$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa File: 38a85f41-7d00-368f-a88b-da675a578c44.roa (raw, json) Hash identifier: R0aPG95y/t1ezW2zHKLlFJ0uJXEf3MPhNpbsqDolEqk= Subject key identifier: A7:69:EA:E1:4A:54:F9:91:E8:C7:7A:05:72:C0:F6:DA:B5:C5:AC:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EDDA1F660FB285458F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396565 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ed:da:1f:66:0f:b2:85:45:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8bd9c9fc-2811-4618-b18a-e71c57b749cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:7d:ee:36:65:2d:c3:59:1c:7f:42:31:f3: 1f:41:7a:ca:e0:23:9e:6c:b3:5e:ba:22:fc:30:77: 7e:d7:b1:f7:b0:9c:31:bf:e8:36:d5:4b:5f:d3:d0: bc:6a:ce:21:2f:2f:08:a8:79:df:06:01:1e:1a:8c: ec:50:45:4c:46:8e:74:0e:80:fd:5d:35:bd:07:09: bc:6d:25:21:7e:2c:c7:66:55:3a:13:c8:5b:41:4b: fc:a0:5f:2b:8d:ab:6a:9f:9b:87:cb:54:f4:af:c0: e5:56:83:f6:ab:7d:4d:3a:1e:67:c4:6a:32:c8:12: 1a:cf:8e:8b:f2:9c:19:8e:0d:0d:b3:36:55:60:cb: 4f:94:ec:d0:39:51:d9:da:61:9e:8a:34:07:be:aa: 6d:56:92:d7:46:22:05:61:f8:14:52:2f:d2:b9:4f: 01:47:d1:e2:ac:97:d7:e4:a5:ff:2e:5f:2e:a0:fa: e9:61:71:1c:70:af:c9:e5:3d:ba:bf:8b:7e:5b:7a: 4d:92:cc:b7:9a:ab:82:97:40:09:27:03:62:bd:ca: f3:47:40:2a:7c:1a:c0:3e:d3:a7:73:e1:00:f4:6f: 69:0f:45:d0:73:8f:c0:cc:65:8d:e3:91:ca:1d:a0: c5:9e:f2:0a:30:4c:94:bb:ab:af:74:2d:f8:5b:d6: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:EA:E1:4A:54:F9:91:E8:C7:7A:05:72:C0:F6:DA:B5:C5:AC:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fd:58:26:35:8b:9a:30:81:45:62:42:de:7e:47:c4:8e:cb: e9:f0:b7:7b:07:b3:f3:1b:4f:fb:5b:64:24:3a:3e:4c:0c:40: 04:00:b8:56:b7:d7:85:d1:33:46:f5:3a:6b:6e:16:a5:6d:9f: 12:c0:8a:01:97:7a:05:d2:d6:d0:5a:ee:bc:02:cf:37:8a:ec: 0e:7e:b1:d7:14:40:20:32:67:44:94:e3:42:c8:f2:8b:19:df: 4d:45:ad:a0:f5:f6:09:c3:19:eb:e0:7c:f7:0a:58:8f:97:14: 66:97:51:cd:4d:92:71:1f:3f:9a:ab:bf:40:31:c8:a1:36:72: ea:fc:a8:47:c4:8b:b0:0e:ab:14:c2:27:e7:c4:3f:5c:77:90: a6:2d:6c:48:f5:d9:eb:7d:5f:da:6a:72:79:30:a1:58:42:ca: 3e:a1:f1:aa:f2:ca:01:6c:69:a9:97:08:58:3d:c8:6e:56:28: 63:f7:9c:34:66:79:2d:60:b2:d4:3b:8e:b5:70:24:d2:5a:e9: 43:02:0c:90:1a:39:db:48:31:ef:e7:63:9c:04:5f:dc:ea:08: bf:a9:36:73:75:ca:fe:b5:5e:ea:50:ab:19:74:96:99:39:57: de:6b:ed:29:b0:d8:6a:ca:4b:37:80:ea:c8:23:dd:b1:43:d7: 50:a9:ff:d0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoO3aH2YPsoVFj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGJkOWM5ZmMtMjgxMS00NjE4LWIxOGEtZTcxYzU3Yjc0OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fp97jZlLcNZHH9CMfMfQXrK4COebLNeuiL8 MHd+17H3sJwxv+g21Utf09C8as4hLy8IqHnfBgEeGozsUEVMRo50DoD9XTW9Bwm8 bSUhfizHZlU6E8hbQUv8oF8rjatqn5uHy1T0r8DlVoP2q31NOh5nxGoyyBIaz46L 8pwZjg0NszZVYMtPlOzQOVHZ2mGeijQHvqptVpLXRiIFYfgUUi/SuU8BR9HirJfX 5KX/Ll8uoPrpYXEccK/J5T26v4t+W3pNksy3mquCl0AJJwNivcrzR0AqfBrAPtOn c+EA9G9pD0XQc4/AzGWN45HKHaDFnvIKMEyUu6uvdC34W9aKhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKdp6uFKVPmR6Md6BXLA9tq1xayzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzhhODVmNDEtN2QwMC0z NjhmLWE4OGItZGE2NzVhNTc4YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAZ/VgmNYuaMIFFYkLefkfEjsvp8Ld7B7PzG0/7 W2QkOj5MDEAEALhWt9eF0TNG9TprbhalbZ8SwIoBl3oF0tbQWu68As83iuwOfrHX FEAgMmdElONCyPKLGd9NRa2g9fYJwxnr4Hz3CliPlxRml1HNTZJxHz+aq79AMcih NnLq/KhHxIuwDqsUwifnxD9cd5CmLWxI9dnrfV/aanJ5MKFYQso+ofGq8soBbGmp lwhYPchuVihj95w0ZnktYLLUO461cCTSWulDAgyQGjnbSDHv52OcBF/c6gi/qTZz dcr+tV7qUKsZdJaZOVfea+0psNhqyks3gOrII92xQ9dQqf/Q -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:47 2025 by rpki-client