$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa File: de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa (raw, json) Hash identifier: I3Hxl0f9FM5KM8A4OqhX6VUNkliX5V1UUmZh1mXw074= Subject key identifier: 58:28:26:7E:8F:36:FF:0B:A6:45:4E:0B:19:EF:C8:D8:03:D4:69:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B92F279A77BC4DACD5DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396573 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:92:f2:79:a7:7b:c4:da:cd:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=90abfdd0-1c23-4597-a220-c28a4cd9e1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:53:14:df:1f:fb:f0:00:31:14:d5:1c:38: 69:24:a1:e2:d1:d9:fa:47:09:4e:6d:61:ca:4c:22: 7f:23:6c:03:e7:de:21:3e:52:7d:0f:01:bd:40:cf: bb:da:cc:30:72:af:52:b5:fb:a1:19:26:fa:4e:24: 90:c4:da:2a:fb:37:a0:28:f6:f7:1e:45:24:96:d0: cf:d2:50:42:81:cc:ae:e3:8b:97:04:a1:45:f9:1b: 23:2d:69:64:b2:76:42:6e:65:e6:a0:cd:1c:d0:89: 7d:df:ac:d0:e7:c9:c8:96:f3:b0:6d:c4:0a:62:06: e8:d7:d2:b2:83:26:8f:f0:a7:b5:b5:49:fb:cc:a5: ec:80:c1:38:0d:42:35:13:eb:c8:80:32:07:85:9e: 9f:7a:29:81:84:71:ad:97:da:78:e8:f5:ed:76:91: 79:7a:a4:b1:1e:d8:04:4e:97:c5:7e:e4:af:02:b5: f1:fc:cf:e1:e9:91:12:f3:0c:ad:d4:f3:c1:88:98: a7:45:d8:69:bc:6d:0d:d9:e0:49:ea:fb:64:b7:9d: af:ca:5b:2c:dc:3d:f8:18:4d:48:83:f3:06:9f:15: 07:a8:88:84:2d:9f:1d:cc:c7:3c:bd:7a:40:2b:09: 1e:15:85:37:d9:98:b2:5a:ec:39:e2:24:ec:22:cd: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:26:7E:8F:36:FF:0B:A6:45:4E:0B:19:EF:C8:D8:03:D4:69:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6b:23:76:07:d0:f9:3f:c8:13:22:d3:7a:5f:a6:71:b2:a9: 6d:42:28:2b:d1:c1:4b:6a:df:8b:cf:3c:7d:58:7f:d7:1e:b6: a3:49:cc:39:9e:b0:95:01:fc:ec:51:3d:94:2e:91:b6:9f:f2: 41:fe:41:8e:4c:42:9f:d6:cb:f9:b3:bc:c2:24:72:5e:a5:2d: a9:55:b2:4f:6c:53:da:40:e9:80:30:36:fb:aa:7c:23:1d:55: 46:02:8e:d8:c8:4e:fa:4b:b2:65:bf:a6:c3:31:3b:9f:0a:fa: ed:0c:43:f9:2b:55:c4:9b:14:6c:9a:5e:da:39:09:07:5f:46: 95:10:9f:f7:a7:b7:d1:ad:0d:01:6a:c2:dc:df:19:ce:f6:db: 94:7d:c7:0d:82:c7:71:d9:7a:03:dc:da:b3:77:1b:e6:b9:b1: dd:64:d3:71:a0:4d:4f:90:ee:a3:f7:67:52:16:11:ef:94:3b: 53:95:94:4a:22:f7:4a:b7:05:a7:a3:4a:fa:bb:f6:5d:12:b7: 72:af:30:33:09:fa:3f:af:72:49:3f:6c:82:55:50:5e:a8:42: 1a:34:92:6a:c2:85:0c:b2:89:18:76:59:06:e2:bf:77:8f:8e: 01:ee:04:8f:92:87:7e:ec:6e:33:75:54:2a:51:38:3a:6b:cd: 22:4f:2e:7a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5Lyead7xNrNXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk OTBhYmZkZDAtMWMyMy00NTk3LWEyMjAtYzI4YTRjZDllMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVNTFN8f+/AAMRTVHDhpJKHi0dn6RwlObWHK TCJ/I2wD594hPlJ9DwG9QM+72swwcq9StfuhGSb6TiSQxNoq+zegKPb3HkUkltDP 0lBCgcyu44uXBKFF+RsjLWlksnZCbmXmoM0c0Il936zQ58nIlvOwbcQKYgbo19Ky gyaP8Ke1tUn7zKXsgME4DUI1E+vIgDIHhZ6feimBhHGtl9p46PXtdpF5eqSxHtgE TpfFfuSvArXx/M/h6ZES8wyt1PPBiJinRdhpvG0N2eBJ6vtkt52vylss3D34GE1I g/MGnxUHqIiELZ8dzMc8vXpAKwkeFYU32ZiyWuw54iTsIs15NQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFgoJn6PNv8LpkVOCxnvyNgD1Gm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU1MmI3YTQtMTlhZC0z Y2VlLTk0ZGEtYWRlMzQ1OWE0ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxayN2B9D5P8gTItN6X6ZxsqltQigr0cFLat+L zzx9WH/XHrajScw5nrCVAfzsUT2ULpG2n/JB/kGOTEKf1sv5s7zCJHJepS2pVbJP bFPaQOmAMDb7qnwjHVVGAo7YyE76S7Jlv6bDMTufCvrtDEP5K1XEmxRsml7aOQkH X0aVEJ/3p7fRrQ0BasLc3xnO9tuUfccNgsdx2XoD3NqzdxvmubHdZNNxoE1PkO6j 92dSFhHvlDtTlZRKIvdKtwWno0r6u/ZdErdyrzAzCfo/r3JJP2yCVVBeqEIaNJJq woUMsokYdlkG4r93j44B7gSPkod+7G4zdVQqUTg6a80iTy56 -----END CERTIFICATE-----Generated at Wed Aug 6 13:02:45 2025 by rpki-client