$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa File: 0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa (raw, json) Hash identifier: 3efb9DHyOWE4nDtte3gykpsQ7eHWnrLM/pU4CqxZKqM= Subject key identifier: BC:34:AF:9C:1F:A2:A2:E3:F1:4D:E3:F4:49:5F:FF:1B:A3:2D:B8:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E245DEE4586E06C8D9B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 36622 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e2:45:de:e4:58:6e:06:c8:d9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8bb43be9-d4fd-4bd1-a835-673c9b0968cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:ff:37:c9:98:92:87:bf:0f:00:4d:62:97: 52:3e:c9:bd:36:c8:dc:61:02:4b:e3:c4:51:03:47: ba:4e:2a:bc:de:01:87:a5:43:7a:a0:a5:29:c5:dc: e7:c2:f8:c3:61:10:96:91:c5:58:c1:e0:e6:32:26: 7d:ec:14:74:c5:d6:8f:a4:d2:28:f5:f9:3b:db:2d: b9:f8:f6:06:80:27:be:32:b2:04:ef:31:19:2f:1d: 7c:ad:2d:4d:9a:1d:e0:20:06:c9:31:da:a4:47:34: 84:23:60:52:ed:b8:84:c2:a5:b0:dc:1f:7a:03:24: c9:7c:72:ff:af:9d:89:4b:73:e2:e1:0b:fc:10:66: b0:95:7d:c5:40:db:47:56:5e:b9:89:c3:d5:b5:f0: fb:78:41:dc:04:60:31:28:4a:25:ba:19:bb:ef:c6: ad:82:02:ac:39:1e:32:ac:ac:d4:48:f8:7a:58:a7: 95:22:eb:b6:30:6c:22:02:30:02:7f:9d:aa:99:f9: 36:10:b0:cb:8c:6f:9d:b5:de:c5:e9:f7:08:d3:cf: 37:47:fc:e2:e7:e5:d5:88:de:c5:79:7c:46:b9:2b: 8d:a6:69:fc:c0:9a:5c:fe:89:c5:8e:51:38:c8:1c: a0:1d:d5:34:1e:79:7f:ad:83:b0:ea:12:5c:66:ec: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:34:AF:9C:1F:A2:A2:E3:F1:4D:E3:F4:49:5F:FF:1B:A3:2D:B8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:60:b7:e1:5f:f1:4a:91:78:67:8b:7b:b2:c6:a7:94:83:8b: 15:1a:f6:29:d9:9b:54:27:9f:66:19:6c:f2:5a:17:4b:e0:f3: 60:61:c3:79:e3:1e:2e:59:01:4c:0a:97:ce:fc:e8:e4:26:a7: f9:a0:ae:77:f0:a8:f4:91:41:96:21:b3:5e:a9:bb:fa:1e:ff: 3e:3e:1c:82:44:dc:89:e3:ab:18:0d:55:da:81:98:a0:a5:de: a4:62:dc:eb:dd:0d:f2:4e:6e:81:79:26:20:f8:7f:a5:40:38: 31:1c:a0:fe:36:1b:f0:7e:ff:87:17:7e:e1:24:d9:80:c6:1a: 0e:ac:6a:6b:aa:d3:2e:62:32:30:15:2f:02:a9:59:82:03:58: 86:e4:8f:14:87:8f:a2:91:58:e7:c1:dd:a8:bf:b7:2b:aa:e9: a8:38:51:c3:73:cd:81:74:e3:5e:97:79:50:50:f3:11:02:87: f9:fc:98:5b:e0:c0:be:ee:2c:33:db:ca:dd:0b:c0:85:aa:3e: 6f:f4:8c:48:6e:8b:d9:6b:23:fd:09:9b:00:d9:65:65:11:44: 64:8e:71:48:d6:ca:cd:40:24:7b:22:88:ef:3f:64:18:f4:23: 82:28:9f:5a:03:f9:ee:a3:1f:78:a4:9c:4c:fe:55:80:0d:cb: 88:e7:6f:3b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOJF3uRYbgbI2bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGJiNDNiZTktZDRmZC00YmQxLWE4MzUtNjczYzliMDk2OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6L/N8mYkoe/DwBNYpdSPsm9NsjcYQJL48RR A0e6Tiq83gGHpUN6oKUpxdznwvjDYRCWkcVYweDmMiZ97BR0xdaPpNIo9fk72y25 +PYGgCe+MrIE7zEZLx18rS1Nmh3gIAbJMdqkRzSEI2BS7biEwqWw3B96AyTJfHL/ r52JS3Pi4Qv8EGawlX3FQNtHVl65icPVtfD7eEHcBGAxKEoluhm778atggKsOR4y rKzUSPh6WKeVIuu2MGwiAjACf52qmfk2ELDLjG+dtd7F6fcI0883R/zi5+XViN7F eXxGuSuNpmn8wJpc/onFjlE4yBygHdU0Hnl/rYOw6hJcZuxCFQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLw0r5wfoqLj8U3j9Elf/xujLbiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGQ2OGNmZDMtYzU0Yy0z OTkwLTk1YTItMmE1YzdjMjFmMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+YLfhX/FKkXhni3uyxqeUg4sVGvYp2ZtUJ59m GWzyWhdL4PNgYcN54x4uWQFMCpfO/OjkJqf5oK538Kj0kUGWIbNeqbv6Hv8+PhyC RNyJ46sYDVXagZigpd6kYtzr3Q3yTm6BeSYg+H+lQDgxHKD+Nhvwfv+HF37hJNmA xhoOrGprqtMuYjIwFS8CqVmCA1iG5I8Uh4+ikVjnwd2ov7crqumoOFHDc82BdONe l3lQUPMRAof5/Jhb4MC+7iwz28rdC8CFqj5v9IxIbovZayP9CZsA2WVlEURkjnFI 1srNQCR7IojvP2QY9COCKJ9aA/nuox94pJxM/lWADcuI5287 -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:50 2025 by rpki-client