$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61383942-1028-3049-87ab-ee114e28594a.roa File: 61383942-1028-3049-87ab-ee114e28594a.roa (raw, json) Hash identifier: bqGEwzH1ZxFvXRf50NMhPpgxEsvQy68dTaqbrq8FfL8= Subject key identifier: E8:5D:98:6A:74:13:12:43:2D:E1:86:B1:04:15:0E:17:D2:DC:00:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E0AF4B22E979C3A999C8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61383942-1028-3049-87ab-ee114e28594a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397197 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e0:af:4b:22:e9:79:c3:a9:99:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=25f6a743-b9d0-4084-be02-9bfff4094aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:15:ba:0b:3f:d7:9c:fb:61:d5:a5:42:8b: 40:99:e1:e7:af:c6:af:a4:54:3c:59:0c:8d:77:da: f5:81:28:f1:f8:54:0e:72:13:dd:90:04:cc:87:d4: 9b:33:05:0d:1a:70:66:1b:91:26:5c:7b:6f:05:e4: 22:b2:e3:58:70:d7:5a:ba:04:cf:7d:58:01:05:03: fc:3a:22:8e:86:fa:e1:55:c2:e2:fc:c1:26:86:09: 3d:a8:62:5b:52:e9:96:98:26:4e:52:23:cd:50:90: 73:68:5b:e0:21:3b:61:a7:c0:a7:f3:64:54:1f:ad: 1b:86:b8:92:b9:8d:62:cc:45:2f:5b:09:a8:75:1f: ca:e3:15:31:0e:4d:5c:6d:40:8a:3b:ec:72:0a:fd: 7e:8c:f9:e9:ad:6a:b8:85:75:fe:67:7d:91:3d:39: 8f:ef:80:bf:a4:a4:66:93:35:e9:d3:53:2e:40:d8: f9:57:27:79:1f:5b:38:dc:2a:30:fa:2d:59:19:fe: 96:8e:e7:5b:84:94:85:21:75:7d:cb:e4:d4:0f:39: 37:14:cd:0c:90:5d:1c:31:56:bc:06:e0:d6:9e:2e: 2f:3a:3b:5a:22:8a:a1:ca:7a:b8:0e:bf:bf:62:5c: 20:30:8b:57:3b:6c:75:a7:e5:65:1b:4e:8f:2f:84: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5D:98:6A:74:13:12:43:2D:E1:86:B1:04:15:0E:17:D2:DC:00:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61383942-1028-3049-87ab-ee114e28594a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:cc:bf:3e:c1:8b:ea:ee:d5:f2:0a:8b:1b:e5:ee:b7:c7:a2: da:91:39:24:84:8a:68:83:2c:db:99:b4:27:fa:5e:4c:00:1a: 19:d5:e5:47:47:e4:1d:bc:48:a2:8a:97:83:2f:8f:c6:66:55: 1f:4d:da:3c:43:d7:3b:c0:d0:5e:27:55:95:4e:28:e5:17:2c: 5c:51:b9:2a:e6:08:2f:48:fc:6e:e1:23:15:eb:db:e8:43:d4: 77:00:ed:78:03:0a:0e:75:6f:56:5d:ac:6e:02:4c:d3:64:a1: 47:d8:d6:e3:4d:01:55:fd:31:69:8d:16:2c:31:d2:1a:5f:b2: e1:ed:7e:f1:43:1b:e3:4b:68:6c:94:53:57:0b:b4:a7:98:38: f0:52:ad:3c:03:87:11:e6:a0:a4:51:d9:d7:a9:27:ce:0c:80: d6:35:2b:8d:82:85:76:c4:f6:39:85:26:74:5c:2e:05:9e:e3: 9d:d2:9e:49:29:5a:4b:ec:bd:c0:b5:07:b9:88:25:94:04:42: 76:4f:c1:5d:59:e0:93:83:9b:a4:22:0d:71:ce:52:62:df:d2: 71:b7:9d:1c:c8:07:bd:6d:67:23:bc:16:89:16:df:6c:f5:31: d1:2c:8a:55:f0:f2:30:ae:a0:a1:d3:6f:be:2e:79:cd:0a:78: f6:3f:8e:27 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOCvSyLpecOpmcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjVmNmE3NDMtYjlkMC00MDg0LWJlMDItOWJmZmY0MDk0YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbMVugs/15z7YdWlQotAmeHnr8avpFQ8WQyN d9r1gSjx+FQOchPdkATMh9SbMwUNGnBmG5EmXHtvBeQisuNYcNdaugTPfVgBBQP8 OiKOhvrhVcLi/MEmhgk9qGJbUumWmCZOUiPNUJBzaFvgITthp8Cn82RUH60bhriS uY1izEUvWwmodR/K4xUxDk1cbUCKO+xyCv1+jPnprWq4hXX+Z32RPTmP74C/pKRm kzXp01MuQNj5Vyd5H1s43Cow+i1ZGf6WjudbhJSFIXV9y+TUDzk3FM0MkF0cMVa8 BuDWni4vOjtaIoqhynq4Dr+/YlwgMItXO2x1p+VlG06PL4T0BwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOhdmGp0ExJDLeGGsQQVDhfS3AAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjEzODM5NDItMTAyOC0z MDQ5LTg3YWItZWUxMTRlMjg1OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBZzL8+wYvq7tXyCosb5e63x6LakTkkhIpogyzb mbQn+l5MABoZ1eVHR+QdvEiiipeDL4/GZlUfTdo8Q9c7wNBeJ1WVTijlFyxcUbkq 5ggvSPxu4SMV69voQ9R3AO14AwoOdW9WXaxuAkzTZKFH2NbjTQFV/TFpjRYsMdIa X7Lh7X7xQxvjS2hslFNXC7SnmDjwUq08A4cR5qCkUdnXqSfODIDWNSuNgoV2xPY5 hSZ0XC4FnuOd0p5JKVpL7L3AtQe5iCWUBEJ2T8FdWeCTg5ukIg1xzlJi39Jxt50c yAe9bWcjvBaJFt9s9THRLIpV8PIwrqCh02++LnnNCnj2P44n -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:41 2025 by rpki-client