$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa File: d2519e29-f925-335a-a916-17a381aff5b7.roa (raw, json) Hash identifier: wrT8DOdAUb6rxxrtRBd7qO1io9d0AJjVKF10bXvvEV0= Subject key identifier: 62:50:DC:48:1A:80:D7:4F:BE:00:83:8C:34:6F:94:D2:E7:92:C0:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9B11FD99239DCEF06D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396617 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9b:11:fd:99:23:9d:ce:f0:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f8bd6857-afb2-48b3-a1e1-c2d4754344e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:00:8e:78:b7:b8:a5:fb:71:3a:f1:5a:b5: 11:1d:18:33:2d:6d:a5:6b:9b:e8:aa:46:1c:33:aa: 4f:92:c2:57:98:1e:35:85:0b:61:ce:53:1f:e2:2a: 85:79:d2:73:62:81:aa:57:ff:48:e3:04:09:3a:ad: ae:77:b6:75:fa:ae:7f:e1:9b:8d:07:c5:26:80:77: c4:7f:35:a8:54:cd:78:a6:41:1d:2b:42:cc:5a:b7: 36:ee:71:4c:06:e9:01:c1:a1:a7:8c:d6:0b:84:ea: 82:f4:b8:1c:96:37:40:de:c6:98:22:23:7a:da:98: 8b:ea:7f:10:36:20:2f:8c:65:7a:60:5e:e3:9b:d0: 01:1c:62:6e:94:0b:e0:19:d6:1a:6d:09:43:f2:4e: cf:74:ae:37:0d:3c:38:33:97:5b:77:66:6d:0e:94: 67:80:8a:6c:04:73:2f:d5:e1:92:6e:d6:11:01:bc: 1e:97:d4:95:ca:ef:e1:3d:58:a9:28:65:58:28:69: c1:43:c8:c6:fd:f7:2d:ea:a2:f7:c7:98:2f:3b:49: 1f:10:f2:89:9f:db:9e:34:49:8a:9a:80:cb:a9:35: 75:39:0d:dd:9d:7a:b0:4a:f6:3d:d4:ee:3f:08:eb: 4f:77:ad:a2:74:6e:6c:5e:65:47:84:6f:c1:1f:27: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:DC:48:1A:80:D7:4F:BE:00:83:8C:34:6F:94:D2:E7:92:C0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:69:2d:b6:e9:2e:5d:39:95:ac:32:81:a1:88:aa:fc:08:37: 1a:fd:c5:ae:c8:f5:d5:9b:33:e8:05:4e:a7:85:f4:7c:75:a8: ee:c8:4f:17:a0:fd:fd:68:5c:4e:2c:0b:2b:b5:3b:12:65:00: 22:e3:71:bc:f6:b7:67:eb:10:3d:0c:ae:c2:e5:0c:90:6b:b4: f4:7b:a7:82:d1:58:14:20:89:a9:b4:d8:ee:29:d8:fc:08:1f: 18:a2:64:58:9a:f9:24:58:cf:33:89:47:2d:3f:57:c4:72:9a: 49:34:a8:4d:86:91:a8:96:8f:b9:11:7a:d1:d8:2b:05:6e:e5: 72:7f:66:77:42:ef:f7:38:f7:9f:37:ee:a0:97:b1:ff:32:b7: 8d:fd:01:bd:36:a0:af:38:24:95:8b:eb:2c:b6:fd:ee:24:14: 27:93:78:26:8a:af:a6:0e:3f:4f:7a:cb:f8:55:9a:d3:f2:d9: 03:43:a7:94:82:1d:0e:57:67:22:92:7f:a3:c2:76:6f:1a:d9: 1e:7f:2f:c8:32:20:60:f4:b3:0f:62:77:52:d5:2a:e1:bc:35: 57:3e:ab:be:d3:29:b7:c6:d7:4f:16:f3:ff:6e:53:ae:c6:eb: 4f:55:5d:b8:1a:a9:a7:36:fc:6c:21:09:66:db:9f:a7:ee:4b: 7c:4c:62:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5sR/Zkjnc7wbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjhiZDY4NTctYWZiMi00OGIzLWExZTEtYzJkNDc1NDM0NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIEAjni3uKX7cTrxWrURHRgzLW2la5voqkYc M6pPksJXmB41hQthzlMf4iqFedJzYoGqV/9I4wQJOq2ud7Z1+q5/4ZuNB8UmgHfE fzWoVM14pkEdK0LMWrc27nFMBukBwaGnjNYLhOqC9LgcljdA3saYIiN62piL6n8Q NiAvjGV6YF7jm9ABHGJulAvgGdYabQlD8k7PdK43DTw4M5dbd2ZtDpRngIpsBHMv 1eGSbtYRAbwel9SVyu/hPVipKGVYKGnBQ8jG/fct6qL3x5gvO0kfEPKJn9ueNEmK moDLqTV1OQ3dnXqwSvY91O4/COtPd62idG5sXmVHhG/BHyfwewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGJQ3EgagNdPvgCDjDRvlNLnksC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI1MTllMjktZjkyNS0z MzVhLWE5MTYtMTdhMzgxYWZmNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3aS226S5dOZWsMoGhiKr8CDca/cWuyPXVmzPo BU6nhfR8dajuyE8XoP39aFxOLAsrtTsSZQAi43G89rdn6xA9DK7C5QyQa7T0e6eC 0VgUIImptNjuKdj8CB8YomRYmvkkWM8ziUctP1fEcppJNKhNhpGolo+5EXrR2CsF buVyf2Z3Qu/3OPefN+6gl7H/MreN/QG9NqCvOCSVi+sstv3uJBQnk3gmiq+mDj9P esv4VZrT8tkDQ6eUgh0OV2cikn+jwnZvGtkefy/IMiBg9LMPYndS1SrhvDVXPqu+ 0ym3xtdPFvP/blOuxutPVV24GqmnNvxsIQlm25+n7kt8TGJo -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:02 2025 by rpki-client