$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa File: c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa (raw, json) Hash identifier: EOGWQIYV/45k/dlwbMKjbj9l+nPyDehzi3B9POufk9o= Subject key identifier: 98:5A:CB:8B:7D:5C:5D:D7:A8:2A:0E:70:D3:D4:98:1F:A4:6F:F7:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE65C370E5B6D05F08140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36632 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e6:5c:37:0e:5b:6d:05:f0:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=0e9c44e9-bced-4f4d-be3a-b331c6990b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:dd:4b:25:b9:8c:36:ba:a5:a6:28:13:d6: 47:21:ec:c0:c2:a9:1b:0d:50:b8:ae:f0:b0:d7:79: b4:b1:8a:fb:68:02:f1:a3:b4:4a:a2:f5:d6:13:c8: 10:d3:e6:5e:ba:95:9b:5a:94:2b:01:0f:4a:02:8b: 3a:e9:ab:51:b2:dc:40:24:ce:75:df:17:e1:d0:34: 7e:af:e5:76:25:14:e0:a8:5e:f3:ff:d5:e0:4c:30: c5:6d:39:97:ee:da:ab:da:97:ae:8e:a1:6f:87:71: ee:e4:3c:ad:bb:39:41:e4:fd:b8:19:ff:7e:d2:43: e7:33:26:24:92:14:08:5e:17:78:41:d4:7c:86:5b: 14:4e:1d:20:11:c3:9f:4b:da:9c:29:fb:c3:c0:46: 27:34:29:bc:e6:7b:94:9d:47:ea:a7:2c:62:ff:5a: 50:ad:28:e7:36:b4:56:ac:11:ec:dc:ef:61:c6:3c: 2d:8c:b4:a2:c7:8e:26:91:ca:af:10:b7:3d:62:55: b7:f8:98:98:28:36:e5:55:3b:42:31:cb:21:82:73: 27:12:b3:9b:2d:ab:e3:b1:5c:0f:35:cd:56:93:bf: b7:97:93:ea:fc:67:04:7d:a5:0c:c4:ef:34:23:c5: 68:63:e8:35:4d:f3:31:5a:c3:93:1f:d9:6d:3e:3f: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5A:CB:8B:7D:5C:5D:D7:A8:2A:0E:70:D3:D4:98:1F:A4:6F:F7:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3b:c3:af:5d:f7:fc:ce:e4:70:42:d2:2c:ef:08:be:aa:c8: b4:f8:ac:a7:65:cd:a3:43:61:81:6e:2f:68:f4:66:18:e7:e3: 7b:95:22:a2:f9:cb:dc:9f:84:da:31:b3:40:0a:7b:df:e7:19: d1:cf:d5:e9:6b:5b:7f:35:6e:15:45:ad:b8:17:5a:e3:bf:e8: 5e:cd:a5:0c:91:5b:05:e6:c7:d7:96:c4:5f:2e:a3:64:8d:1e: 57:d2:4b:f6:fc:77:6d:32:5f:bc:c9:90:f4:88:75:40:e3:f5: 18:1a:d2:ed:7c:89:04:e4:69:44:a2:57:dd:ac:0c:72:8d:4c: d0:ee:af:60:e5:da:ca:6c:38:b5:cd:48:10:39:d5:99:1e:af: 04:66:d2:3a:48:ee:26:0b:ae:b3:7c:36:2f:a9:ea:70:74:74: 1a:89:e0:a8:1c:12:cc:4e:91:99:5e:db:15:13:aa:79:a0:f9: b4:23:b0:4a:f5:ff:f8:00:46:f9:60:1a:28:c7:0a:e5:02:25: 0a:ef:ef:34:27:28:ca:1b:a3:0c:e7:f8:a7:af:bd:5b:92:52: 1e:fe:68:7e:40:34:74:e3:fa:43:15:71:96:bf:9a:ba:27:83: 59:16:38:38:e7:70:da:f0:9c:25:c1:99:96:4d:40:32:34:3c: b3:10:32:d7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+ZcNw5bbQXwgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGU5YzQ0ZTktYmNlZC00ZjRkLWJlM2EtYjMzMWM2OTkwYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr7dSyW5jDa6paYoE9ZHIezAwqkbDVC4rvCw 13m0sYr7aALxo7RKovXWE8gQ0+ZeupWbWpQrAQ9KAos66atRstxAJM513xfh0DR+ r+V2JRTgqF7z/9XgTDDFbTmX7tqr2peujqFvh3Hu5DytuzlB5P24Gf9+0kPnMyYk khQIXhd4QdR8hlsUTh0gEcOfS9qcKfvDwEYnNCm85nuUnUfqpyxi/1pQrSjnNrRW rBHs3O9hxjwtjLSix44mkcqvELc9YlW3+JiYKDblVTtCMcshgnMnErObLavjsVwP Nc1Wk7+3l5Pq/GcEfaUMxO80I8VoY+g1TfMxWsOTH9ltPj/sNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJhay4t9XF3XqCoOcNPUmB+kb/evMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzk3OGEwNWYtYTNiZi0z YjljLWJhZjMtNDViNTE3YTQ0YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCDO8OvXff8zuRwQtIs7wi+qsi0+KynZc2jQ2GB bi9o9GYY5+N7lSKi+cvcn4TaMbNACnvf5xnRz9Xpa1t/NW4VRa24F1rjv+hezaUM kVsF5sfXlsRfLqNkjR5X0kv2/HdtMl+8yZD0iHVA4/UYGtLtfIkE5GlEolfdrAxy jUzQ7q9g5drKbDi1zUgQOdWZHq8EZtI6SO4mC66zfDYvqepwdHQaieCoHBLMTpGZ XtsVE6p5oPm0I7BK9f/4AEb5YBooxwrlAiUK7+80JyjKG6MM5/inr71bklIe/mh+ QDR04/pDFXGWv5q6J4NZFjg453Da8JwlwZmWTUAyNDyzEDLX -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:00 2025 by rpki-client