$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa File: c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa (raw, json) Hash identifier: ehgmDu8ebN5knFL2W4RRVNAKVkb3iBjSNoUZ7/kKLbw= Subject key identifier: 84:4F:D4:8D:27:9A:A4:F2:73:10:DD:5C:C4:0C:77:4A:7F:CA:12:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9ED4C460AA2355A61F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396602 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9e:d4:c4:60:aa:23:55:a6:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=6594a6ea-3c18-41d2-8bb2-ba4684fb6f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:38:2a:b9:1e:76:f1:9b:ec:37:e2:71:b7: fa:54:59:17:24:f5:fc:51:77:48:3e:c8:dd:30:91: 5f:24:23:b4:b4:32:7d:65:d6:c7:25:17:0d:d5:7a: 87:77:07:51:e0:c3:69:14:f0:ad:fb:1d:f2:61:37: 3c:fa:8c:7d:99:ea:3d:18:9a:d7:a9:c7:e7:3b:92: 49:ec:7b:a7:dd:08:70:37:bd:c2:d7:4b:b3:2e:b3: 7b:58:73:8d:6e:8b:a1:85:5b:ec:70:d7:99:6f:17: 6b:f3:00:7e:be:5e:cf:ad:c6:06:51:d5:d0:e0:02: 6d:c8:f9:81:44:16:f4:a1:c9:3c:ea:e3:97:1f:b3: c3:43:c8:5a:17:b7:17:22:c5:f0:a6:73:5f:ae:58: 9e:1b:f6:ee:92:ac:61:a7:9e:00:4d:86:cf:6a:ab: 21:bc:d9:c9:72:c9:ee:f8:e4:66:df:ea:d6:15:66: 6c:d5:13:d7:f9:aa:b7:f0:b8:fe:e9:02:4b:4d:16: 89:13:98:fa:bf:9d:24:2e:ae:43:bf:2f:c7:32:6c: b0:6d:2c:fa:28:0c:26:f4:bb:80:20:54:be:5d:54: 10:0b:b8:2d:ff:68:57:76:8f:9b:3f:7d:82:7c:cb: f6:47:de:53:69:8c:cb:89:8a:1b:d8:6a:79:0c:70: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4F:D4:8D:27:9A:A4:F2:73:10:DD:5C:C4:0C:77:4A:7F:CA:12:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d1:02:88:fc:9f:b0:c5:39:b6:1c:b7:7a:0b:0b:14:f4:4d: 92:da:67:97:79:36:d9:05:d7:59:75:81:8c:41:4a:8b:07:d4: 3d:04:97:7e:1c:f6:68:86:19:75:6e:c5:ed:df:74:e1:7f:f8: ba:e5:39:82:d4:f4:7e:af:3e:f0:92:74:a5:5c:b6:7c:9b:8a: ac:94:80:99:48:f3:69:e2:57:a1:cf:26:cb:ff:93:9b:50:a7: 4a:d1:ed:f6:52:dd:ec:7d:9e:44:48:0d:98:d9:8b:20:9e:3c: f7:34:19:41:c6:58:d7:29:95:29:ae:50:6d:e8:2d:0d:81:da: bc:31:e5:13:a1:e7:e4:ad:20:bf:70:04:57:7a:a6:d5:53:7c: 9b:70:43:41:b7:84:26:94:94:9b:91:e9:2c:fc:f7:a6:5f:9d: cf:d6:47:1b:4c:2a:da:3f:a1:1f:5c:e5:ba:c2:2a:5c:f5:00: 1c:d3:79:c7:51:6a:92:92:c5:ae:d8:6f:5f:88:42:48:81:49: dd:b3:47:59:a9:b9:5c:cf:3c:9a:78:69:72:2d:4e:55:c4:c6: 6e:35:a3:9b:41:6a:47:34:68:89:7f:5a:cc:f0:a4:89:3a:76: 26:26:12:10:f7:6d:30:da:51:69:73:3b:f0:74:c5:ea:29:e4: 6f:5a:81:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK57UxGCqI1WmH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NjU5NGE2ZWEtM2MxOC00MWQyLThiYjItYmE0Njg0ZmI2ZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov44KrkedvGb7Dficbf6VFkXJPX8UXdIPsjd MJFfJCO0tDJ9ZdbHJRcN1XqHdwdR4MNpFPCt+x3yYTc8+ox9meo9GJrXqcfnO5JJ 7Hun3QhwN73C10uzLrN7WHONbouhhVvscNeZbxdr8wB+vl7PrcYGUdXQ4AJtyPmB RBb0ock86uOXH7PDQ8haF7cXIsXwpnNfrlieG/bukqxhp54ATYbPaqshvNnJcsnu +ORm3+rWFWZs1RPX+aq38Lj+6QJLTRaJE5j6v50kLq5Dvy/HMmywbSz6KAwm9LuA IFS+XVQQC7gt/2hXdo+bP32CfMv2R95TaYzLiYob2Gp5DHAeWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIRP1I0nmqTycxDdXMQMd0p/yhJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzRhYjljOTEtNTI3OC0z ZmNkLTliNmYtNmIyYzliNWRiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJ0QKI/J+wxTm2HLd6CwsU9E2S2meXeTbZBddZ dYGMQUqLB9Q9BJd+HPZohhl1bsXt33Thf/i65TmC1PR+rz7wknSlXLZ8m4qslICZ SPNp4lehzybL/5ObUKdK0e32Ut3sfZ5ESA2Y2Ysgnjz3NBlBxljXKZUprlBt6C0N gdq8MeUToefkrSC/cARXeqbVU3ybcENBt4QmlJSbkeks/PemX53P1kcbTCraP6Ef XOW6wipc9QAc03nHUWqSksWu2G9fiEJIgUnds0dZqblczzyaeGlyLU5VxMZuNaOb QWpHNGiJf1rM8KSJOnYmJhIQ920w2lFpczvwdMXqKeRvWoEL -----END CERTIFICATE-----Generated at Mon Aug 4 15:41:59 2025 by rpki-client