$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa File: d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa (raw, json) Hash identifier: I0/aP1/YlLGas7D0l1HjG51ixUJnD2D19dT0+rGAK7s= Subject key identifier: EE:B0:56:E2:43:D8:8B:9C:0C:E0:82:2C:C4:A9:FB:3A:E8:D7:FB:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E89A408FAF3C41751400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22547 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e8:9a:40:8f:af:3c:41:75:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=dd2f951c-b787-4f6a-8e1c-013fad7f82e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:b3:d4:fe:b9:be:72:b3:88:96:92:50:7a: ca:16:e8:c1:a3:c4:1b:a1:84:7a:b6:b8:6b:5b:f5: 2e:f5:79:cf:11:4b:a1:0d:eb:2b:66:69:6b:d4:c7: 4f:82:d7:c9:45:4e:93:43:d4:b9:5e:5e:01:8e:9f: 6f:b9:64:2f:72:24:94:58:e6:29:e8:90:26:77:40: f7:e1:45:ce:8d:6e:24:f8:6c:2b:6d:cd:f1:be:7a: 4d:e0:1c:0a:b3:ea:c5:13:33:a2:b2:05:93:df:b6: 2e:b1:8a:00:fb:19:ef:8a:e9:73:7b:b8:1f:a7:2c: 99:62:72:35:05:e2:7e:fa:af:8e:4a:9d:cf:2f:0a: 43:57:eb:e0:76:54:6a:e0:47:db:a8:f5:bf:68:41: 84:d2:e0:c9:9b:d1:15:cc:11:02:f2:c4:1a:1f:aa: 22:36:45:89:23:28:95:eb:30:f2:f5:c5:88:f2:15: 2b:ed:ec:14:d6:bd:d9:26:8b:c1:8d:d4:81:9f:96: 15:6a:da:4c:76:b9:74:60:02:82:bb:80:9e:31:68: 1a:8a:3a:92:84:ea:af:c5:6f:f8:cb:8d:60:f3:c8: 1d:31:5d:40:3e:d6:17:75:6d:a1:fa:c5:37:ca:aa: 88:51:8a:be:72:21:a3:61:09:3d:12:cc:9a:16:cf: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B0:56:E2:43:D8:8B:9C:0C:E0:82:2C:C4:A9:FB:3A:E8:D7:FB:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ac:b0:17:5e:28:0a:ec:16:41:83:e3:51:fa:17:a0:97:1d: 4a:e2:1e:5a:c4:52:8e:a0:91:3d:6d:20:a2:6c:e5:e3:69:1c: 90:60:58:f9:f7:a9:bd:01:05:a8:b3:af:e1:de:12:42:e3:b5: 92:7e:e5:95:da:96:95:af:35:1b:9e:2b:27:7e:b5:f5:5f:71: e2:49:c7:c5:03:87:9f:09:7b:df:eb:0d:1c:fa:67:9d:a0:b8: 21:51:07:e2:84:13:4f:c2:5d:12:fe:07:b4:8d:7c:42:20:49: c2:11:88:56:1d:5c:5a:84:6c:57:1e:ba:d9:45:3c:92:34:01: d9:f7:2d:a7:92:e0:1d:8f:8f:23:c4:23:32:05:bf:c7:79:8e: 7c:8d:c1:2b:02:39:30:1c:b5:a9:f3:8d:75:49:49:72:6b:a9: e6:37:72:2e:8c:7c:72:ac:c3:ad:a6:07:cb:ca:1c:61:44:1a: 49:82:14:86:85:f2:37:60:6a:1a:ce:b3:66:d7:00:29:4b:ff: a8:4c:32:57:5d:08:80:9c:74:07:8c:bb:d3:e1:b7:25:3e:c7: 47:b5:5f:33:03:ce:f4:02:d0:26:a5:43:17:eb:44:b6:39:b5: 6a:93:16:44:9e:8b:4e:95:4d:f9:97:17:6f:0f:cd:0a:55:b8: 10:b6:87:7f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOiaQI+vPEF1FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZGQyZjk1MWMtYjc4Ny00ZjZhLThlMWMtMDEzZmFkN2Y4MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ2z1P65vnKziJaSUHrKFujBo8QboYR6trhr W/Uu9XnPEUuhDesrZmlr1MdPgtfJRU6TQ9S5Xl4Bjp9vuWQvciSUWOYp6JAmd0D3 4UXOjW4k+Gwrbc3xvnpN4BwKs+rFEzOisgWT37YusYoA+xnviulze7gfpyyZYnI1 BeJ++q+OSp3PLwpDV+vgdlRq4EfbqPW/aEGE0uDJm9EVzBEC8sQaH6oiNkWJIyiV 6zDy9cWI8hUr7ewU1r3ZJovBjdSBn5YVatpMdrl0YAKCu4CeMWgaijqShOqvxW/4 y41g88gdMV1APtYXdW2h+sU3yqqIUYq+ciGjYQk9EsyaFs+HEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO6wVuJD2IucDOCCLMSp+zro1/vFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDlhMmYxMTYtMGMxMi0z MTRhLWI1ZjctY2VmMDNhOThkZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQArrLAXXigK7BZBg+NR+heglx1K4h5axFKOoJE9 bSCibOXjaRyQYFj596m9AQWos6/h3hJC47WSfuWV2paVrzUbnisnfrX1X3HiScfF A4efCXvf6w0c+medoLghUQfihBNPwl0S/ge0jXxCIEnCEYhWHVxahGxXHrrZRTyS NAHZ9y2nkuAdj48jxCMyBb/HeY58jcErAjkwHLWp8411SUlya6nmN3IujHxyrMOt pgfLyhxhRBpJghSGhfI3YGoazrNm1wApS/+oTDJXXQiAnHQHjLvT4bclPsdHtV8z A870AtAmpUMX60S2ObVqkxZEnotOlU35lxdvD80KVbgQtod/ -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:12 2025 by rpki-client