$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa File: caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa (raw, json) Hash identifier: J4I6LYHwneFDH4P53rVDV4t+gfIC52acOBkffdxf3Xs= Subject key identifier: 0F:D5:F1:1B:FA:B6:87:15:96:79:40:EE:88:7B:10:31:10:2E:60:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E11D5F4340718AFB9D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396605 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e1:1d:5f:43:40:71:8a:fb:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0ca5404a-d473-4866-8db0-e346260e649f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:93:4b:a2:11:5e:cf:ea:09:75:b7:be:b5: 19:20:75:45:40:02:c2:20:6d:97:09:40:66:3a:44: a8:bd:43:57:0d:81:a0:d4:05:42:88:3f:c6:38:f7: 36:7a:62:99:f4:e8:26:1d:f1:95:00:ab:17:e0:45: 63:2d:7b:bf:4b:9a:d7:4c:79:bf:39:5e:52:c1:70: 4d:5f:8c:2d:e3:18:c7:59:53:1b:1a:63:15:c6:da: 77:14:10:63:6f:67:06:27:ce:8a:d3:54:68:b6:29: 86:f7:e2:e1:3d:b9:28:48:17:20:68:e0:ac:fb:35: cc:a1:55:f8:02:d1:4c:14:99:19:c0:24:f8:52:7c: 0d:f0:43:97:a3:71:90:17:ea:4e:fc:15:86:72:29: 91:6b:96:85:2e:5b:e3:30:4d:ea:cd:a3:50:37:a0: 55:87:b9:f8:e4:5f:31:42:d6:0c:6e:15:42:d2:fe: 7b:a0:14:4a:eb:6a:71:a3:7a:63:3d:88:72:91:bb: fc:6b:b4:e6:39:f5:b7:af:13:20:52:59:0c:9f:bd: 86:80:af:46:6b:b6:0b:df:4a:d2:07:da:6a:0d:ff: 48:35:e4:6b:bb:a9:66:ae:c7:b2:25:09:48:a9:d5: af:8f:31:3a:f7:e1:6a:aa:f7:3b:e0:22:4f:6d:c0: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D5:F1:1B:FA:B6:87:15:96:79:40:EE:88:7B:10:31:10:2E:60:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6d:c7:92:36:94:e0:d2:87:33:1e:14:0c:6c:e7:04:98:8b: 3c:e1:cc:36:5c:e1:7c:e9:30:7b:0f:ed:ac:9b:1c:30:c0:fb: 13:2a:ca:2b:06:57:ed:60:fd:7d:e0:64:ca:4c:f0:43:da:d3: 73:67:25:a6:64:3c:ab:33:aa:7b:33:ef:99:8b:89:d5:30:1b: 75:8b:37:7f:7b:67:60:2b:52:6a:43:1c:a4:94:75:a6:4a:80: 1a:83:08:c1:c3:53:a9:3c:58:40:11:a5:b4:b8:5b:4f:ba:e8: 33:59:4c:ee:10:b1:90:d2:7d:60:7e:f1:55:f2:56:6e:3d:19: 80:2f:46:42:28:cc:20:22:f2:50:8f:c2:c8:66:76:46:96:98: 12:b8:52:f5:b9:96:f5:a9:e9:ba:b8:c4:0c:17:04:fb:c7:b5: a1:0d:6c:e4:32:4a:89:21:95:aa:73:b4:a3:50:de:02:39:3e: 93:61:c3:13:a9:68:ff:71:62:12:86:c2:5f:b4:6a:2a:8b:af: 79:aa:88:d6:40:d2:57:41:a4:5f:fd:f0:29:5b:c5:a8:87:4c: 6b:47:57:a5:ea:28:2c:8a:f1:e6:5d:6e:9a:52:fa:92:f0:a4: 85:d7:09:13:6d:92:a5:b9:ff:4e:65:fe:e0:bc:ba:6e:97:a9: f1:0d:1b:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOEdX0NAcYr7nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MGNhNTQwNGEtZDQ3My00ODY2LThkYjAtZTM0NjI2MGU2NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH6TS6IRXs/qCXW3vrUZIHVFQALCIG2XCUBm OkSovUNXDYGg1AVCiD/GOPc2emKZ9OgmHfGVAKsX4EVjLXu/S5rXTHm/OV5SwXBN X4wt4xjHWVMbGmMVxtp3FBBjb2cGJ86K01RotimG9+LhPbkoSBcgaOCs+zXMoVX4 AtFMFJkZwCT4UnwN8EOXo3GQF+pO/BWGcimRa5aFLlvjME3qzaNQN6BVh7n45F8x QtYMbhVC0v57oBRK62pxo3pjPYhykbv8a7TmOfW3rxMgUlkMn72GgK9Ga7YL30rS B9pqDf9INeRru6lmrseyJQlIqdWvjzE69+Fqqvc74CJPbcCLSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA/V8Rv6tocVlnlA7oh7EDEQLmAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FhMGEwZDAtMWVhNy0z NWE1LTk1ZDQtMDk4MWE5ZGUzNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANbceSNpTg0oczHhQMbOcEmIs84cw2XOF86TB7 D+2smxwwwPsTKsorBlftYP194GTKTPBD2tNzZyWmZDyrM6p7M++Zi4nVMBt1izd/ e2dgK1JqQxyklHWmSoAagwjBw1OpPFhAEaW0uFtPuugzWUzuELGQ0n1gfvFV8lZu PRmAL0ZCKMwgIvJQj8LIZnZGlpgSuFL1uZb1qem6uMQMFwT7x7WhDWzkMkqJIZWq c7SjUN4COT6TYcMTqWj/cWIShsJftGoqi695qojWQNJXQaRf/fApW8Woh0xrR1el 6igsivHmXW6aUvqS8KSF1wkTbZKluf9OZf7gvLpul6nxDRsh -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:27 2025 by rpki-client