$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa File: cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa (raw, json) Hash identifier: eDILN5X4cRUjCHmy6jNqzikNhkflCIos1SK6WrEBPEs= Subject key identifier: 4F:18:9A:E7:A3:6A:86:6E:2A:27:49:6C:DB:9A:28:2A:77:1B:F1:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE2656918662C5DD245C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 19836 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e2:65:69:18:66:2c:5d:d2:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=fc12bd39-63ec-4f52-85e1-f2677d8ffada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:32:1e:f0:ae:68:3b:ec:a8:5a:63:18:27: 20:2c:b0:e6:3f:91:23:6b:31:ad:17:a5:7c:29:b5: 87:4e:e0:58:80:a9:ac:c9:63:55:28:92:6f:14:a1: c5:c6:f3:6d:ef:a7:0f:c7:8d:d6:25:f8:a7:0b:72: fe:cd:4f:50:53:ef:79:8d:fa:d9:4a:65:b3:b7:b9: 49:bd:6b:73:9b:89:7f:24:77:e0:52:7f:02:b8:88: 55:70:33:bd:c1:cb:c6:bd:8c:08:09:f0:a8:f3:1b: 9f:c5:e6:93:81:95:5b:c1:fb:83:56:80:bc:7d:be: 88:4f:4e:36:cf:5b:a0:e0:23:fa:86:e5:ca:a1:c3: 80:6c:64:5e:f7:8b:ba:32:5a:0d:b3:45:de:51:4a: 2f:48:72:5e:db:c7:cb:65:f2:ea:18:35:e8:c9:1e: d3:9a:08:af:4e:ec:e7:13:59:07:50:5a:31:e4:55: e3:79:e2:05:57:ff:a6:74:f8:68:ea:88:38:80:e3: 6e:d5:c0:5b:7d:cd:bd:46:80:85:2d:67:76:a4:0a: 0e:74:b2:a3:34:93:ae:48:87:54:ac:7d:cd:1c:e0: 9f:d1:52:3e:74:7a:43:a6:f1:ce:8e:1d:d1:ad:73: 8b:7d:fe:6f:44:6e:59:c1:bc:21:71:a9:f5:d1:83: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:18:9A:E7:A3:6A:86:6E:2A:27:49:6C:DB:9A:28:2A:77:1B:F1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ff:35:e4:10:fc:3b:3d:ad:2b:56:3b:ff:d4:31:01:41:55: 7c:f5:a4:00:aa:ab:1e:c1:70:36:96:c1:17:10:a2:74:ef:77: df:44:e9:b4:2b:26:ec:d1:98:04:84:9c:2c:ba:41:bc:3b:d3: 10:f1:5b:f6:64:f0:be:e8:ec:1e:99:67:4d:bb:07:6e:d9:29: 13:11:b2:bc:f4:bd:d2:46:3c:b6:68:c1:5d:f9:46:9b:da:9a: 4c:4b:14:87:82:9c:b7:2b:fa:06:0f:a1:45:dc:48:2c:b4:0f: 92:16:33:06:b8:53:b2:8a:7a:62:37:6f:5b:20:4a:60:71:f2: 98:4b:30:84:2f:27:82:18:67:8b:ab:a6:d6:62:33:fb:3a:bc: 79:45:84:85:f7:62:7f:22:ed:36:ca:4d:89:cb:66:51:aa:58: ef:26:06:8f:c6:3b:e6:29:6c:57:91:29:8a:c4:0c:5b:ed:cc: 64:e9:97:17:f1:51:15:05:2e:6a:6e:22:95:7e:73:ee:be:22: 9a:54:d5:d6:17:bf:5a:d2:5d:86:0a:a2:0c:d6:4a:ad:af:9f: d4:ea:2a:23:77:46:34:18:29:08:be:71:51:c6:5e:54:b5:f7: 62:1e:f8:6c:24:3e:24:bc:69:59:4f:06:0f:c0:f5:cf:af:8a: da:97:02:cb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+JlaRhmLF3SRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmMxMmJkMzktNjNlYy00ZjUyLTg1ZTEtZjI2NzdkOGZmYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjMyHvCuaDvsqFpjGCcgLLDmP5EjazGtF6V8 KbWHTuBYgKmsyWNVKJJvFKHFxvNt76cPx43WJfinC3L+zU9QU+95jfrZSmWzt7lJ vWtzm4l/JHfgUn8CuIhVcDO9wcvGvYwICfCo8xufxeaTgZVbwfuDVoC8fb6IT042 z1ug4CP6huXKocOAbGRe94u6MloNs0XeUUovSHJe28fLZfLqGDXoyR7TmgivTuzn E1kHUFox5FXjeeIFV/+mdPho6og4gONu1cBbfc29RoCFLWd2pAoOdLKjNJOuSIdU rH3NHOCf0VI+dHpDpvHOjh3RrXOLff5vRG5Zwbwhcan10YPLTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE8YmuejaoZuKidJbNuaKCp3G/HuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1NWNiZjctNWViZi0z MTI1LWE0OTUtOGE3ZDMyYWQ4MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBa/zXkEPw7Pa0rVjv/1DEBQVV89aQAqqsewXA2 lsEXEKJ073ffROm0Kybs0ZgEhJwsukG8O9MQ8Vv2ZPC+6OwemWdNuwdu2SkTEbK8 9L3SRjy2aMFd+Uab2ppMSxSHgpy3K/oGD6FF3EgstA+SFjMGuFOyinpiN29bIEpg cfKYSzCELyeCGGeLq6bWYjP7Orx5RYSF92J/Iu02yk2Jy2ZRqljvJgaPxjvmKWxX kSmKxAxb7cxk6ZcX8VEVBS5qbiKVfnPuviKaVNXWF79a0l2GCqIM1kqtr5/U6ioj d0Y0GCkIvnFRxl5UtfdiHvhsJD4kvGlZTwYPwPXPr4ralwLL -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:43 2025 by rpki-client