$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa File: c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa (raw, json) Hash identifier: sWzrSlbfqrGVY9Tz69yGpjxJ7/ripOh2MQ/+4DYYkDk= Subject key identifier: D4:9D:89:B2:C2:49:10:B8:CF:6C:2F:22:CB:CD:D9:46:0E:07:BA:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9C59F62D143122B48580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396566 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9c:59:f6:2d:14:31:22:b4:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=1b57291c-badc-4cde-a590-60a8aef4bcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:c7:97:c9:3b:02:07:ec:b1:4e:5e:0d:67: 38:e8:ec:1c:7e:9a:ff:02:81:80:03:c9:e0:03:07: b2:8b:03:70:f2:63:bb:44:2a:89:ca:36:cf:6d:be: 76:6c:09:e1:1c:cf:06:44:bd:9f:84:dc:78:80:d0: 8c:19:2b:2e:5c:ee:f5:7e:84:24:c2:da:8a:32:d3: e7:5c:3e:d7:25:aa:a8:c3:73:d4:a6:12:2a:8a:1f: 20:35:58:d4:90:6f:a1:14:67:85:46:5c:b3:39:f3: ef:d8:79:a2:52:95:9d:78:e9:dd:81:02:2b:a4:23: 45:5d:0f:7c:2a:62:79:a6:13:81:38:00:fa:4b:60: e8:bd:fc:6d:b5:8d:17:18:9c:c8:87:ae:f0:85:84: 0e:bc:16:de:59:a1:e5:91:41:cb:19:e8:fe:ec:83: c3:59:11:65:44:1f:be:aa:7c:33:57:59:24:73:e0: 1e:83:a7:f0:3d:79:60:31:99:19:50:3f:1b:07:fa: 27:c8:15:c2:f7:1f:41:27:9c:fe:77:35:b0:b8:ec: a6:de:9b:17:59:db:fd:25:c4:03:29:b1:8b:19:5f: e2:a0:78:5b:59:ae:e0:26:b9:3b:8b:c3:ab:bf:a1: f7:54:32:79:fe:04:9c:b9:80:4f:d0:23:60:16:72: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9D:89:B2:C2:49:10:B8:CF:6C:2F:22:CB:CD:D9:46:0E:07:BA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f4:3c:a2:d3:73:d7:fd:b1:3e:a1:f8:68:6a:2d:d7:18:f9: 5a:7f:b1:8b:47:f9:68:03:1b:96:5c:ad:e4:c2:d6:8a:9c:33: 14:de:28:69:a6:1e:23:30:59:7f:97:c1:ca:c9:9d:0f:bc:9c: b6:e1:3d:92:4d:d7:f8:b1:7b:22:b9:4c:03:ad:de:a2:5b:52: 9a:fa:ac:ad:54:a0:ed:5e:2e:ea:ec:c6:49:0b:cd:cb:e1:26: d8:b5:eb:c1:e7:bd:fb:52:16:12:4a:1a:2d:5a:03:e1:0c:f9: 7b:9b:00:65:ce:34:30:67:3f:fa:29:87:90:0e:14:a7:e5:3b: e8:05:78:a9:7d:bb:69:46:35:4e:50:a0:3f:cd:54:fa:f9:4b: 14:3b:e7:49:c6:4c:7c:e6:7a:d3:be:c7:44:e1:16:d2:8f:f2: 65:12:0c:16:74:4a:50:02:92:96:3e:a9:83:57:59:a2:4e:8d: cd:9f:54:10:f4:63:ca:06:b8:34:b3:64:bc:f3:27:6e:41:4b: 15:12:8f:57:57:0a:f6:a0:6a:b3:2f:5a:6b:2f:ea:6f:df:09: 47:a3:d7:b3:85:b4:5b:5b:e7:47:10:dd:0e:9c:4e:4a:ee:1c: ff:5d:81:12:56:6e:3e:b7:c9:08:39:3c:72:1e:dc:34:55:62: bc:fb:33:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5xZ9i0UMSK0hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MWI1NzI5MWMtYmFkYy00Y2RlLWE1OTAtNjBhOGFlZjRiY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn3Hl8k7AgfssU5eDWc46Owcfpr/AoGAA8ng AweyiwNw8mO7RCqJyjbPbb52bAnhHM8GRL2fhNx4gNCMGSsuXO71foQkwtqKMtPn XD7XJaqow3PUphIqih8gNVjUkG+hFGeFRlyzOfPv2HmiUpWdeOndgQIrpCNFXQ98 KmJ5phOBOAD6S2DovfxttY0XGJzIh67whYQOvBbeWaHlkUHLGej+7IPDWRFlRB++ qnwzV1kkc+Aeg6fwPXlgMZkZUD8bB/onyBXC9x9BJ5z+dzWwuOym3psXWdv9JcQD KbGLGV/ioHhbWa7gJrk7i8Orv6H3VDJ5/gScuYBP0CNgFnIzTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNSdibLCSRC4z2wvIsvN2UYOB7pqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdmMzNjNWEtYWFhNS0z MWIxLWFlZjUtOTg1MWVlMjkxYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB39Dyi03PX/bE+ofhoai3XGPlaf7GLR/loAxuW XK3kwtaKnDMU3ihpph4jMFl/l8HKyZ0PvJy24T2STdf4sXsiuUwDrd6iW1Ka+qyt VKDtXi7q7MZJC83L4SbYtevB5737UhYSShotWgPhDPl7mwBlzjQwZz/6KYeQDhSn 5TvoBXipfbtpRjVOUKA/zVT6+UsUO+dJxkx85nrTvsdE4RbSj/JlEgwWdEpQApKW PqmDV1miTo3Nn1QQ9GPKBrg0s2S88yduQUsVEo9XVwr2oGqzL1prL+pv3wlHo9ez hbRbW+dHEN0OnE5K7hz/XYESVm4+t8kIOTxyHtw0VWK8+zNG -----END CERTIFICATE-----Generated at Mon Aug 4 15:07:12 2025 by rpki-client