$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23c18dd6-802d-3d95-9e80-3799ec4121b8.roa File: 23c18dd6-802d-3d95-9e80-3799ec4121b8.roa (raw, json) Hash identifier: VagFCTqdS5UFgGNDZIPxEpciPX+A3lBsaDQd6KDVbOc= Subject key identifier: DF:6C:96:67:C1:13:61:86:C3:E2:3D:44:36:8C:2B:45:93:00:64:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E6E29C7FC584C58C2180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23c18dd6-802d-3d95-9e80-3799ec4121b8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 36624 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e6:e2:9c:7f:c5:84:c5:8c:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=804336d3-b75a-4cf1-b41b-858f8d875472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:53:d9:54:3f:f7:e0:a8:a2:21:51:5a:bf: 4e:a8:ee:98:c4:2f:5f:08:83:4c:5a:09:de:74:d7: 7d:31:b1:e7:10:76:90:61:bb:3b:d1:05:2b:f8:a1: c5:dc:ae:c8:80:e4:3d:04:e1:27:40:5e:d7:60:d1: 25:81:0e:8a:07:13:15:08:8d:93:65:9c:c3:0d:40: dc:16:14:c9:78:00:3f:d8:e7:c9:13:86:ed:dc:30: 61:63:df:b2:72:aa:92:6a:20:19:38:2a:bf:3d:81: 32:29:64:ec:7b:53:17:19:9a:88:b1:fe:77:85:5f: da:89:23:02:b1:db:02:12:21:33:37:f8:ce:12:6a: 54:df:56:22:e4:7e:c7:a0:3f:ca:3e:ea:ad:30:3e: 69:82:0a:77:66:35:a3:9b:06:5a:ec:15:f6:e6:a7: cb:29:27:1f:20:f9:99:be:8e:50:04:1f:fc:46:34: c5:23:e2:c6:d1:d4:fb:48:00:d3:1a:c9:46:ee:52: b3:9b:7a:6f:52:c3:11:47:33:f6:1e:18:56:29:2c: 3d:73:2c:8b:2b:3e:a3:75:53:a4:fa:2f:e3:52:05: 97:7c:07:24:0c:b8:c1:55:db:81:0c:6b:2e:1e:5a: 07:ff:d3:32:60:c9:7e:31:86:23:3f:ec:bb:44:37: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6C:96:67:C1:13:61:86:C3:E2:3D:44:36:8C:2B:45:93:00:64:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23c18dd6-802d-3d95-9e80-3799ec4121b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5c:b9:15:11:c9:ab:d8:51:eb:d2:73:58:c5:28:7b:06:28: e6:51:b8:08:48:25:fd:aa:c9:b5:33:d5:4c:db:dd:b0:a9:59: 91:50:08:dd:53:03:c6:e1:be:0e:c7:61:d0:a4:38:a6:cd:d1: 39:ad:d9:ee:c3:a4:09:f7:4c:e4:8e:42:77:e2:e0:d3:c7:73: f5:72:4d:20:84:cf:4a:f7:0e:dc:38:b7:91:04:39:c3:d7:f6: a5:6d:52:31:e1:0d:2c:38:a3:13:d6:58:44:40:1f:67:99:57: 65:0e:68:74:40:b9:fe:75:b0:74:28:b9:a4:88:7d:72:e7:c4: d7:02:3e:91:7b:37:aa:12:f0:f1:f5:06:0f:10:3d:84:ef:cf: ce:1e:d2:66:d1:7c:af:39:5c:7c:3e:cd:2a:f4:7c:20:44:5a: 36:01:23:96:15:6e:c1:13:e4:72:ed:8d:6d:25:cc:a3:cb:c0: b8:24:d1:c9:0e:82:9b:1c:1f:df:00:e1:ba:14:4b:9a:7d:a7: 6b:1c:62:61:94:61:28:7c:0c:33:50:ce:5e:4f:ac:bd:d8:94: c8:a7:c9:71:d4:c8:c2:63:bb:74:09:a8:00:88:51:8c:d2:d0: ad:63:2e:86:2a:70:9c:ed:6a:08:b0:d6:ab:34:3f:bb:b2:fb: c7:f8:ee:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoObinH/FhMWMIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODA0MzM2ZDMtYjc1YS00Y2YxLWI0MWItODU4ZjhkODc1NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWZT2VQ/9+CooiFRWr9OqO6YxC9fCINMWgne dNd9MbHnEHaQYbs70QUr+KHF3K7IgOQ9BOEnQF7XYNElgQ6KBxMVCI2TZZzDDUDc FhTJeAA/2OfJE4bt3DBhY9+ycqqSaiAZOCq/PYEyKWTse1MXGZqIsf53hV/aiSMC sdsCEiEzN/jOEmpU31Yi5H7HoD/KPuqtMD5pggp3ZjWjmwZa7BX25qfLKScfIPmZ vo5QBB/8RjTFI+LG0dT7SADTGslG7lKzm3pvUsMRRzP2HhhWKSw9cyyLKz6jdVOk +i/jUgWXfAckDLjBVduBDGsuHloH/9MyYMl+MYYjP+y7RDe4rwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN9slmfBE2GGw+I9RDaMK0WTAGQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNjMThkZDYtODAyZC0z ZDk1LTllODAtMzc5OWVjNDEyMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJXLkVEcmr2FHr0nNYxSh7BijmUbgISCX9qsm1 M9VM292wqVmRUAjdUwPG4b4Ox2HQpDimzdE5rdnuw6QJ90zkjkJ34uDTx3P1ck0g hM9K9w7cOLeRBDnD1/albVIx4Q0sOKMT1lhEQB9nmVdlDmh0QLn+dbB0KLmkiH1y 58TXAj6RezeqEvDx9QYPED2E78/OHtJm0XyvOVx8Ps0q9HwgRFo2ASOWFW7BE+Ry 7Y1tJcyjy8C4JNHJDoKbHB/fAOG6FEuafadrHGJhlGEofAwzUM5eT6y92JTIp8lx 1MjCY7t0CagAiFGM0tCtYy6GKnCc7WoIsNarND+7svvH+O7j -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:41 2025 by rpki-client