$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa File: 89c0097c-ba53-3eda-b8f4-83253c50f6be.roa (raw, json) Hash identifier: Jxq82VDg0hJxLJlO11PQ8JWDbj1XgK7O3RKC5cQutvE= Subject key identifier: F2:12:5A:85:6D:E7:76:A4:25:81:23:2D:FE:1B:5F:39:E4:9D:F1:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EBAB319A3EE6938ECC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 36620 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:eb:ab:31:9a:3e:e6:93:8e:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a9d809c6-a5a0-4b6a-995e-841b04d378f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:23:d3:01:f0:9e:69:0b:a8:bd:18:ef:63: c3:e8:ad:85:62:87:73:86:fb:b1:ef:c7:2e:22:88: b7:79:8c:e9:9b:17:d8:b4:36:f1:79:2e:31:f6:67: c7:f9:3c:f1:02:c3:22:39:2c:71:54:bb:70:98:d4: bd:33:4b:4d:f9:ea:82:ce:49:4a:28:95:0b:4e:99: 16:0f:76:6c:03:9a:02:48:4c:32:d3:84:6a:3d:7f: 9d:bc:b9:50:31:45:92:4b:5e:ff:90:85:b2:0d:86: 16:ca:9b:44:a6:0e:44:33:9b:bc:37:2d:d2:f3:6d: 53:b2:19:e4:94:6b:3d:a4:bc:2b:64:49:2b:d6:c6: 31:76:37:fb:7f:05:42:70:5a:b1:81:47:d1:5d:cd: dc:46:9e:73:e0:87:80:be:c8:e4:72:72:04:3c:ac: f9:84:9f:22:e9:8e:9d:ad:a9:66:f5:52:c3:1a:9e: 1f:f7:fb:8d:05:22:7b:07:73:7f:16:6e:58:08:10: 48:15:e4:88:3a:e2:cd:73:61:0c:05:a9:da:92:fc: 0b:5b:3f:12:d6:09:3d:1b:4e:44:41:f2:a5:17:cb: 9e:d2:6b:2c:01:e4:f5:a4:03:3f:f0:36:9d:d3:d5: 09:82:9f:bd:cc:25:0b:00:1c:da:97:34:3d:ce:bf: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:5A:85:6D:E7:76:A4:25:81:23:2D:FE:1B:5F:39:E4:9D:F1:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3f:d5:87:91:60:db:66:98:15:74:13:80:cd:3e:5f:43:ea: 61:1f:9b:27:14:b3:38:ad:5f:33:05:6c:83:a3:4d:b5:ae:c9: bc:b2:5d:a7:99:2f:f8:f3:49:9f:d6:a1:94:c2:25:85:97:04: a9:21:55:4c:e8:d3:18:a6:ca:4c:5e:55:ba:b6:30:ec:bd:78: 2c:33:62:9d:02:ac:08:a5:78:66:80:1a:c6:d0:45:5d:1d:70: 96:4c:59:6d:6b:b6:3b:7a:ab:11:59:b9:32:fc:13:cd:ef:e7: a0:95:af:70:ff:b3:c9:5d:dc:40:a9:d7:96:1d:6a:ea:4a:d0: 46:32:97:55:25:2d:f2:3f:5c:1d:b2:c0:3d:25:c6:96:7d:5e: c2:9f:c7:68:51:74:3c:d1:17:36:06:9a:d1:aa:90:d4:6d:e5: 1c:0a:c2:f7:1e:28:f1:45:d9:10:92:3e:13:18:e6:68:1b:73: dc:1b:f8:24:a7:f6:92:cc:e6:66:ef:b8:5e:57:8b:63:e5:95: 82:14:82:e6:dc:47:97:c0:99:cd:8e:c9:67:6c:ed:35:e3:65: 3f:15:53:6a:5f:57:0b:3c:05:34:ba:f3:26:e0:40:db:07:06: 62:2f:06:37:06:5c:58:6a:84:ba:59:58:d7:22:a9:59:5e:b0: fd:7c:96:e7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOurMZo+5pOOzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTlkODA5YzYtYTVhMC00YjZhLTk5NWUtODQxYjA0ZDM3OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofwj0wHwnmkLqL0Y72PD6K2FYodzhvux78cu Ioi3eYzpmxfYtDbxeS4x9mfH+TzxAsMiOSxxVLtwmNS9M0tN+eqCzklKKJULTpkW D3ZsA5oCSEwy04RqPX+dvLlQMUWSS17/kIWyDYYWyptEpg5EM5u8Ny3S821Tshnk lGs9pLwrZEkr1sYxdjf7fwVCcFqxgUfRXc3cRp5z4IeAvsjkcnIEPKz5hJ8i6Y6d ralm9VLDGp4f9/uNBSJ7B3N/Fm5YCBBIFeSIOuLNc2EMBanakvwLWz8S1gk9G05E QfKlF8ue0mssAeT1pAM/8Dad09UJgp+9zCULABzalzQ9zr/8pQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPISWoVt53akJYEjLf4bXznknfHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODljMDA5N2MtYmE1My0z ZWRhLWI4ZjQtODMyNTNjNTBmNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnP9WHkWDbZpgVdBOAzT5fQ+phH5snFLM4rV8z BWyDo021rsm8sl2nmS/480mf1qGUwiWFlwSpIVVM6NMYpspMXlW6tjDsvXgsM2Kd AqwIpXhmgBrG0EVdHXCWTFlta7Y7eqsRWbky/BPN7+egla9w/7PJXdxAqdeWHWrq StBGMpdVJS3yP1wdssA9JcaWfV7Cn8doUXQ80Rc2BprRqpDUbeUcCsL3HijxRdkQ kj4TGOZoG3PcG/gkp/aSzOZm77heV4tj5ZWCFILm3EeXwJnNjslnbO0142U/FVNq X1cLPAU0uvMm4EDbBwZiLwY3BlxYaoS6WVjXIqlZXrD9fJbn -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:44 2025 by rpki-client