$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eec7f9e6-8d20-35d7-a8ac-589d3ade0689.roa File: eec7f9e6-8d20-35d7-a8ac-589d3ade0689.roa (raw, json) Hash identifier: HzuX2UXaYP2lf9+pYL5dBzHO2d6bwuSQVldmLxKbNTo= Subject key identifier: 68:07:D4:37:24:09:94:66:3C:77:07:6E:87:9A:94:D0:36:51:77:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B97BB9DCA7917152EE8E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eec7f9e6-8d20-35d7-a8ac-589d3ade0689.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397195 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:97:bb:9d:ca:79:17:15:2e:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f3b983f4-d356-449e-909c-6af50aea9a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:32:b5:e1:d0:f8:f7:3e:78:24:26:88:08: c0:a1:22:95:87:82:c5:df:b8:20:8e:ea:b5:91:ae: 16:84:4d:c9:2a:80:3c:d4:85:8e:b3:0f:56:15:0b: c7:bc:ef:f1:d0:4a:43:e8:d8:d2:62:22:5c:26:4a: f3:85:6c:69:db:38:fc:6f:9d:e0:39:20:bb:34:42: 92:8d:7a:c6:b7:9f:4c:6b:34:80:5b:ea:b5:77:fd: 69:0f:c6:38:0f:09:93:ac:c7:f1:21:59:7c:17:50: 10:15:c9:33:41:7a:bd:4a:c5:6c:5e:98:61:9d:14: 0c:cb:cc:d8:24:a8:bb:7c:c7:4b:4f:d2:6d:f0:80: 42:eb:b2:1f:29:21:22:bc:b8:64:74:f0:38:76:0f: b0:4b:e9:cf:04:0b:26:ec:98:7c:95:06:0e:1d:c2: 05:66:e8:da:d7:8a:4e:da:68:ff:1f:90:80:dd:b8: a3:a0:b7:67:b7:6b:46:92:10:d9:64:a0:13:3b:01: e3:b5:ea:26:92:46:f6:82:73:ae:25:79:6c:8a:d3: ac:72:e1:94:c2:0a:88:55:79:c3:5a:e3:09:f6:5b: bd:83:33:7d:0c:e4:43:45:e3:57:5e:43:eb:68:97: ef:74:dd:d0:c2:a5:83:b5:82:9d:8c:2a:3c:d8:b1: 20:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:07:D4:37:24:09:94:66:3C:77:07:6E:87:9A:94:D0:36:51:77:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eec7f9e6-8d20-35d7-a8ac-589d3ade0689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a0:41:1f:f5:db:7c:66:21:5a:9f:5a:ee:b6:3f:fd:3c:a7: 41:3f:e9:e3:f5:ca:c4:2e:d4:c8:27:19:f9:fd:dc:ab:79:b2: bc:78:6f:aa:b3:b5:f3:ff:55:f7:c0:06:17:af:57:87:49:33: 14:25:40:3d:09:ff:61:58:ea:98:58:19:46:f2:4d:b1:e3:15: 92:7b:ed:9f:7a:59:80:c2:6b:09:49:d7:75:a8:d4:b7:fa:90: 3a:60:19:11:b2:79:dd:cc:27:b8:ba:a1:c5:35:b4:08:fb:ac: 13:7d:be:d9:58:4e:34:8f:a6:87:d6:8d:76:5a:fc:2d:9d:ba: 7a:9e:cf:27:cb:73:31:a3:68:3a:ce:af:2f:a4:66:08:61:38: 17:d2:59:0c:60:23:fb:86:2a:e3:14:99:7d:2a:16:d5:5f:c3: 65:60:2b:e5:d7:7d:d7:2c:ba:04:28:c0:5d:70:cf:80:32:5c: 82:90:23:4e:87:12:cd:bc:05:67:d1:5e:2b:99:c2:e9:f1:80: e3:33:25:48:4e:8d:50:e2:f5:18:b7:01:7b:dc:ee:82:55:6c: 19:13:30:ab:96:34:10:9f:54:8d:dd:19:5d:ab:27:17:cf:6f: 0f:12:30:53:6a:f3:9a:f7:2a:91:69:ef:b6:d5:c3:90:55:c3: 71:f3:ec:0e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5e7ncp5FxUu6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjNiOTgzZjQtZDM1Ni00NDllLTkwOWMtNmFmNTBhZWE5YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTUyteHQ+Pc+eCQmiAjAoSKVh4LF37ggjuq1 ka4WhE3JKoA81IWOsw9WFQvHvO/x0EpD6NjSYiJcJkrzhWxp2zj8b53gOSC7NEKS jXrGt59MazSAW+q1d/1pD8Y4DwmTrMfxIVl8F1AQFckzQXq9SsVsXphhnRQMy8zY JKi7fMdLT9Jt8IBC67IfKSEivLhkdPA4dg+wS+nPBAsm7Jh8lQYOHcIFZuja14pO 2mj/H5CA3bijoLdnt2tGkhDZZKATOwHjteomkkb2gnOuJXlsitOscuGUwgqIVXnD WuMJ9lu9gzN9DORDReNXXkPraJfvdN3QwqWDtYKdjCo82LEgRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGgH1DckCZRmPHcHboealNA2UXeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWVjN2Y5ZTYtOGQyMC0z NWQ3LWE4YWMtNTg5ZDNhZGUwNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAkoEEf9dt8ZiFan1rutj/9PKdBP+nj9crELtTI Jxn5/dyrebK8eG+qs7Xz/1X3wAYXr1eHSTMUJUA9Cf9hWOqYWBlG8k2x4xWSe+2f elmAwmsJSdd1qNS3+pA6YBkRsnndzCe4uqHFNbQI+6wTfb7ZWE40j6aH1o12Wvwt nbp6ns8ny3Mxo2g6zq8vpGYIYTgX0lkMYCP7hirjFJl9KhbVX8NlYCvl133XLLoE KMBdcM+AMlyCkCNOhxLNvAVn0V4rmcLp8YDjMyVITo1Q4vUYtwF73O6CVWwZEzCr ljQQn1SN3RldqycXz28PEjBTavOa9yqRae+21cOQVcNx8+wO -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:42 2025 by rpki-client