$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa File: ceaf848a-a95c-37a9-b202-2ac941822059.roa (raw, json) Hash identifier: 8jwOHNG1YZUt+ek+V0f+Bi3T866NhnR708wUHZOELRg= Subject key identifier: 73:FA:92:B4:C3:F4:3A:E5:68:0B:CC:9E:C8:61:B8:65:65:F2:0A:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E2D69D61B355E21B11E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397207 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e2:d6:9d:61:b3:55:e2:1b:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f29bd94c-1a44-402f-8ab2-f258d58cc7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:69:0c:c6:27:d5:88:bd:0b:b5:c2:60:94: 44:de:6d:b3:0c:04:00:ee:1f:ae:3e:d8:30:f6:93: 79:98:b3:41:95:9e:f8:85:d5:03:be:a8:71:63:6e: bd:84:e5:62:36:f5:5b:47:73:d2:89:50:d5:3e:80: fa:76:7f:09:10:38:86:ec:5b:9a:5f:05:4d:b9:8d: 3a:46:82:40:29:d8:cc:9d:33:d2:77:ee:d3:4a:91: 0b:c0:d9:96:eb:27:20:f5:46:98:b3:44:f1:9a:cd: 14:08:d7:38:f6:2c:34:c4:10:c2:a7:6e:0e:15:41: bd:db:10:31:5e:c4:50:bd:4d:cd:52:d6:a6:dc:b0: 24:c4:eb:d7:42:f2:61:45:a8:1f:40:2f:6e:ee:46: 9e:a8:4b:ac:c9:16:b3:02:d0:81:db:8e:b0:6f:12: 03:05:b1:50:ea:71:6e:c0:23:ba:0f:f7:e9:2d:f9: 56:8e:31:f3:23:81:01:25:46:39:02:03:54:b1:ba: 48:b3:37:dc:36:e4:1e:b0:1c:c3:2c:60:c9:b6:e4: 69:e5:10:1c:fe:e0:7a:2b:5b:61:46:d9:62:22:2e: c2:2b:44:f5:22:df:2f:ac:c3:cb:06:0a:54:cc:1c: d1:56:f2:d1:9c:66:3e:61:f0:c9:f1:9f:97:97:9e: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FA:92:B4:C3:F4:3A:E5:68:0B:CC:9E:C8:61:B8:65:65:F2:0A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:91:20:5e:4e:dc:5f:55:1b:66:33:8d:69:38:79:27:77:1c: 50:3b:43:bb:b1:ef:ca:83:a4:04:87:5e:0a:ec:62:30:66:7f: d4:09:50:c1:23:ab:8b:ac:4e:0d:5a:c4:9c:a5:dd:49:dc:93: 78:29:2e:92:6d:69:66:4e:23:24:3d:33:5f:8e:45:9e:fd:e6: d4:ff:f5:9e:06:c2:76:0e:18:8f:77:91:3b:47:01:31:8f:e5: 3f:1f:3a:08:f2:0b:9f:2e:38:7d:4d:aa:0e:f2:b3:ee:85:80: 27:67:9a:34:ed:9f:c0:4a:bc:cf:cb:da:31:d6:15:85:7f:4a: 31:95:aa:8e:b1:aa:00:28:13:c4:af:bb:d9:bc:bf:5b:a7:e9: 18:db:94:19:27:d1:b3:f5:89:ef:fc:45:52:d7:a6:1a:05:c8: 6e:2e:6a:76:93:57:40:43:ca:5f:71:2a:41:fe:46:69:5f:c0: 84:6e:65:79:b8:96:a0:25:42:34:91:81:44:dc:8b:e0:15:c1: c4:7b:f2:be:61:11:30:ef:09:74:3f:f5:99:03:76:3a:a2:40: 20:33:f4:d0:70:00:71:18:28:1a:7e:51:51:da:5b:97:3e:cc: 21:f6:9a:75:1f:6f:f7:8a:ca:8c:89:e5:80:8d:91:a3:39:39: 64:c5:e9:7f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOLWnWGzVeIbEeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjI5YmQ5NGMtMWE0NC00MDJmLThhYjItZjI1OGQ1OGNjN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPdpDMYn1Yi9C7XCYJRE3m2zDAQA7h+uPtgw 9pN5mLNBlZ74hdUDvqhxY269hOViNvVbR3PSiVDVPoD6dn8JEDiG7FuaXwVNuY06 RoJAKdjMnTPSd+7TSpELwNmW6ycg9UaYs0Txms0UCNc49iw0xBDCp24OFUG92xAx XsRQvU3NUtam3LAkxOvXQvJhRagfQC9u7kaeqEusyRazAtCB246wbxIDBbFQ6nFu wCO6D/fpLflWjjHzI4EBJUY5AgNUsbpIszfcNuQesBzDLGDJtuRp5RAc/uB6K1th RtliIi7CK0T1It8vrMPLBgpUzBzRVvLRnGY+YfDJ8Z+Xl55dVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHP6krTD9DrlaAvMnshhuGVl8gr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhZjg0OGEtYTk1Yy0z N2E5LWIyMDItMmFjOTQxODIyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFkSBeTtxfVRtmM41pOHkndxxQO0O7se/Kg6QE h14K7GIwZn/UCVDBI6uLrE4NWsScpd1J3JN4KS6SbWlmTiMkPTNfjkWe/ebU//We BsJ2DhiPd5E7RwExj+U/HzoI8gufLjh9TaoO8rPuhYAnZ5o07Z/ASrzPy9ox1hWF f0oxlaqOsaoAKBPEr7vZvL9bp+kY25QZJ9Gz9Ynv/EVS16YaBchuLmp2k1dAQ8pf cSpB/kZpX8CEbmV5uJagJUI0kYFE3IvgFcHEe/K+YREw7wl0P/WZA3Y6okAgM/TQ cABxGCgaflFR2luXPswh9pp1H2/3isqMieWAjZGjOTlkxel/ -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:48 2025 by rpki-client