$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaabb17-bf12-3f45-aade-66c60fb01f65.roa File: fbaabb17-bf12-3f45-aade-66c60fb01f65.roa (raw, json) Hash identifier: NdUNpCl4ltj1q5oIHm5FpvBmxTs0Sm12M2Zr1Q5W2HA= Subject key identifier: 8E:F1:04:AA:B9:C3:B9:E2:19:D2:87:13:46:5B:96:ED:2D:11:54:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE5D76A6FA092DB7CED00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaabb17-bf12-3f45-aade-66c60fb01f65.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 397193 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e5:d7:6a:6f:a0:92:db:7c:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=815b4c24-f99e-4ae9-83a4-6f225679a7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:36:17:bc:ee:e7:7d:0a:77:74:68:40:e3: 07:18:69:27:44:e8:46:28:91:4a:34:f1:c0:3d:f6: c1:40:16:96:83:d7:40:39:12:96:17:ee:8d:1d:53: f8:51:34:0e:79:d9:74:01:cb:60:18:0b:c0:5c:8d: b9:8f:86:59:16:1f:13:f8:6a:11:38:92:9a:a6:ba: ac:d6:02:f2:b2:b3:aa:a4:a7:0a:6d:45:f4:92:56: c2:22:a8:cb:ff:35:01:88:af:9e:e4:68:3e:39:fc: f5:22:3d:63:43:99:29:fe:16:b3:80:e4:7f:8a:f2: 92:d3:92:a5:dd:24:58:06:26:2b:ed:03:0b:45:f6: 8c:81:05:2e:d4:f0:e3:77:b4:b4:ab:69:45:85:ac: b2:c1:87:35:bb:cb:e7:34:89:f6:7a:85:ae:b4:86: fb:18:a2:f1:bd:17:74:f3:76:2a:0a:19:7a:06:a7: bd:35:0e:0c:45:33:81:10:da:78:98:2d:15:67:e0: bb:e2:af:39:3e:48:d5:dd:3b:03:6e:d5:b8:fc:e6: 45:8b:18:b2:06:e5:2b:a8:44:90:4f:e0:fd:2b:d6: 0f:2a:47:56:a2:8a:f0:03:f2:54:bb:29:96:38:15: e0:96:c4:d2:8c:5c:4c:80:a9:d7:2b:dd:c9:a0:95: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F1:04:AA:B9:C3:B9:E2:19:D2:87:13:46:5B:96:ED:2D:11:54:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaabb17-bf12-3f45-aade-66c60fb01f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:82:c6:ab:29:f6:58:89:6a:66:ec:de:b3:45:b0:8a:e6:97: c7:10:0a:ef:1b:d3:ff:1e:4e:00:14:d2:17:ac:83:1b:32:16: 94:cb:41:a0:56:b9:81:31:9c:2b:de:e9:78:16:69:c7:0d:e5: 22:fa:66:73:9e:ff:4f:93:cd:47:3e:ee:50:17:be:ef:a5:31: 0d:38:fa:cc:aa:b1:8d:ca:b9:45:6b:49:aa:f4:81:f8:49:7e: e3:69:7c:e8:8e:e9:3f:98:52:c1:16:9b:d7:42:d4:a9:12:75: de:fe:76:4a:12:c1:fd:ba:f4:1d:aa:90:29:40:5d:77:86:2a: 25:e1:0d:ac:7b:7e:fa:64:75:b8:30:e6:7b:77:3c:9c:f3:49: 7c:61:0b:5c:50:db:d9:7e:08:cc:c1:1e:b5:9b:59:16:ec:98: f8:94:56:5e:28:1b:cf:aa:e8:72:0c:97:3b:f3:b1:cf:69:da: 7d:7d:d0:ac:36:6c:91:20:10:15:a3:1c:ce:3d:3c:3d:c8:0e: 8d:34:4f:64:62:4a:23:31:69:b5:7f:85:ec:84:8b:f0:6c:d1: ae:31:d2:0e:54:b8:34:3a:1a:40:e0:26:c7:bf:94:86:05:15: aa:24:78:ea:91:87:69:e5:5b:04:fb:13:46:f1:e1:14:89:52: f8:16:b2:22 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+XXam+gktt87QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODE1YjRjMjQtZjk5ZS00YWU5LTgzYTQtNmYyMjU2NzlhN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfI2F7zu530Kd3RoQOMHGGknROhGKJFKNPHA PfbBQBaWg9dAORKWF+6NHVP4UTQOedl0ActgGAvAXI25j4ZZFh8T+GoROJKaprqs 1gLysrOqpKcKbUX0klbCIqjL/zUBiK+e5Gg+Ofz1Ij1jQ5kp/hazgOR/ivKS05Kl 3SRYBiYr7QMLRfaMgQUu1PDjd7S0q2lFhayywYc1u8vnNIn2eoWutIb7GKLxvRd0 83YqChl6Bqe9NQ4MRTOBENp4mC0VZ+C74q85PkjV3TsDbtW4/OZFixiyBuUrqESQ T+D9K9YPKkdWoorwA/JUuymWOBXglsTSjFxMgKnXK93JoJV8BQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI7xBKq5w7niGdKHE0Zblu0tEVSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJhYWJiMTctYmYxMi0z ZjQ1LWFhZGUtNjZjNjBmYjAxZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBsgsarKfZYiWpm7N6zRbCK5pfHEArvG9P/Hk4A FNIXrIMbMhaUy0GgVrmBMZwr3ul4FmnHDeUi+mZznv9Pk81HPu5QF77vpTENOPrM qrGNyrlFa0mq9IH4SX7jaXzojuk/mFLBFpvXQtSpEnXe/nZKEsH9uvQdqpApQF13 hiol4Q2se376ZHW4MOZ7dzyc80l8YQtcUNvZfgjMwR61m1kW7Jj4lFZeKBvPquhy DJc787HPadp9fdCsNmyRIBAVoxzOPTw9yA6NNE9kYkojMWm1f4XshIvwbNGuMdIO VLg0OhpA4CbHv5SGBRWqJHjqkYdp5VsE+xNG8eEUiVL4FrIi -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:59 2025 by rpki-client