$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a044801-bef0-3083-a8a9-a11d33411f51.roa File: 2a044801-bef0-3083-a8a9-a11d33411f51.roa (raw, json) Hash identifier: 8my8nEUzqP8xjSmx2cnJQq5gBxHQct0T+idmMqmex8g= Subject key identifier: 17:4C:0B:40:C5:87:EE:3B:13:A4:54:1B:FD:33:07:3E:52:EF:95:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E982CE7F4D7DCA91CA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a044801-bef0-3083-a8a9-a11d33411f51.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396560 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e9:82:ce:7f:4d:7d:ca:91:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ad8a2d33-14d6-42a3-adea-ff432a83ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7e:f8:f6:77:48:42:76:5d:25:1e:08:75:30: 0e:68:c6:be:48:f7:34:1e:58:f3:4e:d4:cd:2d:f8: 90:ed:a6:03:3e:96:66:30:61:e7:03:37:1a:7c:dd: 5f:3f:34:93:92:51:a1:fc:9a:09:68:04:2c:33:55: c8:8c:13:f4:52:57:3e:69:ab:12:c0:73:6e:13:b3: b1:62:b9:f4:38:02:c8:07:d7:7e:aa:06:92:d2:88: 60:d8:03:c3:58:40:7e:27:ef:97:c2:8b:b6:7d:60: b7:ed:c5:c9:39:5b:3a:5a:da:6f:87:50:9e:04:1e: 48:5e:05:ed:54:64:50:26:05:c8:a1:41:df:2c:1f: 98:01:10:c6:c2:78:b2:c8:29:7d:7a:70:4d:29:87: 2a:47:f0:80:ee:f5:37:34:8a:52:45:c0:f7:cc:f3: 66:46:3d:a4:6a:38:a4:68:85:d1:9b:86:17:ce:fc: e9:ff:36:c2:4e:ba:46:17:71:37:f8:15:5e:32:a4: fa:eb:c8:61:11:05:56:9d:5d:cf:f7:98:df:3f:ee: e4:6d:ab:c1:ef:a4:dd:26:74:56:3a:29:65:fc:b8: 15:7a:e4:7f:b5:51:e4:d1:29:ff:00:b9:6f:71:81: f0:32:4c:cb:9c:f8:68:81:94:2e:3a:bc:94:38:7f: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4C:0B:40:C5:87:EE:3B:13:A4:54:1B:FD:33:07:3E:52:EF:95:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a044801-bef0-3083-a8a9-a11d33411f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:33:db:8f:50:c4:d9:15:9f:d5:82:9d:96:09:7f:f4:8f:9e: 5f:63:55:03:45:a4:d4:66:ad:15:54:05:ef:c9:ad:8d:ae:74: 86:3a:73:f4:97:c5:c2:d8:3f:91:51:33:03:b3:c9:38:bd:f8: 7e:9a:90:30:f6:bb:5f:af:ae:26:7f:fa:62:b6:cd:eb:66:79: c0:56:93:df:7e:99:b7:a2:b0:d6:0f:26:f4:71:8e:54:7f:f5: 94:20:3e:e1:18:f1:c3:9f:82:04:11:c5:6c:1b:ed:26:08:1e: b8:61:44:ad:49:3b:a2:db:29:22:2f:09:c4:d5:8b:d4:62:25: 76:25:ff:d3:9b:9e:1e:78:b6:ef:84:a8:9c:1d:73:87:1b:ad: 13:48:78:95:27:0c:07:25:00:b5:3a:25:1f:06:b7:e5:18:bc: c3:78:52:8e:74:4c:17:49:f2:ba:a4:26:cb:0a:ca:b9:75:ec: 76:ee:25:8f:60:18:08:b0:b0:ef:16:da:93:dd:0b:23:02:86: 39:f1:83:df:9d:ff:7a:cc:fe:fb:d8:91:28:a8:dd:f5:3b:1b: 9a:93:76:ad:a0:02:a4:92:86:4c:9b:9e:fd:23:87:cc:0b:b7: d5:ac:b8:24:00:8c:b2:f0:87:24:d0:61:9d:64:99:85:32:03: ed:ad:67:ae -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOmCzn9NfcqRygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YWQ4YTJkMzMtMTRkNi00MmEzLWFkZWEtZmY0MzJhODNkZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn749ndIQnZdJR4IdTAOaMa+SPc0HljzTtTN LfiQ7aYDPpZmMGHnAzcafN1fPzSTklGh/JoJaAQsM1XIjBP0Ulc+aasSwHNuE7Ox Yrn0OALIB9d+qgaS0ohg2APDWEB+J++Xwou2fWC37cXJOVs6Wtpvh1CeBB5IXgXt VGRQJgXIoUHfLB+YARDGwniyyCl9enBNKYcqR/CA7vU3NIpSRcD3zPNmRj2kajik aIXRm4YXzvzp/zbCTrpGF3E3+BVeMqT668hhEQVWnV3P95jfP+7kbavB76TdJnRW Oill/LgVeuR/tVHk0Sn/ALlvcYHwMkzLnPhogZQuOryUOH+KrQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBdMC0DFh+47E6RUG/0zBz5S75UnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEwNDQ4MDEtYmVmMC0z MDgzLWE4YTktYTExZDMzNDExZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCCM9uPUMTZFZ/Vgp2WCX/0j55fY1UDRaTUZq0V VAXvya2NrnSGOnP0l8XC2D+RUTMDs8k4vfh+mpAw9rtfr64mf/pits3rZnnAVpPf fpm3orDWDyb0cY5Uf/WUID7hGPHDn4IEEcVsG+0mCB64YUStSTui2ykiLwnE1YvU YiV2Jf/Tm54eeLbvhKicHXOHG60TSHiVJwwHJQC1OiUfBrflGLzDeFKOdEwXSfK6 pCbLCsq5dex27iWPYBgIsLDvFtqT3QsjAoY58YPfnf96zP772JEoqN31Oxuak3at oAKkkoZMm579I4fMC7fVrLgkAIyy8Ick0GGdZJmFMgPtrWeu -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:01 2025 by rpki-client