$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa File: aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa (raw, json) Hash identifier: 0MMQcFDEm5cj8sQgPWWbBFiQKz06Z1MAwnGsZU17TyM= Subject key identifier: C7:6C:42:2C:66:35:B5:E1:D9:A9:93:D9:59:AB:88:D8:7A:4C:03:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0ED3291686F8864B01F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396572 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ed:32:91:68:6f:88:64:b0:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8ae36514-bbe4-4a26-b5e9-7a2607996390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:ff:8d:a7:68:ec:b2:52:90:63:77:07:b3: 92:2b:2b:af:28:d5:30:96:1b:4e:82:79:0f:76:5d: aa:2c:fd:9c:30:f5:b3:6f:02:cf:cc:f6:ec:23:3f: d4:88:4d:95:66:f5:ab:c3:75:75:97:95:3b:c7:15: fd:ae:ad:e7:89:2a:ac:8f:b8:68:bb:36:01:f8:63: 7a:4a:f1:12:2e:d1:99:ef:72:e2:60:34:b5:74:41: 84:ff:21:93:c1:4b:9c:03:36:d6:08:7b:d3:fd:7f: cd:5c:45:2d:9b:70:c4:bb:ac:87:04:cb:7b:9f:9d: b8:f0:e3:87:15:4c:a7:f8:ed:e9:7b:85:65:a2:da: ef:2a:3e:1a:2a:82:90:64:89:ec:6f:65:9f:5a:2a: a6:04:14:c1:35:c5:97:53:bb:72:35:db:01:d7:6c: 83:af:23:85:36:b0:c7:a4:cb:5b:46:88:a7:fb:c8: 06:29:af:73:47:c4:0d:d7:ab:59:89:6b:cd:ef:d0: 97:13:14:52:04:2b:72:ed:b5:2a:06:7d:9d:f9:49: 62:a4:7f:14:b5:47:b9:9d:81:14:ba:19:5e:24:d0: 7c:01:e1:1e:ca:ed:9e:32:98:9e:5e:d5:78:5f:cf: d6:13:de:8d:38:6e:75:1c:25:96:03:4d:6e:e5:f6: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6C:42:2C:66:35:B5:E1:D9:A9:93:D9:59:AB:88:D8:7A:4C:03:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:14:7a:ff:05:f7:30:56:55:6e:95:02:1e:31:98:57:87:2f: 42:e7:00:23:4b:a3:b1:3c:3e:71:e5:b8:7b:f1:f8:ce:45:d6: a8:74:eb:42:8c:b5:7e:c1:5b:81:dc:65:bf:5b:b9:e2:8b:7a: a9:36:46:bd:10:60:02:b2:d6:c3:ea:c6:bc:ff:7d:11:57:f5: 93:9c:94:99:cf:89:56:0d:cf:1a:d8:ba:39:ea:a9:64:8e:7f: 82:d5:a6:63:0e:b7:94:0e:68:ec:56:77:b2:fc:de:5a:5c:9d: 66:95:82:0f:87:e8:73:87:47:b3:af:72:5b:b7:dc:43:37:c5: 7d:88:c4:e1:2b:73:c5:7f:fc:50:b8:7f:dc:05:0c:bb:88:35: c8:5f:a8:6f:0c:b0:7c:76:2e:de:68:3f:2e:67:7e:a4:76:18: 31:41:1a:e1:72:d8:2d:5b:9a:84:0a:60:ab:62:f4:74:45:fb: 65:c3:ee:90:0e:04:18:89:93:28:7b:5b:67:b0:78:a1:3a:fd: 37:d9:2e:b0:f8:eb:0a:40:2b:b7:fa:78:97:d6:c9:d0:3f:a6: 8e:c6:8e:ca:56:42:29:f5:57:f7:84:e6:bd:4a:8b:11:3f:1e: eb:9b:6e:88:f5:b5:99:68:6c:8c:5c:52:d1:1d:f2:6f:e6:cb: 59:54:9c:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoO0ykWhviGSwH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGFlMzY1MTQtYmJlNC00YTI2LWI1ZTktN2EyNjA3OTk2MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyP/jado7LJSkGN3B7OSKyuvKNUwlhtOgnkP dl2qLP2cMPWzbwLPzPbsIz/UiE2VZvWrw3V1l5U7xxX9rq3niSqsj7houzYB+GN6 SvESLtGZ73LiYDS1dEGE/yGTwUucAzbWCHvT/X/NXEUtm3DEu6yHBMt7n5248OOH FUyn+O3pe4VlotrvKj4aKoKQZInsb2WfWiqmBBTBNcWXU7tyNdsB12yDryOFNrDH pMtbRoin+8gGKa9zR8QN16tZiWvN79CXExRSBCty7bUqBn2d+UlipH8UtUe5nYEU uhleJNB8AeEeyu2eMpieXtV4X8/WE96NOG51HCWWA01u5fYEuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMdsQixmNbXh2amT2VmriNh6TAPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNjIzYWEtODVkMi0z YWMzLWEyYjctZDE1YmRkZjllOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCQFHr/BfcwVlVulQIeMZhXhy9C5wAjS6OxPD5x 5bh78fjORdaodOtCjLV+wVuB3GW/W7nii3qpNka9EGACstbD6sa8/30RV/WTnJSZ z4lWDc8a2Lo56qlkjn+C1aZjDreUDmjsVney/N5aXJ1mlYIPh+hzh0ezr3Jbt9xD N8V9iMThK3PFf/xQuH/cBQy7iDXIX6hvDLB8di7eaD8uZ36kdhgxQRrhctgtW5qE CmCrYvR0Rftlw+6QDgQYiZMoe1tnsHihOv032S6w+OsKQCu3+niX1snQP6aOxo7K VkIp9Vf3hOa9SosRPx7rm26I9bWZaGyMXFLRHfJv5stZVJwy -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:40 2025 by rpki-client