$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa File: aaef397a-8d41-3de4-a846-0161071f4f81.roa (raw, json) Hash identifier: PzX+SDbTs+BYMSIMEyA6y2Bsp1LVwigqMm5wWn5txW4= Subject key identifier: 22:DE:20:24:60:D5:6C:DE:A2:8C:DB:B1:E2:54:55:30:F5:18:EE:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E1AAD8931FB3A05CF180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397195 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e1:aa:d8:93:1f:b3:a0:5c:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=df508071-0e6c-4630-bcab-9b6d090f7296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:62:52:55:bb:88:cf:58:8d:8f:db:a2:6d: 90:b7:e3:e2:cf:bf:24:b1:7e:33:62:ad:1e:e6:10: 0a:3c:1b:eb:44:5a:ce:3c:bc:5b:0f:ba:9c:d3:38: b1:c8:73:b4:43:76:97:1e:dd:6a:cc:08:d6:a2:65: 3e:fb:ea:43:6b:7a:15:61:14:e1:0a:60:0d:24:81: 50:9e:cd:8d:1b:9a:09:07:b9:f6:13:1d:7d:d0:51: 9c:e0:0f:22:82:b4:8d:00:52:93:ab:72:9f:9c:89: 5f:b7:8d:ae:89:30:19:5b:21:fa:b3:da:e5:a9:df: fa:e0:45:f2:7e:0c:c6:b9:dc:cf:2d:20:3e:54:ee: ee:bf:74:56:10:bf:7a:ec:4f:84:62:22:28:10:c3: 47:f1:fa:63:71:0f:e2:d3:53:ec:bb:fc:34:c1:3b: 9f:33:ef:69:86:6e:a0:86:23:f4:80:13:52:e6:04: f8:d3:ac:4d:b3:0c:0e:a1:58:cd:c1:4b:03:7c:55: 3c:d1:3f:b1:8f:17:99:9e:17:5d:82:5c:b0:9e:ae: f2:52:25:b9:70:26:60:e8:c3:41:a8:c5:45:29:31: ce:3a:85:cd:1d:28:d6:45:cf:65:48:7d:1b:f6:19: a7:25:9c:fe:8b:80:01:1d:7a:48:d7:b6:f1:3f:6e: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DE:20:24:60:D5:6C:DE:A2:8C:DB:B1:E2:54:55:30:F5:18:EE:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5a:ab:ad:fa:3d:36:7f:2d:c9:b6:5b:a3:63:ca:94:e8:fd: 01:7d:61:0a:f1:bd:e8:71:be:81:1d:f4:d0:4e:0e:7f:11:3b: 80:40:90:be:48:ce:79:1a:cd:51:65:92:13:71:35:05:d2:23: b4:0b:23:93:0e:b2:48:86:88:7a:cb:06:47:cb:56:b4:4b:ee: ae:5b:2a:c3:9a:82:77:70:fd:f9:20:79:17:d3:f1:dd:c1:6c: 33:c2:eb:d7:c1:2e:98:1a:bf:d4:b1:e3:fe:88:ee:01:32:ce: a8:ed:b2:d8:4b:68:c9:2b:ba:4f:85:2d:73:0d:8c:25:0c:7b: e9:d1:82:2e:c1:ad:2e:84:86:83:71:a5:5c:6a:88:eb:58:c7: 6a:c0:05:26:8e:61:10:1a:a1:35:39:7b:8a:28:9b:e6:d7:4f: bb:0d:ed:3d:49:6a:96:64:d8:a5:82:69:c0:48:60:a3:ff:20: 7e:9c:44:80:16:80:9c:dd:66:de:b7:be:d4:16:b4:ca:32:7f: c1:97:8c:d5:9b:8e:b3:42:dd:a9:c1:e8:27:18:5f:a3:da:60: 18:97:0b:1d:3b:bb:d5:8a:9e:b5:b0:35:fc:58:5f:97:92:c9: bf:37:d6:95:90:28:85:76:32:19:10:33:97:59:17:d8:2d:d6: ac:be:d6:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOGq2JMfs6Bc8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZGY1MDgwNzEtMGU2Yy00NjMwLWJjYWItOWI2ZDA5MGY3Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkliUlW7iM9YjY/bom2Qt+Piz78ksX4zYq0e 5hAKPBvrRFrOPLxbD7qc0zixyHO0Q3aXHt1qzAjWomU+++pDa3oVYRThCmANJIFQ ns2NG5oJB7n2Ex190FGc4A8igrSNAFKTq3KfnIlft42uiTAZWyH6s9rlqd/64EXy fgzGudzPLSA+VO7uv3RWEL967E+EYiIoEMNH8fpjcQ/i01Psu/w0wTufM+9phm6g hiP0gBNS5gT406xNswwOoVjNwUsDfFU80T+xjxeZnhddglywnq7yUiW5cCZg6MNB qMVFKTHOOoXNHSjWRc9lSH0b9hmnJZz+i4ABHXpI17bxP25DKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCLeICRg1WzeoozbseJUVTD1GO4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFlZjM5N2EtOGQ0MS0z ZGU0LWE4NDYtMDE2MTA3MWY0ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPWqut+j02fy3JtlujY8qU6P0BfWEK8b3ocb6B HfTQTg5/ETuAQJC+SM55Gs1RZZITcTUF0iO0CyOTDrJIhoh6ywZHy1a0S+6uWyrD moJ3cP35IHkX0/HdwWwzwuvXwS6YGr/UseP+iO4BMs6o7bLYS2jJK7pPhS1zDYwl DHvp0YIuwa0uhIaDcaVcaojrWMdqwAUmjmEQGqE1OXuKKJvm10+7De09SWqWZNil gmnASGCj/yB+nESAFoCc3Wbet77UFrTKMn/Bl4zVm46zQt2pwegnGF+j2mAYlwsd O7vVip61sDX8WF+Xksm/N9aVkCiFdjIZEDOXWRfYLdasvtY5 -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:04 2025 by rpki-client