$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa File: affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa (raw, json) Hash identifier: VGw2yHZw07uVLZA7ZXFttKVicV8iOxTEslIWvidvPsU= Subject key identifier: 61:CE:FD:A0:85:3F:67:3E:1E:4D:66:84:4E:5C:A2:93:40:6C:84:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E9E82DFAB36D139F8B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397211 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e9:e8:2d:fa:b3:6d:13:9f:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=cf8c436a-0d00-4288-939f-709d86dc0c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:d8:d9:5d:0c:43:f9:91:f8:c9:ec:55:71: 00:dd:c9:48:21:5f:17:5c:f4:0d:34:83:96:fa:1a: 4b:8d:14:35:28:66:01:c3:62:13:82:c5:54:08:92: bb:f0:db:99:44:d4:9b:f0:69:f4:1b:41:9b:8d:0d: d3:95:1d:09:d1:16:a2:df:e8:76:c1:82:db:ea:a6: 95:a9:49:0c:4f:5f:09:5e:65:37:4d:4d:76:6d:b6: 27:f9:2e:09:84:c1:1e:5e:0c:f7:a3:44:ad:19:27: 22:58:bf:d2:8d:a2:95:88:dd:fa:98:7a:dd:55:83: 7a:13:a0:1c:60:5e:64:da:29:4d:2c:8f:af:20:33: 23:71:c2:37:6b:39:23:41:4e:55:39:b7:d8:2f:a5: f5:c6:27:da:bc:34:99:d0:b8:cd:2c:31:92:9e:87: d6:bc:33:05:d4:3c:35:c6:c6:df:15:e9:4e:2b:14: 4a:3b:4b:13:8a:85:4d:0d:7f:f1:69:0d:a7:24:6c: 51:12:57:8e:54:e3:e1:b7:96:3d:d6:a3:ca:0a:45: 69:ae:c2:4a:1a:26:3d:8b:53:16:d3:07:3f:5a:33: d0:15:b3:af:d8:1e:c5:05:07:06:69:24:ab:d4:cd: e9:97:36:ca:27:4c:fd:13:ab:88:6b:1d:e0:b8:bc: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:FD:A0:85:3F:67:3E:1E:4D:66:84:4E:5C:A2:93:40:6C:84:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c7:fb:e7:9b:e5:52:f9:f7:ba:3c:58:f1:a4:1b:0e:d4:f9: b2:e6:33:9e:8a:08:79:75:38:0a:f6:55:08:78:e2:7e:6b:68: b8:1b:55:b8:78:76:8a:f3:2f:47:4c:58:55:2d:ad:aa:b7:a9: bb:9e:f9:d0:b2:b2:e8:be:8e:1b:38:73:78:8e:02:41:1d:a9: 35:bb:76:d3:97:88:93:53:2d:03:64:61:96:0a:74:a6:99:92: ae:f2:a5:bd:8b:c1:4b:f3:3f:65:be:b8:a6:67:95:27:44:14: 13:db:10:41:ea:e4:f1:f7:61:28:55:55:72:b3:79:61:7f:ff: d5:55:0f:36:ef:ac:f7:63:48:54:9b:dd:6a:1b:21:14:98:cb: 4c:e5:e9:f8:fa:dc:b7:fc:f1:df:f5:60:da:d4:b6:f0:28:f1: fe:38:b3:ac:e4:cb:50:c3:03:78:8d:bb:1e:05:12:3d:f0:72: 4b:14:6f:75:ea:2b:97:94:b8:92:9f:4d:c6:32:19:06:5e:28: 8f:d2:2b:a8:2d:28:63:67:b2:73:f3:b5:14:b7:bc:0c:03:f0: da:9a:9a:a5:8e:4e:ff:92:20:c5:51:90:4a:fb:3d:3c:ec:cd: 50:74:48:d2:6a:e7:83:23:c0:e3:0b:5c:af:ac:e0:61:03:45: 53:5f:53:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOnoLfqzbROfi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Y2Y4YzQzNmEtMGQwMC00Mjg4LTkzOWYtNzA5ZDg2ZGMwYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3Y2V0MQ/mR+MnsVXEA3clIIV8XXPQNNIOW +hpLjRQ1KGYBw2ITgsVUCJK78NuZRNSb8Gn0G0GbjQ3TlR0J0Rai3+h2wYLb6qaV qUkMT18JXmU3TU12bbYn+S4JhMEeXgz3o0StGSciWL/SjaKViN36mHrdVYN6E6Ac YF5k2ilNLI+vIDMjccI3azkjQU5VObfYL6X1xifavDSZ0LjNLDGSnofWvDMF1Dw1 xsbfFelOKxRKO0sTioVNDX/xaQ2nJGxREleOVOPht5Y91qPKCkVprsJKGiY9i1MW 0wc/WjPQFbOv2B7FBQcGaSSr1M3plzbKJ0z9E6uIax3guLzzHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGHO/aCFP2c+Hk1mhE5copNAbIRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmYmMxM2YtMzZhNi0z OGYxLWI1Y2MtMDljMGIwNGI5YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKx/vnm+VS+fe6PFjxpBsO1Pmy5jOeigh5dTgK 9lUIeOJ+a2i4G1W4eHaK8y9HTFhVLa2qt6m7nvnQsrLovo4bOHN4jgJBHak1u3bT l4iTUy0DZGGWCnSmmZKu8qW9i8FL8z9lvrimZ5UnRBQT2xBB6uTx92EoVVVys3lh f//VVQ8276z3Y0hUm91qGyEUmMtM5en4+ty3/PHf9WDa1LbwKPH+OLOs5MtQwwN4 jbseBRI98HJLFG916iuXlLiSn03GMhkGXiiP0iuoLShjZ7Jz87UUt7wMA/Dampql jk7/kiDFUZBK+z087M1QdEjSaueDI8DjC1yvrOBhA0VTX1Nz -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:46 2025 by rpki-client