$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa File: c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa (raw, json) Hash identifier: pw3mMZoVsvDcjyCvhIlDpAqCoJuR107TEg5ypBh1B0A= Subject key identifier: 59:BF:B4:60:75:53:B0:45:3A:03:B0:EF:E6:AC:86:F9:05:25:F0:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E20FB4F9367A2AC8B080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397202 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e2:0f:b4:f9:36:7a:2a:c8:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=203b2c4f-bfc6-4f0d-a3be-47a6ebdf7285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:1e:ed:a9:c2:e6:3b:32:84:25:5a:cc:01: 58:41:60:a9:76:d4:c7:4c:1f:92:f2:87:ee:fa:a0: 9f:4c:93:55:53:97:68:02:4d:90:af:36:ca:af:39: aa:15:87:44:09:bd:2f:28:47:b5:b6:5b:73:ca:32: 7d:fa:40:a8:c9:32:86:bb:d0:1c:55:e2:26:5b:d5: 30:f6:30:03:e6:11:ac:a8:23:78:e8:58:87:2b:8b: f3:9a:bb:7f:4a:e0:a1:c2:c6:33:86:b3:c5:d3:ce: 5f:4d:ba:7e:16:4f:c6:84:e0:1a:02:03:aa:32:ae: 38:69:de:d3:74:21:22:c0:62:83:7e:b0:93:19:55: aa:38:97:40:ab:19:49:89:20:4b:11:32:a9:55:e9: 6e:e2:2d:d7:96:63:08:e8:89:d4:f5:39:4f:66:87: 2f:59:84:3c:58:c0:6a:e8:1a:a3:94:1c:14:72:66: fb:86:38:c0:1f:40:d6:4b:38:5f:e8:f4:67:3c:a3: 97:6c:97:b0:00:42:c2:5f:ba:58:23:1e:5f:84:49: c1:06:70:79:e3:0d:a0:c5:66:33:c7:0c:99:95:fc: 9d:8d:90:2e:a0:8e:ec:2f:f0:d1:67:9c:7a:ea:12: 75:1f:3e:16:02:e2:7d:3e:a3:da:4a:e4:fd:51:43: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BF:B4:60:75:53:B0:45:3A:03:B0:EF:E6:AC:86:F9:05:25:F0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c17fd7e8-ef5d-324b-bd64-db6f49e3f30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:aa:b0:92:42:b7:d2:6a:6d:98:37:e6:52:7d:21:d9:d1:8d: 4e:c1:b3:e8:ce:25:5b:10:ba:a1:2f:aa:70:30:e5:c6:71:af: a4:39:dc:5c:68:5a:dc:97:73:b5:34:8c:2e:66:78:8a:66:68: 56:aa:03:e6:c4:1c:af:49:7e:f5:4e:ca:8e:03:59:ce:ab:c4: f9:69:97:56:d2:6c:16:84:15:8a:6a:17:e2:94:4d:3d:48:32: be:32:5f:9f:07:81:a2:a0:8c:5c:07:0f:83:c1:2e:c7:58:45: 12:80:30:25:6e:38:7a:8c:0c:66:2d:a5:e6:6e:a7:e4:e8:aa: 84:40:d0:82:4d:95:9c:a5:04:32:27:4a:40:25:ea:30:47:3b: e4:e3:c1:a9:89:c6:a6:44:19:c4:cb:2c:eb:f2:5a:56:c0:1d: ab:b9:8d:41:6c:52:cb:28:10:89:2c:2b:ec:1f:78:bc:76:46: c6:55:e9:30:42:27:5c:2f:53:a8:03:6a:e2:81:a2:7c:29:3e: f5:b5:c9:0f:4b:6f:f1:b3:13:1f:9a:68:42:a9:4e:0e:ce:57: d5:a2:c2:77:59:4d:ac:48:c9:38:2e:79:61:74:48:7d:8e:04: d7:0c:b1:58:2a:39:40:0b:fe:55:01:46:34:2b:43:9a:8c:c7: 7d:30:de:7a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOIPtPk2eirIsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjAzYjJjNGYtYmZjNi00ZjBkLWEzYmUtNDdhNmViZGY3Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIMe7anC5jsyhCVazAFYQWCpdtTHTB+S8ofu +qCfTJNVU5doAk2QrzbKrzmqFYdECb0vKEe1tltzyjJ9+kCoyTKGu9AcVeImW9Uw 9jAD5hGsqCN46FiHK4vzmrt/SuChwsYzhrPF085fTbp+Fk/GhOAaAgOqMq44ad7T dCEiwGKDfrCTGVWqOJdAqxlJiSBLETKpVelu4i3XlmMI6InU9TlPZocvWYQ8WMBq 6BqjlBwUcmb7hjjAH0DWSzhf6PRnPKOXbJewAELCX7pYIx5fhEnBBnB54w2gxWYz xwyZlfydjZAuoI7sL/DRZ5x66hJ1Hz4WAuJ9PqPaSuT9UUOtiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFm/tGB1U7BFOgOw7+ashvkFJfA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzE3ZmQ3ZTgtZWY1ZC0z MjRiLWJkNjQtZGI2ZjQ5ZTNmMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDqrCSQrfSam2YN+ZSfSHZ0Y1OwbPoziVbELqh L6pwMOXGca+kOdxcaFrcl3O1NIwuZniKZmhWqgPmxByvSX71TsqOA1nOq8T5aZdW 0mwWhBWKahfilE09SDK+Ml+fB4GioIxcBw+DwS7HWEUSgDAlbjh6jAxmLaXmbqfk 6KqEQNCCTZWcpQQyJ0pAJeowRzvk48GpicamRBnEyyzr8lpWwB2ruY1BbFLLKBCJ LCvsH3i8dkbGVekwQidcL1OoA2rigaJ8KT71tckPS2/xsxMfmmhCqU4OzlfVosJ3 WU2sSMk4LnlhdEh9jgTXDLFYKjlAC/5VAUY0K0OajMd9MN56 -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:53 2025 by rpki-client