$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0984f23a-aa69-33c7-92de-c85b6af33615.roa File: 0984f23a-aa69-33c7-92de-c85b6af33615.roa (raw, json) Hash identifier: XUeMrVViuEQi7CslJS/meYttAKn22WuCZr3XqybuBLw= Subject key identifier: 71:16:E3:C2:61:94:58:1D:E1:FC:65:7C:5E:32:E6:52:C5:F0:63:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EA9032AF0F222307CA40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0984f23a-aa69-33c7-92de-c85b6af33615.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396610 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ea:90:32:af:0f:22:23:07:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ed0a7f95-0a7a-423b-878b-e124ea39d6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:f9:c6:62:52:1d:e4:e0:ed:94:4c:54:02: c3:66:0f:c7:63:f6:f4:51:69:b9:ae:7b:37:4b:48: 78:ad:f1:47:63:e9:57:4e:42:36:fc:36:63:a9:2e: 58:77:52:1d:69:6f:a2:89:6d:36:b9:59:e1:e9:15: c6:e0:16:2c:b5:eb:64:bb:f3:71:46:5a:87:cf:3f: ab:77:04:81:50:68:53:dc:1e:3d:86:26:53:5c:da: d3:7b:bb:3b:df:8b:6b:16:cb:9b:43:76:6a:09:f5: 60:ac:99:e5:1a:df:b4:6c:c7:2b:95:b9:5a:fd:fc: db:e6:8f:5d:1f:f1:1a:8f:c5:27:1c:7d:df:e1:9b: 96:51:57:0f:f4:9d:77:79:98:1e:8f:ab:b0:6e:6c: b3:ba:b5:0e:6f:34:5e:d3:42:ae:1a:a8:17:41:a8: 36:c2:2e:34:59:32:c8:95:d6:5c:11:dd:8c:89:c0: 66:c0:32:b1:1e:80:ab:5d:d3:51:cd:61:c9:fe:1a: fc:fd:eb:d8:42:03:df:4e:58:4e:f0:78:e2:96:bf: 2b:47:a1:85:03:d0:d5:30:04:94:de:6b:f0:5d:fa: 3b:17:95:9e:5d:68:5b:8f:39:21:9d:00:87:45:0f: 80:4a:3a:49:83:97:a4:a2:80:9e:35:d8:29:da:f0: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:16:E3:C2:61:94:58:1D:E1:FC:65:7C:5E:32:E6:52:C5:F0:63:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0984f23a-aa69-33c7-92de-c85b6af33615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a5:2a:75:dc:80:99:06:48:49:19:ac:f4:4a:f9:a8:38:74: 34:d9:bf:f5:7c:ed:b0:31:c8:17:63:e8:94:67:f6:f5:bd:92: 02:90:98:43:82:28:6c:45:ff:aa:8e:2d:cd:6a:69:83:68:2c: 6c:e2:24:0d:4f:1f:ad:bd:b6:f8:e4:26:ed:84:ae:19:a8:96: 6c:99:9d:97:12:ce:77:e0:d1:99:7f:fa:6a:4c:eb:84:91:ce: 0f:6f:62:f3:65:9b:a5:f9:44:1d:a4:83:c8:0c:54:26:77:cc: a9:58:73:d8:a0:70:b8:d1:3a:f2:0e:ff:aa:91:42:77:34:c5: 36:09:61:8d:43:90:9e:52:05:14:22:0b:6f:f2:48:09:80:14: 79:b2:25:9b:10:9b:eb:9a:87:d8:c5:73:dc:e0:d3:48:f2:b2: 38:04:b7:46:72:61:c3:df:34:e0:2c:32:2b:07:7c:74:39:86: 72:51:fb:63:ff:09:5c:8f:72:2e:80:ae:e1:5f:32:94:73:73: 63:a0:28:ad:0a:36:fb:63:25:84:bb:7e:ff:f3:3a:c8:22:0f: a3:91:04:4f:39:a8:bd:dc:fb:71:07:d7:d7:b7:07:91:72:74: ca:f1:c7:f6:6e:ef:b4:13:6e:01:ff:47:a4:9e:61:08:60:1e: fe:bd:d2:cc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOqQMq8PIiMHykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWQwYTdmOTUtMGE3YS00MjNiLTg3OGItZTEyNGVhMzlkNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAD5xmJSHeTg7ZRMVALDZg/HY/b0UWm5rns3 S0h4rfFHY+lXTkI2/DZjqS5Yd1IdaW+iiW02uVnh6RXG4BYstetku/NxRlqHzz+r dwSBUGhT3B49hiZTXNrTe7s734trFsubQ3ZqCfVgrJnlGt+0bMcrlbla/fzb5o9d H/Eaj8UnHH3f4ZuWUVcP9J13eZgej6uwbmyzurUObzRe00KuGqgXQag2wi40WTLI ldZcEd2MicBmwDKxHoCrXdNRzWHJ/hr8/evYQgPfTlhO8Hjilr8rR6GFA9DVMASU 3mvwXfo7F5WeXWhbjzkhnQCHRQ+ASjpJg5ekooCeNdgp2vDalQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHEW48JhlFgd4fxlfF4y5lLF8GMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk4NGYyM2EtYWE2OS0z M2M3LTkyZGUtYzg1YjZhZjMzNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtpSp13ICZBkhJGaz0SvmoOHQ02b/1fO2wMcgX Y+iUZ/b1vZICkJhDgihsRf+qji3NammDaCxs4iQNTx+tvbb45CbthK4ZqJZsmZ2X Es534NGZf/pqTOuEkc4Pb2LzZZul+UQdpIPIDFQmd8ypWHPYoHC40TryDv+qkUJ3 NMU2CWGNQ5CeUgUUIgtv8kgJgBR5siWbEJvrmofYxXPc4NNI8rI4BLdGcmHD3zTg LDIrB3x0OYZyUftj/wlcj3IugK7hXzKUc3NjoCitCjb7YyWEu37/8zrIIg+jkQRP Oai93PtxB9fXtweRcnTK8cf2bu+0E24B/0eknmEIYB7+vdLM -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:41 2025 by rpki-client