$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa File: dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa (raw, json) Hash identifier: mRbMy3gygydZfbCAYStRSymoP6xw5PXdp/ho4whgsOE= Subject key identifier: E5:D7:93:BC:CA:BD:57:28:9C:F3:FE:D6:5E:C9:95:E3:E7:66:3C:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9A8ECE737C79F2941580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396544 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9a:8e:ce:73:7c:79:f2:94:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d8892448-4b69-40c5-a3f7-ec00a7b9c21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:ce:d7:21:a6:ff:b2:ca:8b:2a:53:08:11: 6f:38:ce:b1:45:33:93:ef:36:d0:1a:7e:05:41:ac: 2b:fd:ae:18:37:69:d4:74:ce:ce:3b:71:95:06:3f: 2a:27:99:aa:53:15:08:71:e2:95:41:1c:e2:5f:75: 43:bd:69:bc:54:55:70:d2:93:4e:f5:19:c9:c3:f5: e4:be:d1:66:6b:49:cf:54:24:84:8b:c7:5e:18:9a: 46:d0:1c:43:3f:ac:06:51:c8:72:86:1d:20:b5:b2: ab:a8:39:17:63:19:8d:8f:2f:35:73:44:db:00:d9: b7:73:04:a5:97:3e:df:55:9d:7a:a9:1a:a7:88:68: fb:f9:d6:69:75:2f:c7:f1:47:26:cd:bf:48:22:09: 87:e5:23:60:68:04:85:32:bd:d3:cc:e1:16:8b:37: 59:5a:56:32:20:9a:60:59:4f:67:60:a9:3e:2f:a3: 2b:e4:50:a2:18:9e:9a:55:9a:92:7a:71:56:bf:c4: ce:46:38:7d:1b:67:cf:9c:58:27:ee:79:04:0c:7b: c9:eb:8c:64:19:15:e5:ec:b6:1c:c9:00:a2:ae:25: fc:c5:d6:42:7b:8b:b6:da:34:4f:f0:34:0b:04:a0: d1:46:fa:18:20:cd:e7:58:41:7f:7c:3c:1a:d8:4f: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D7:93:BC:CA:BD:57:28:9C:F3:FE:D6:5E:C9:95:E3:E7:66:3C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e7:2c:d1:cc:56:4a:ff:c5:ac:2a:5a:d7:c4:bf:5a:a7:c4: 3e:26:05:a3:a6:1d:75:f9:42:0f:6f:c6:46:0d:39:5a:78:71: 36:fe:cf:2b:49:2f:3a:79:07:f3:7f:9c:92:87:ed:14:97:ff: 46:0c:7d:ec:da:84:2c:80:74:85:cc:b9:9e:41:6b:68:ea:0a: 75:c0:81:e7:73:5a:9b:4f:48:83:2a:3e:f5:f8:1b:67:9f:61: da:f7:02:c2:e2:80:8f:25:eb:03:2d:52:5d:cb:45:85:3e:f5: f4:71:3b:fa:93:7c:77:fa:9c:7b:7c:f5:81:86:53:81:ef:cb: 01:28:d0:5c:dd:c4:e6:27:18:26:ed:ad:91:13:ea:be:15:1c: 87:ef:2f:87:5a:41:e3:51:69:99:3d:53:f0:74:38:57:0d:a1: 83:0e:5d:fb:05:ec:d6:22:a8:20:a3:fa:ad:e9:8b:8a:62:18: a6:fc:d4:e7:1e:51:0a:85:be:a8:dc:95:77:a1:93:34:95:f0: 11:1e:dc:90:b4:44:15:0c:a0:53:02:48:7e:f1:74:15:af:05: 93:c3:f3:2a:f6:3e:48:34:5a:f9:bb:8f:d4:97:f3:90:57:9a: 9b:ba:a4:18:d0:a5:eb:a9:7a:11:08:b8:89:a4:a5:ac:25:91: 78:93:7f:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5qOznN8efKUFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDg4OTI0NDgtNGI2OS00MGM1LWEzZjctZWMwMGE3YjljMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCvO1yGm/7LKiypTCBFvOM6xRTOT7zbQGn4F Qawr/a4YN2nUdM7OO3GVBj8qJ5mqUxUIceKVQRziX3VDvWm8VFVw0pNO9RnJw/Xk vtFma0nPVCSEi8deGJpG0BxDP6wGUchyhh0gtbKrqDkXYxmNjy81c0TbANm3cwSl lz7fVZ16qRqniGj7+dZpdS/H8Ucmzb9IIgmH5SNgaASFMr3TzOEWizdZWlYyIJpg WU9nYKk+L6Mr5FCiGJ6aVZqSenFWv8TORjh9G2fPnFgn7nkEDHvJ64xkGRXl7LYc yQCiriX8xdZCe4u22jRP8DQLBKDRRvoYIM3nWEF/fDwa2E9ZcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOXXk7zKvVconPP+1l7JlePnZjy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ4MGRjZTktMmRmMy0z NGMxLWIxMTktYzc4ZWExY2YyNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB85yzRzFZK/8WsKlrXxL9ap8Q+JgWjph11+UIP b8ZGDTlaeHE2/s8rSS86eQfzf5ySh+0Ul/9GDH3s2oQsgHSFzLmeQWto6gp1wIHn c1qbT0iDKj71+Btnn2Ha9wLC4oCPJesDLVJdy0WFPvX0cTv6k3x3+px7fPWBhlOB 78sBKNBc3cTmJxgm7a2RE+q+FRyH7y+HWkHjUWmZPVPwdDhXDaGDDl37BezWIqgg o/qt6YuKYhim/NTnHlEKhb6o3JV3oZM0lfARHtyQtEQVDKBTAkh+8XQVrwWTw/Mq 9j5INFr5u4/Ul/OQV5qbuqQY0KXrqXoRCLiJpKWsJZF4k39o -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:42 2025 by rpki-client