$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa File: d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa (raw, json) Hash identifier: QPtE8mkMFuNDLJroXLyvQZWcJ8nIo40OrtrbyAx6uoU= Subject key identifier: 52:5F:35:25:1B:DD:E7:D2:B6:07:A0:47:2C:CC:BF:5A:02:D0:BE:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE706F9653FDB78558A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396543 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e7:06:f9:65:3f:db:78:55:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=6baa67f0-3900-4282-a32f-01578d1ac14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:9a:75:d4:ff:c8:91:dc:58:8a:2a:ea:83: 29:e4:e9:52:ff:aa:35:7b:b5:c9:ce:92:48:80:58: b0:b0:c7:33:8a:61:1f:4c:2f:d4:b3:38:25:93:57: 8b:03:20:3e:e2:5c:6c:28:2b:31:97:c5:19:43:42: 43:a6:8f:a9:75:b3:72:92:63:ac:00:ad:1d:26:ff: 03:73:3d:eb:e1:bd:9a:c5:46:df:6f:32:9e:38:2d: 52:20:66:e6:b1:6c:c0:0d:0c:e6:1b:22:67:d3:b7: f6:c7:cd:9b:35:7e:cb:f4:be:e4:c5:2a:f4:34:d1: df:9a:12:2c:19:01:0e:55:a1:cb:97:77:bb:13:9c: 2c:20:92:7a:fe:c0:fc:c1:18:12:ae:70:9f:23:a7: e0:95:9a:82:7b:31:35:ea:eb:ee:4d:79:85:2e:fb: a8:74:9e:62:92:d8:44:b5:30:41:42:2b:14:37:de: 76:e5:cc:78:05:64:b2:4d:ed:9b:5d:20:52:18:e8: f9:cc:67:65:f1:89:f9:1f:93:52:da:f0:e3:34:97: d9:43:bd:e1:20:d0:4e:6b:26:fc:a4:52:db:58:bd: e3:1b:7b:88:e8:41:50:e7:09:ad:84:35:21:4b:5e: f4:5e:a6:c0:87:a7:23:a5:a1:ba:48:55:6f:b3:68: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5F:35:25:1B:DD:E7:D2:B6:07:A0:47:2C:CC:BF:5A:02:D0:BE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:53:dd:0d:22:47:30:71:b2:9b:aa:8c:e5:b1:46:7c:4d:a1: 1b:51:4d:88:de:2c:d7:fe:78:ae:1c:52:34:a9:95:b1:9b:c4: 40:f9:cc:d3:51:e1:39:6d:a5:0b:bd:34:79:69:88:49:f0:b4: 41:0e:5c:65:1f:6f:b2:22:b4:b7:78:66:40:44:e0:c4:52:b4: c3:31:fa:7b:00:11:6d:52:29:a0:2a:33:52:9b:b8:54:98:a1: 62:94:f5:eb:40:4b:9f:8d:c5:18:1c:07:e1:d8:25:03:b7:d8: dc:cf:9b:1b:a4:9b:12:18:b6:a1:0f:7a:cc:5e:d2:a8:55:09: bb:4e:1a:9d:57:30:22:c5:d8:ca:c7:63:b5:cf:21:17:57:34: 19:64:4f:37:b7:2c:e9:c9:40:fa:45:6f:35:01:0d:8c:0f:40: 77:97:52:e3:a6:18:cf:98:62:44:42:d5:79:a5:0b:c2:bc:65: 94:8a:21:8b:e3:5a:72:b4:5b:69:e2:5e:81:ac:14:50:2f:c0: 36:94:f1:b6:2b:61:4c:99:e4:c2:69:6e:48:ac:45:1b:01:9e: e2:0f:42:da:ee:cc:6c:8e:8e:27:cf:24:56:bf:d8:35:02:b0: aa:a1:40:cd:b0:a3:aa:19:c1:72:c6:59:65:c4:70:fb:28:e6: f6:13:46:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+cG+WU/23hVigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NmJhYTY3ZjAtMzkwMC00MjgyLWEzMmYtMDE1NzhkMWFjMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxqaddT/yJHcWIoq6oMp5OlS/6o1e7XJzpJI gFiwsMczimEfTC/Uszglk1eLAyA+4lxsKCsxl8UZQ0JDpo+pdbNykmOsAK0dJv8D cz3r4b2axUbfbzKeOC1SIGbmsWzADQzmGyJn07f2x82bNX7L9L7kxSr0NNHfmhIs GQEOVaHLl3e7E5wsIJJ6/sD8wRgSrnCfI6fglZqCezE16uvuTXmFLvuodJ5ikthE tTBBQisUN9525cx4BWSyTe2bXSBSGOj5zGdl8Yn5H5NS2vDjNJfZQ73hINBOayb8 pFLbWL3jG3uI6EFQ5wmthDUhS170XqbAh6cjpaG6SFVvs2ithQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFJfNSUb3efStgegRyzMv1oC0L7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDk1NjZjYTctYmJkMi0z NDMyLWEwZTMtZWQ5NmQ0ZTU3YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyU90NIkcwcbKbqozlsUZ8TaEbUU2I3izX/niu HFI0qZWxm8RA+czTUeE5baULvTR5aYhJ8LRBDlxlH2+yIrS3eGZARODEUrTDMfp7 ABFtUimgKjNSm7hUmKFilPXrQEufjcUYHAfh2CUDt9jcz5sbpJsSGLahD3rMXtKo VQm7ThqdVzAixdjKx2O1zyEXVzQZZE83tyzpyUD6RW81AQ2MD0B3l1LjphjPmGJE QtV5pQvCvGWUiiGL41pytFtp4l6BrBRQL8A2lPG2K2FMmeTCaW5IrEUbAZ7iD0La 7sxsjo4nzyRWv9g1ArCqoUDNsKOqGcFyxlllxHD7KOb2E0b5 -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:22 2025 by rpki-client