$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa File: e4adbb52-01fa-37af-995e-37fae4eb1245.roa (raw, json) Hash identifier: 0o6fPWhCf27xE+THQm7+wEpm4QDBPhtHo6PaGSHcrBc= Subject key identifier: 0D:72:A5:28:AE:68:E7:F7:8C:6E:FD:F8:68:9E:DE:FF:D0:66:28:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B98D7B301F597434F9EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397200 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:98:d7:b3:01:f5:97:43:4f:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=ba827276-4ee9-4a6d-9eec-a7b1121e7403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:f5:1e:53:ef:ff:50:31:72:84:2a:fd:99: e6:ae:ab:d6:b9:84:f0:7e:ec:25:41:ff:17:32:3a: bf:12:d7:84:a0:94:62:0f:dc:7c:fa:06:93:8e:91: a3:50:f4:80:bc:92:de:28:d5:fc:6f:fc:50:64:21: 5a:33:4a:e7:9f:7d:05:ba:a1:e9:22:6d:98:b3:ab: b3:4e:b2:09:c1:c7:b2:4f:73:59:86:23:bf:21:9d: 20:a8:b3:70:f0:89:0e:ce:fb:d9:e8:b2:62:df:c6: b9:73:45:66:53:5b:aa:91:0d:d9:04:3e:fd:bd:ac: d0:fa:fa:18:b6:83:ef:f7:a3:ca:4c:f7:19:08:1d: c9:dc:a3:e8:8b:e2:29:27:84:3a:e9:62:1f:7b:f5: 29:08:bb:e4:24:cf:a8:7b:02:b3:18:4d:d1:d7:a8: d4:e5:70:9f:f2:1c:21:2e:a3:49:18:5f:01:4d:d5: e9:d6:5a:c3:2b:43:9b:76:74:6d:9e:2f:40:55:1f: 6b:0b:07:9a:6c:0c:c9:a9:fa:95:c7:71:d3:0d:55: 21:91:15:d0:06:66:a0:30:df:ce:36:23:fd:1c:86: ee:2f:6d:bc:6b:48:de:33:33:09:88:b3:8a:e1:06: bf:18:c5:00:c5:e9:8d:5b:99:4b:63:32:b5:99:5e: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:72:A5:28:AE:68:E7:F7:8C:6E:FD:F8:68:9E:DE:FF:D0:66:28:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:27:6d:b7:ed:65:cf:b2:0a:21:4a:ba:92:97:8e:c7:ed:0f: 05:12:15:67:3f:ea:6e:2b:64:4d:2a:1b:22:14:38:73:63:13: 86:0e:56:34:34:de:50:98:91:6a:b2:ae:0d:bf:94:d3:0e:70: 97:90:a7:4d:54:98:c9:71:67:b9:93:0a:71:ed:ac:07:2e:1c: b0:b9:d9:b4:be:ea:d3:c2:7b:d7:d4:69:c1:f9:00:65:ed:04: 6a:fd:b9:34:7d:e0:69:74:9c:f9:4f:1c:1f:e1:36:fb:a7:19: bf:a3:ec:99:42:ce:c8:3d:af:85:80:da:15:4c:32:af:28:1c: 80:e6:cf:3d:ed:9d:6d:d0:58:b7:61:54:29:d7:15:65:84:4d: 79:05:1f:49:80:04:a7:8a:41:6f:f0:b6:34:71:6c:43:a3:00: c8:5e:18:16:df:fc:34:c3:51:0a:c0:31:49:db:e0:3b:46:5e: a5:a5:a0:ec:21:9d:71:ff:be:29:53:78:47:32:86:48:64:b2: 9b:de:39:63:d8:14:d3:4f:0d:79:03:5d:0b:55:7b:b0:f6:e8: 2c:db:d5:d9:94:e9:0c:43:78:48:a8:c1:85:d5:99:be:93:d5: 97:59:8e:c6:7b:29:f9:f6:3b:a3:6a:46:2f:a5:02:1a:69:09: 26:40:19:f6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5jXswH1l0NPnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YmE4MjcyNzYtNGVlOS00YTZkLTllZWMtYTdiMTEyMWU3NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJz1HlPv/1AxcoQq/ZnmrqvWuYTwfuwlQf8X Mjq/EteEoJRiD9x8+gaTjpGjUPSAvJLeKNX8b/xQZCFaM0rnn30FuqHpIm2Ys6uz TrIJwceyT3NZhiO/IZ0gqLNw8IkOzvvZ6LJi38a5c0VmU1uqkQ3ZBD79vazQ+voY toPv96PKTPcZCB3J3KPoi+IpJ4Q66WIfe/UpCLvkJM+oewKzGE3R16jU5XCf8hwh LqNJGF8BTdXp1lrDK0ObdnRtni9AVR9rCweabAzJqfqVx3HTDVUhkRXQBmagMN/O NiP9HIbuL228a0jeMzMJiLOK4Qa/GMUAxemNW5lLYzK1mV6KCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA1ypSiuaOf3jG79+Gie3v/QZihxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRhZGJiNTItMDFmYS0z N2FmLTk5NWUtMzdmYWU0ZWIxMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQJ2237WXPsgohSrqSl47H7Q8FEhVnP+puK2RN KhsiFDhzYxOGDlY0NN5QmJFqsq4Nv5TTDnCXkKdNVJjJcWe5kwpx7awHLhywudm0 vurTwnvX1GnB+QBl7QRq/bk0feBpdJz5Txwf4Tb7pxm/o+yZQs7IPa+FgNoVTDKv KByA5s897Z1t0Fi3YVQp1xVlhE15BR9JgASnikFv8LY0cWxDowDIXhgW3/w0w1EK wDFJ2+A7Rl6lpaDsIZ1x/74pU3hHMoZIZLKb3jlj2BTTTw15A10LVXuw9ugs29XZ lOkMQ3hIqMGF1Zm+k9WXWY7Geyn59jujakYvpQIaaQkmQBn2 -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:24 2025 by rpki-client