$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa File: a24d1f9b-3211-3955-9582-5d075204bab5.roa (raw, json) Hash identifier: UktW4Ji9/baWl+BUP5id9Kgsg1ay1irYLjOp+ZeeqMQ= Subject key identifier: CC:2B:83:98:77:9A:06:A4:F6:0E:04:31:ED:A0:08:1A:31:A4:FF:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0ED62D1C1031C7F344BE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 36630 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ed:62:d1:c1:03:1c:7f:34:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e880e3fa-0e17-4e29-bb3e-9e9d29871f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:3c:92:3d:b6:c2:39:d4:9b:2c:6e:3e:85: 6f:6d:f3:78:13:d3:85:5e:7c:1b:ae:0f:65:8d:b9: 17:91:ab:79:86:e7:4c:39:a8:32:39:f7:80:84:6d: d9:a9:66:56:33:09:f6:b1:a3:37:d5:72:06:7f:54: a0:be:6b:ff:cb:59:76:6b:61:4c:c2:3b:47:e0:d2: 44:ac:01:63:d1:95:6e:09:c0:5d:0f:f1:d2:6f:00: 9b:04:ab:29:e4:0d:9d:00:be:c0:15:5e:86:8b:60: cf:3f:a9:1b:e7:79:ed:39:db:17:64:fc:07:cb:fb: 73:fb:3b:d9:75:dd:f4:2e:5a:55:d5:52:ac:71:a9: fd:21:2c:b8:65:6c:0a:bc:83:d9:c1:b2:b6:f5:d4: db:37:05:0f:fa:14:35:01:4d:06:c8:c4:4f:64:08: fa:64:a3:7f:50:db:68:31:8f:36:18:16:48:a8:1c: 1b:48:ad:92:f6:16:4d:c0:c2:94:1a:d7:0e:63:16: 29:08:df:32:2b:45:ea:73:4a:8a:7b:dc:e7:25:b0: 03:10:e1:b9:93:ac:30:3a:0d:cf:61:e3:36:7d:85: 49:99:29:42:30:1c:6e:1e:4e:bf:91:84:37:35:70: 14:4e:75:e2:07:25:5e:38:61:43:c6:21:3c:98:13: ab:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:83:98:77:9A:06:A4:F6:0E:04:31:ED:A0:08:1A:31:A4:FF:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1a:d9:43:ea:72:06:15:b5:19:2d:32:bd:f7:cb:d8:02:78: 4e:c6:2b:af:84:9c:d1:3b:74:3b:8d:66:b5:91:79:fc:75:ca: 5c:0d:5a:7c:fb:09:7e:2b:0f:ca:cf:da:c6:af:62:41:2f:58: 17:eb:d6:03:74:ca:a8:82:4e:ea:b9:96:26:28:bf:84:39:c1: d8:64:a3:8f:f9:9e:f8:4a:89:01:63:47:1c:1a:e9:5e:81:8e: cc:b1:c1:f7:cd:1a:f2:88:1e:58:6b:04:85:00:ac:0e:53:c8: 11:4f:d2:b2:36:a2:6f:05:80:c7:08:f0:c3:cd:05:5c:60:4d: 14:dd:63:0f:72:70:a4:d4:b8:da:3d:f2:75:e6:1c:c9:6c:d3: b8:52:4b:7a:58:f5:f8:e3:99:28:10:d6:54:b8:1e:88:5d:25: 54:40:9a:90:d3:04:69:87:23:e4:10:e7:f7:a8:88:aa:92:e9: 89:ce:ca:64:59:6a:8b:1c:73:d6:82:78:db:6d:86:15:b6:15: 13:36:e7:37:7f:9e:44:51:a0:73:4a:89:1b:03:9a:64:f8:c3: 4f:30:62:44:bd:aa:fb:34:1c:6e:74:cc:e5:30:c4:1f:6e:7c: 1f:40:b1:c2:66:2e:eb:12:8b:a3:99:f1:7c:42:34:cd:c7:d1: da:1c:f4:c3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoO1i0cEDHH80S+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTg4MGUzZmEtMGUxNy00ZTI5LWJiM2UtOWU5ZDI5ODcxZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZw8kj22wjnUmyxuPoVvbfN4E9OFXnwbrg9l jbkXkat5hudMOagyOfeAhG3ZqWZWMwn2saM31XIGf1Sgvmv/y1l2a2FMwjtH4NJE rAFj0ZVuCcBdD/HSbwCbBKsp5A2dAL7AFV6Gi2DPP6kb53ntOdsXZPwHy/tz+zvZ dd30LlpV1VKscan9ISy4ZWwKvIPZwbK29dTbNwUP+hQ1AU0GyMRPZAj6ZKN/UNto MY82GBZIqBwbSK2S9hZNwMKUGtcOYxYpCN8yK0Xqc0qKe9znJbADEOG5k6wwOg3P YeM2fYVJmSlCMBxuHk6/kYQ3NXAUTnXiByVeOGFDxiE8mBOrawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMwrg5h3mgak9g4EMe2gCBoxpP/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI0ZDFmOWItMzIxMS0z OTU1LTk1ODItNWQwNzUyMDRiYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAzGtlD6nIGFbUZLTK998vYAnhOxiuvhJzRO3Q7 jWa1kXn8dcpcDVp8+wl+Kw/Kz9rGr2JBL1gX69YDdMqogk7quZYmKL+EOcHYZKOP +Z74SokBY0ccGulegY7MscH3zRryiB5YawSFAKwOU8gRT9KyNqJvBYDHCPDDzQVc YE0U3WMPcnCk1LjaPfJ15hzJbNO4Ukt6WPX445koENZUuB6IXSVUQJqQ0wRphyPk EOf3qIiqkumJzspkWWqLHHPWgnjbbYYVthUTNuc3f55EUaBzSokbA5pk+MNPMGJE var7NBxudMzlMMQfbnwfQLHCZi7rEoujmfF8QjTNx9HaHPTD -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:21 2025 by rpki-client