73:41:5f:fc:8c:1e:37:07:5b: cf:72:dd:46:aa:79:8e:02:94:7c:9a:3e:45:11:53: 65:27:13:bd:b4:67:50:89:13:d2:48:cd:8a:65:63: b0:52:54:97:72:ec:06:e5:f7:b8:71:48:03:f6:64: 24:07:b0:29:6e:a2:bb:f5:22:1e:ce:cf:d8:b5:a6: b3:37:e0:21:b5:34:26:ac:83:e4:e9:a8:8f:dd:49: 36:e4:99:ae:2c:c1:92:bf:bf:e8:b2:c0:54:80:de: 4a:97:8f:c9:3c:6b:a3:68:4d:8f:66:fc:56:60:56: d1:dd:b1:c5:9d:25:19:be:db:fd:56:d9:63:8d:91: a4:d5:e3:64:42:90:8c:68:ec:70:b5:f8:4c:0e:04: b1:bb:1f:a2:45:25:6b:ed:92:a8:83:85:9f:d0:5b: b7:a6:ad:12:8a:8b:49:74:64:45:fb:79:2f:05:2e: 58:7d:a3:a4:52:fe:b2:0e:c9:5a:d4:ab:22:10:e4: e6:fc:7e:f3:e8:7e:26:b0:c7:7f:5f:90:a5:72:bf: 0b:af:d7:25:69:ab:b3:da:ed:f7:58:6d:6b:6e:8e: 93:af:27:c8:ae:6e:e6:fa:dd:48:a0:e3:44:55:2e: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:01:1C:BE:EB:B7:42:05:15:D2:B2:7D:84:D3:D7:E1:21:52:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:be:d6:f3:47:9d:03:c1:07:0e:d1:c8:04:e9:c9:bf:42:0f: d7:6a:4f:98:1d:20:22:16:3b:03:a1:7e:eb:c0:9f:fa:8b:11: b8:a9:3e:80:7d:50:6e:7c:2b:e7:90:2e:ba:f0:2c:c7:2f:4c: 6d:4a:56:49:bd:34:a9:cc:57:84:03:2f:66:35:8f:29:03:b2: c2:bd:30:0e:22:e6:1c:39:03:aa:a8:dd:c6:5e:c4:47:7c:49: cd:40:94:0e:d5:31:30:98:41:5a:05:14:1e:78:9a:e7:45:06: 71:9f:e7:b3:5f:16:3c:42:f8:74:b4:ce:29:4e:af:11:08:e3: 05:e9:86:23:bf:cb:74:f5:a9:85:37:e6:c7:82:68:8a:ca:55: fe:48:4e:93:52:b9:9b:42:bf:15:de:f9:10:76:38:0a:0d:a7: 4b:a5:13:94:e8:9b:26:5e:2f:f9:e3:55:4c:49:cf:30:84:bc: 1d:80:68:e3:e6:4e:71:ab:4d:27:50:fb:2f:79:ea:49:d9:a1: 48:e3:42:1b:19:b0:87:a3:28:b0:49:b7:78:0c:e4:aa:60:80: dd:c3:2f:db:19:2a:26:d6:17:b1:fc:01:ac:3a:56:2a:22:03: ce:96:d9:ef:f0:ee:20:e8:a5:c9:03:77:48:0e:0e:5c:4f:cf: 9c:9b:11:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5aux6HTW2ffxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MzUxM2Q0NzctNWUyZS00ZGM0LWJjMzEtMWU1ZjdjY2FjYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5zeEP/jvHoYzQgQ1GO2Fo3LaFRzQV/8jB43 B1vPct1GqnmOApR8mj5FEVNlJxO9tGdQiRPSSM2KZWOwUlSXcuwG5fe4cUgD9mQk B7ApbqK79SIezs/YtaazN+AhtTQmrIPk6aiP3Uk25JmuLMGSv7/ossBUgN5Kl4/J PGujaE2PZvxWYFbR3bHFnSUZvtv9VtljjZGk1eNkQpCMaOxwtfhMDgSxux+iRSVr 7ZKog4Wf0Fu3pq0SiotJdGRF+3kvBS5YfaOkUv6yDsla1KsiEOTm/H7z6H4msMd/ X5Clcr8Lr9claauz2u33WG1rbo6TryfIrm7m+t1IoONEVS6IEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAivARy+67dCBRXSsn2E09fhIVJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk5ZGQ0YTgtNTAzYy0z MmQ0LTk5NjQtMDJlNDE5NDkxYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVvtbzR50DwQcO0cgE6cm/Qg/Xak+YHSAiFjsD oX7rwJ/6ixG4qT6AfVBufCvnkC668CzHL0xtSlZJvTSpzFeEAy9mNY8pA7LCvTAO IuYcOQOqqN3GXsRHfEnNQJQO1TEwmEFaBRQeeJrnRQZxn+ezXxY8Qvh0tM4pTq8R COMF6YYjv8t09amFN+bHgmiKylX+SE6TUrmbQr8V3vkQdjgKDadLpROU6JsmXi/5 41VMSc8whLwdgGjj5k5xq00nUPsveepJ2aFI40IbGbCHoyiwSbd4DOSqYIDdwy/b GSom1hex/AGsOlYqIgPOltnv8O4g6KXJA3dIDg5cT8+cmxE5 -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:50 2025 by rpki-client