$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa File: 3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa (raw, json) Hash identifier: 1q0TaRAvcXGgOfk4fGeoktwwQbBhNUOVDNlfaz9tFNQ= Subject key identifier: 55:44:64:B5:0F:52:69:03:31:A5:A4:44:B5:5A:0F:EB:B1:90:DA:85 Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F4328584A6290942C5FFEE643CD5AF320 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 2620:135:7018::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:94:2c:5f:fe:e6:43:cd:5a:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=1630de5a-31bf-48ff-8528-f6fbdf732d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:c3:48:d2:e2:30:61:ff:6e:da:a6:84:a6: b6:ca:20:43:33:ce:75:40:6c:44:84:ba:ef:89:1c: ed:d1:e0:1e:7f:3d:03:b7:43:db:4e:73:6d:c7:e4: 82:07:06:49:a1:42:21:50:ee:05:2d:23:53:41:a4: d3:6d:d3:e3:a9:1c:c5:cc:05:6e:4b:e8:f7:ff:c3: d7:86:99:a8:e9:c9:87:4f:19:46:b7:ac:c5:0b:25: 1a:1d:0b:bf:d7:e4:64:81:6e:cf:16:3e:3b:ae:6c: 56:8e:ad:5b:cf:7a:b2:c5:d6:81:e8:97:b3:ef:2d: 89:14:17:81:28:bc:2a:cd:7d:9d:1d:c6:c5:9d:be: df:ac:58:af:f8:2a:e5:80:4b:96:bd:cc:f9:80:55: 52:1c:4d:52:af:6c:cf:dd:88:2b:23:1c:f4:59:8a: 7d:61:77:d4:26:58:b3:81:1c:79:8e:54:3d:2d:fe: d5:07:aa:f3:41:75:7e:1e:ef:cb:2c:21:58:e0:d2: dc:a2:15:29:76:1d:1a:2e:2d:07:74:98:3d:64:e2: c0:ea:ed:8a:7b:8a:d6:fd:71:a1:c3:88:76:6f:cf: 39:96:8a:64:db:5b:a9:cf:66:14:76:f5:06:7a:31: 12:16:c3:2a:76:0f:5a:47:64:69:56:0a:4a:66:63: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:44:64:B5:0F:52:69:03:31:A5:A4:44:B5:5A:0F:EB:B1:90:DA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7018::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ed:7c:63:4a:11:be:2c:8b:07:fe:3c:f7:f4:a1:82:cc:95: 74:29:a1:b2:06:02:b8:15:c9:c3:38:d4:7c:f5:e8:a1:97:a6: 22:de:df:ec:dc:80:14:72:6a:71:12:b7:ef:81:f2:3e:78:3f: c5:82:51:d3:f4:c8:f3:ca:64:bf:43:1e:58:80:45:8a:3e:c7: 9b:60:a7:f8:e9:7c:7b:1f:a1:69:fd:c1:e5:df:36:b8:27:b0: 98:44:f0:9a:19:30:b2:b7:c4:e4:c9:43:c2:a8:b1:8c:e3:15: c4:87:95:89:9c:05:44:07:eb:d2:39:00:ce:0c:04:6b:73:3f: 85:43:f4:04:8d:e1:af:c1:7a:77:83:15:51:1a:d5:b2:f4:5c: d5:58:2a:dd:7f:5a:66:c3:1e:34:5d:6c:d8:03:7d:a7:c7:79: c6:ca:dd:90:01:9b:4c:dd:bf:e7:fb:7a:e6:d0:51:7e:29:ac: 44:3c:5d:85:9e:7f:79:cf:e4:72:cc:4e:16:c8:67:58:14:f1: 53:0b:86:6d:8b:0e:3c:97:9f:04:9b:bd:c2:93:fe:46:65:5e: ab:70:2b:07:5a:cd:d5:ab:75:19:e4:8b:10:8a:bb:22:f4:e8: bb:23:a3:93:91:00:7f:d9:14:83:dd:26:c5:8c:26:9e:c8:b1: 68:60:c8:35 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEpikJQsX/7mQ81a8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MTYzMGRlNWEtMzFiZi00OGZmLTg1MjgtZjZmYmRmNzMyZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSTDSNLiMGH/btqmhKa2yiBDM851QGxEhLrv iRzt0eAefz0Dt0PbTnNtx+SCBwZJoUIhUO4FLSNTQaTTbdPjqRzFzAVuS+j3/8PX hpmo6cmHTxlGt6zFCyUaHQu/1+RkgW7PFj47rmxWjq1bz3qyxdaB6Jez7y2JFBeB KLwqzX2dHcbFnb7frFiv+CrlgEuWvcz5gFVSHE1Sr2zP3YgrIxz0WYp9YXfUJliz gRx5jlQ9Lf7VB6rzQXV+Hu/LLCFY4NLcohUpdh0aLi0HdJg9ZOLA6u2Ke4rW/XGh w4h2b885lopk21upz2YUdvUGejESFsMqdg9aR2RpVgpKZmN1SQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFFVEZLUPUmkDMaWkRLVaD+uxkNqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvM2E0ZTFkZGMtYjgwMi0z OTgyLWFmYTItNGJlMjljZDlmYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAY ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCy7XxjShG+LIsH/jz39KGCzJV0KaGyBgK4FcnDONR89eihl6Yi 3t/s3IAUcmpxErfvgfI+eD/FglHT9MjzymS/Qx5YgEWKPsebYKf46Xx7H6Fp/cHl 3za4J7CYRPCaGTCyt8TkyUPCqLGM4xXEh5WJnAVEB+vSOQDODARrcz+FQ/QEjeGv wXp3gxVRGtWy9FzVWCrdf1pmwx40XWzYA32nx3nGyt2QAZtM3b/n+3rm0FF+KaxE PF2Fnn95z+RyzE4WyGdYFPFTC4Ztiw48l58Em73Ck/5GZV6rcCsHWs3Vq3UZ5IsQ irsi9Oi7I6OTkQB/2RSD3SbFjCaeyLFoYMg1 -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:45 2025 by rpki-client