$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa File: baf5385d-2f68-372a-9c60-6ed99c881111.roa (raw, json) Hash identifier: NG+vB1MvWPhQG4aOLh/jMyQvhJJrItRCK5Aqvjrzsec= Subject key identifier: 1C:13:16:B5:EF:64:9E:30:8B:57:50:9C:81:A4:68:14:60:36:71:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9D1DA7E63483B6377DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396592 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9d:1d:a7:e6:34:83:b6:37:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=9b808da3-3308-4ff4-aa8e-b7b3d9c76198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:4f:e3:6c:95:1f:80:41:dd:d8:1f:24:34: f3:2d:6a:9c:1a:46:5a:61:7b:f5:7c:34:65:98:ac: e9:b1:13:95:cb:11:8f:31:1e:97:99:db:91:8c:65: be:f3:05:13:7e:a8:41:49:51:fc:bd:63:ff:e5:48: 60:b1:f0:0e:f5:51:78:33:f0:88:82:ff:6b:bd:c6: 7d:c6:0a:8a:27:26:97:e1:42:ea:86:8a:e1:b2:1e: 9e:ac:bd:a2:f3:9f:55:29:df:fa:25:0b:6c:82:cf: 51:5e:af:83:6f:c0:9c:04:4a:8f:8f:7f:75:29:d9: 83:59:9c:af:3b:3c:9e:51:10:12:34:1b:cf:fc:2d: 6e:75:a3:eb:39:88:9f:96:ab:11:4a:b3:b5:15:19: a0:47:fa:99:72:9a:28:e5:84:9c:33:4b:02:c6:a8: 11:f1:7b:ab:fc:bf:f2:d5:ea:f6:e2:15:dc:44:d5: d2:be:f7:b1:fe:27:04:4d:bf:03:11:84:df:12:a5: 15:7f:14:9f:a7:54:29:ae:c0:47:55:e7:0d:cf:b0: 20:d4:31:59:e2:ec:be:d0:8f:9f:e0:63:c6:ff:92: 03:6b:3d:94:b5:ce:96:af:2b:3a:03:12:32:3f:6f: 71:dd:a5:58:ef:f3:44:82:1c:6a:b7:5b:2e:1c:55: 0d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:13:16:B5:EF:64:9E:30:8B:57:50:9C:81:A4:68:14:60:36:71:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c5:60:d4:b0:ca:76:bd:dc:1a:4d:02:d6:ad:d9:94:41:5f: f8:03:8f:45:8d:ef:8e:13:3d:9c:64:e8:4e:d8:88:76:22:41: 36:fb:01:af:dd:89:fc:f7:40:03:a2:37:aa:5b:73:54:30:73: 90:d0:43:9b:54:7b:0d:b0:fe:e1:4a:3c:38:6b:6b:fb:a1:ea: 8f:32:24:e7:d4:c3:f4:ae:90:b1:0b:82:06:ab:05:ee:c9:1b: 8e:e6:8a:13:7e:12:2a:4d:c6:ac:6c:a1:c3:c8:4c:00:49:22: e1:eb:74:5e:d4:33:5b:6f:cf:74:45:8e:a7:6b:78:ac:1b:d7: 6e:2a:9e:4f:0b:73:a6:99:fa:88:b5:34:0e:fd:43:19:be:de: c9:57:dd:de:dc:e1:28:c1:ab:4a:5f:52:a1:f2:71:46:b6:14: 72:27:69:29:bb:a4:72:8b:33:76:20:b2:e3:25:1a:12:b1:09: c4:89:d7:fc:e9:4f:43:d7:4d:ed:08:6f:e1:a2:71:3d:84:79: 56:81:ff:13:98:5d:5a:c3:bf:87:be:f7:98:b0:3d:67:6d:c9: 7d:e9:da:97:7b:12:50:bb:95:60:02:df:7a:d9:49:10:4e:8c: eb:eb:ab:9e:e2:75:76:b9:23:7e:bc:a0:e3:cb:e2:1b:0f:13: 76:ed:d1:40 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK50dp+Y0g7Y3fcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk OWI4MDhkYTMtMzMwOC00ZmY0LWFhOGUtYjdiM2Q5Yzc2MTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4VP42yVH4BB3dgfJDTzLWqcGkZaYXv1fDRl mKzpsROVyxGPMR6XmduRjGW+8wUTfqhBSVH8vWP/5UhgsfAO9VF4M/CIgv9rvcZ9 xgqKJyaX4ULqhorhsh6erL2i859VKd/6JQtsgs9RXq+Db8CcBEqPj391KdmDWZyv OzyeURASNBvP/C1udaPrOYiflqsRSrO1FRmgR/qZcpoo5YScM0sCxqgR8Xur/L/y 1er24hXcRNXSvvex/icETb8DEYTfEqUVfxSfp1QprsBHVecNz7Ag1DFZ4uy+0I+f 4GPG/5IDaz2Utc6Wrys6AxIyP29x3aVY7/NEghxqt1suHFUNpwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBwTFrXvZJ4wi1dQnIGkaBRgNnHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmFmNTM4NWQtMmY2OC0z NzJhLTljNjAtNmVkOTljODgxMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBOxWDUsMp2vdwaTQLWrdmUQV/4A49Fje+OEz2c ZOhO2Ih2IkE2+wGv3Yn890ADojeqW3NUMHOQ0EObVHsNsP7hSjw4a2v7oeqPMiTn 1MP0rpCxC4IGqwXuyRuO5ooTfhIqTcasbKHDyEwASSLh63Re1DNbb890RY6na3is G9duKp5PC3OmmfqItTQO/UMZvt7JV93e3OEowatKX1Kh8nFGthRyJ2kpu6RyizN2 ILLjJRoSsQnEidf86U9D103tCG/honE9hHlWgf8TmF1aw7+HvveYsD1nbcl96dqX exJQu5VgAt962UkQTozr66ue4nV2uSN+vKDjy+IbDxN27dFA -----END CERTIFICATE-----Generated at Wed Aug 6 00:44:43 2025 by rpki-client