$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa File: 1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa (raw, json) Hash identifier: xq47Z9F7omm/prOaT2bTJDVRsnMsckR2rF6KSdPpo4A= Subject key identifier: 18:2B:B8:59:F2:3B:6B:8F:2D:98:89:AB:B4:DB:D0:3C:A7:D1:6F:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EB61719DB53ECBA16C8E Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396551 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:eb:61:71:9d:b5:3e:cb:a1:6c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=08364f72-d825-4e21-9cf9-91956351c00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:41:d8:fe:5b:c8:6a:9b:de:a7:10:31:d9: 5c:b4:c8:41:c5:8a:64:02:a1:80:39:58:fe:2a:44: 48:9f:4b:84:98:1f:02:73:d3:53:e5:3e:48:63:ae: 39:72:97:bf:e8:4f:db:90:85:33:ae:c8:1d:66:6c: 94:97:35:0b:cf:38:e4:1d:1e:75:59:fa:36:d7:a4: 85:c2:b9:0b:c5:03:69:86:55:ad:82:c9:82:60:e9: 39:93:93:f2:e3:98:e0:5f:5d:6e:53:7c:ac:fb:ba: 28:1f:ce:58:6a:dd:42:c0:e1:71:db:4b:21:ba:09: f3:9a:0a:66:11:0f:06:b0:7c:da:25:1f:f9:5b:8f: a5:f5:ed:be:27:f0:13:73:77:6d:4e:3f:3a:65:e9: f5:fe:79:20:e8:b2:49:70:06:d8:0b:5d:e2:07:ef: 90:dd:dd:df:d1:18:4b:5d:ee:8f:24:86:a6:27:53: dc:15:f8:a9:f1:cd:4c:f4:73:50:05:12:00:c8:fb: 35:17:db:50:bd:7a:0d:d0:4a:e4:a6:0b:28:2e:8e: eb:04:f4:b9:a2:6a:ab:98:de:83:83:e5:1f:4a:66: f8:be:0b:46:55:63:6f:f2:9e:00:e6:73:c1:d2:57: 1b:a9:a2:2f:4a:5f:21:e8:05:b4:f6:96:3e:99:76: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2B:B8:59:F2:3B:6B:8F:2D:98:89:AB:B4:DB:D0:3C:A7:D1:6F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:50:a9:1f:41:4a:fc:ef:6f:1b:62:3a:c3:01:f1:f4:54:43: 30:eb:f6:a8:54:4f:be:65:43:53:26:59:e8:e1:7e:87:f7:4f: 98:44:c0:73:de:b8:4b:62:a4:9a:09:be:eb:6d:a1:9d:2c:cd: de:57:51:7c:39:49:d2:79:08:d3:f0:4c:39:3f:b6:ad:18:1e: b4:78:1d:6b:60:5f:f6:42:4c:e3:a8:43:67:4c:4a:ba:65:bd: f0:85:67:1a:70:13:28:25:5e:b9:3c:89:f6:7c:32:6d:ed:d1: 7b:89:57:75:90:c4:49:31:80:9c:05:22:16:f8:da:c2:7f:20: 6e:6c:9c:a7:5a:e2:a1:4d:5f:0e:d9:a3:3a:e8:a5:77:ba:4b: cb:6a:d8:b2:dd:ae:40:f0:ad:1b:c1:59:c1:e2:39:0a:6f:87: 01:1f:ba:22:fd:35:f4:79:e9:f7:d8:28:8f:44:65:7f:47:ce: a3:1f:1d:98:f8:d8:82:4e:69:b1:5f:1c:60:97:94:78:54:e6: f8:ba:4d:5a:6d:3a:79:38:31:81:fe:33:94:57:46:53:bf:cc: 2a:fd:02:62:4d:a5:5f:67:8a:0f:d5:ef:26:3b:c1:11:1a:c1: 5b:51:52:b3:6e:c6:1c:93:ce:09:01:40:eb:40:2d:36:8e:29: b1:b0:72:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOthcZ21PsuhbI4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDgzNjRmNzItZDgyNS00ZTIxLTljZjktOTE5NTYzNTFjMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw89B2P5byGqb3qcQMdlctMhBxYpkAqGAOVj+ KkRIn0uEmB8Cc9NT5T5IY645cpe/6E/bkIUzrsgdZmyUlzULzzjkHR51Wfo216SF wrkLxQNphlWtgsmCYOk5k5Py45jgX11uU3ys+7ooH85Yat1CwOFx20shugnzmgpm EQ8GsHzaJR/5W4+l9e2+J/ATc3dtTj86Zen1/nkg6LJJcAbYC13iB++Q3d3f0RhL Xe6PJIamJ1PcFfip8c1M9HNQBRIAyPs1F9tQvXoN0ErkpgsoLo7rBPS5omqrmN6D g+UfSmb4vgtGVWNv8p4A5nPB0lcbqaIvSl8h6AW09pY+mXawkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBgruFnyO2uPLZiJq7Tb0Dyn0W+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWExZjVhNWUtNmUyZC0z ZDZhLWE5ZDMtNWQwZWQ2N2U2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVUKkfQUr8728bYjrDAfH0VEMw6/aoVE++ZUNT Jlno4X6H90+YRMBz3rhLYqSaCb7rbaGdLM3eV1F8OUnSeQjT8Ew5P7atGB60eB1r YF/2QkzjqENnTEq6Zb3whWcacBMoJV65PIn2fDJt7dF7iVd1kMRJMYCcBSIW+NrC fyBubJynWuKhTV8O2aM66KV3ukvLatiy3a5A8K0bwVnB4jkKb4cBH7oi/TX0een3 2CiPRGV/R86jHx2Y+NiCTmmxXxxgl5R4VOb4uk1abTp5ODGB/jOUV0ZTv8wq/QJi TaVfZ4oP1e8mO8ERGsFbUVKzbsYck84JAUDrQC02jimxsHK1 -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:08 2025 by rpki-client