$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e793c5b-11a1-377b-877f-7b2f4b5b2f63.roa File: 2e793c5b-11a1-377b-877f-7b2f4b5b2f63.roa (raw, json) Hash identifier: TR0M/Ja35o0PEzgoISrxK12Bv0E9cR3joxjFy5DwWos= Subject key identifier: 90:B4:28:D1:E4:C0:13:A3:CF:A8:05:9A:41:A7:FA:65:33:DD:33:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0ECE62A72BD2641998F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e793c5b-11a1-377b-877f-7b2f4b5b2f63.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396590 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ec:e6:2a:72:bd:26:41:99:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=970ff997-b10f-4764-8739-3327c3e1f6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:5f:45:d8:cf:ac:56:81:ea:0b:5e:68:74: 5e:fb:7d:13:67:a4:f3:34:b2:a3:c4:94:85:31:95: 6c:72:40:5f:13:6f:96:6a:98:aa:f2:78:3f:c9:39: 52:9f:3b:1c:e9:d1:26:da:85:fd:d2:93:d5:bc:de: b0:88:88:b5:e3:d5:25:3a:de:5e:40:3c:9e:da:2e: 1f:83:d2:05:12:27:25:25:f3:c6:82:4a:71:23:80: f7:d3:18:7c:30:4f:34:eb:af:5e:98:61:60:f0:f4: ac:ce:49:9e:18:2e:ce:42:b6:05:6f:d8:22:2e:f1: 85:ea:15:2a:58:01:56:25:e0:d3:29:05:71:c9:06: 1d:21:10:08:b9:95:bf:b8:ca:b8:96:bc:d7:bb:e1: 3b:d8:22:b8:7f:79:a4:6f:46:22:27:6c:d8:86:c4: 88:4f:be:71:72:ab:ea:75:9b:1c:88:dd:42:43:7d: b6:1b:26:b9:db:fd:5e:5a:d4:8e:40:2d:ca:5c:4a: c7:94:81:f6:85:e3:b9:ce:16:1a:a0:d9:04:21:4e: d0:d7:db:18:7a:d8:29:c7:48:d2:72:5e:d2:d1:fd: ce:29:ce:d5:c9:af:c3:9c:25:4b:f3:e6:95:ff:28: e1:2b:81:5f:db:63:e5:a3:ec:1e:a3:86:4d:9d:04: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B4:28:D1:E4:C0:13:A3:CF:A8:05:9A:41:A7:FA:65:33:DD:33:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e793c5b-11a1-377b-877f-7b2f4b5b2f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2b:6b:22:8d:d0:6c:b8:4d:83:0d:02:7d:db:ae:73:87:00: 53:51:18:27:39:df:be:4f:a6:a6:3f:6c:8a:f0:f5:bd:a2:52: 2c:fc:31:c4:a4:50:a6:c7:b3:e6:ee:b9:c6:d4:ad:10:0a:3c: 6a:4b:ed:b2:7b:b7:66:82:17:8c:7b:49:36:4e:1e:3d:bb:8c: 50:dc:50:0e:66:d2:48:fa:0c:bb:c9:e0:73:90:25:18:e7:fb: 76:08:19:90:59:d4:e2:08:e3:48:05:a7:7b:93:e1:99:42:5f: 15:f0:f8:c9:5f:af:43:f5:37:32:76:67:71:e5:ba:74:5f:ea: 8b:29:db:1d:a4:04:83:51:f4:78:18:43:cd:32:df:c4:ad:1a: e6:48:e8:d1:94:f3:0c:df:33:35:6b:d6:31:9b:59:24:57:8d: 78:23:1c:e7:da:3c:89:fa:a0:2a:ee:c4:4d:0e:a8:4d:8d:5e: 59:65:c6:2c:2b:07:cf:a0:ce:6f:7a:5e:bd:fe:f1:5c:a9:52: 72:b2:e4:74:e1:20:23:29:7e:7f:d4:80:09:e0:af:3c:9e:38: ed:cb:20:5f:26:26:56:b4:89:4f:01:72:ff:25:ec:87:cf:72: 25:2d:e5:db:ed:8f:ea:b1:68:6e:df:80:12:cf:67:d9:5f:c7: 97:81:bf:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOzmKnK9JkGZj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OTcwZmY5OTctYjEwZi00NzY0LTg3MzktMzMyN2MzZTFmNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5pfRdjPrFaB6gteaHRe+30TZ6TzNLKjxJSF MZVsckBfE2+Wapiq8ng/yTlSnzsc6dEm2oX90pPVvN6wiIi149UlOt5eQDye2i4f g9IFEiclJfPGgkpxI4D30xh8ME80669emGFg8PSszkmeGC7OQrYFb9giLvGF6hUq WAFWJeDTKQVxyQYdIRAIuZW/uMq4lrzXu+E72CK4f3mkb0YiJ2zYhsSIT75xcqvq dZsciN1CQ322Gya52/1eWtSOQC3KXErHlIH2heO5zhYaoNkEIU7Q19sYetgpx0jS cl7S0f3OKc7Vya/DnCVL8+aV/yjhK4Ff22Plo+weo4ZNnQSELQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJC0KNHkwBOjz6gFmkGn+mUz3TNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU3OTNjNWItMTFhMS0z NzdiLTg3N2YtN2IyZjRiNWIyZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBZK2sijdBsuE2DDQJ9265zhwBTURgnOd++T6am P2yK8PW9olIs/DHEpFCmx7Pm7rnG1K0QCjxqS+2ye7dmgheMe0k2Th49u4xQ3FAO ZtJI+gy7yeBzkCUY5/t2CBmQWdTiCONIBad7k+GZQl8V8PjJX69D9Tcydmdx5bp0 X+qLKdsdpASDUfR4GEPNMt/ErRrmSOjRlPMM3zM1a9Yxm1kkV414Ixzn2jyJ+qAq 7sRNDqhNjV5ZZcYsKwfPoM5vel69/vFcqVJysuR04SAjKX5/1IAJ4K88njjtyyBf JiZWtIlPAXL/JeyHz3IlLeXb7Y/qsWhu34ASz2fZX8eXgb+C -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:46 2025 by rpki-client