$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa File: da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa (raw, json) Hash identifier: ayMNE0ZtgF6kGaJPKOjOnCb6WAAjCrDyPIvz1VRuy/U= Subject key identifier: 8D:2C:65:42:99:44:A4:0D:0E:D4:27:76:D8:39:4B:E9:69:FF:CA:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E056EDB078428AFC0180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396603 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e0:56:ed:b0:78:42:8a:fc:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=adc4d1f1-d789-49f4-8bae-43a28d37f41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:18:83:f3:c6:93:8d:65:1d:16:e7:8a:03: 0f:d5:4b:45:4c:d4:74:7d:2c:2a:01:8f:3c:bd:21: 94:69:3b:a0:33:0b:2c:61:93:55:47:1c:fb:9f:29: 67:2b:cb:08:44:7d:47:b8:4f:91:f4:bd:ba:8a:5d: 93:bf:13:a5:c6:53:47:d3:59:2e:d3:03:88:3f:49: 96:8b:98:5c:16:00:a4:f6:27:74:06:8e:5b:11:f4: 76:08:35:f7:aa:ae:73:77:5f:55:48:46:36:46:44: 73:be:96:6e:41:b6:d5:8a:1d:04:26:e9:57:f9:99: e1:e4:4f:a7:72:4a:36:66:a7:d3:af:cf:d6:f6:e1: e5:f0:fb:ab:24:65:40:a9:bd:1a:f3:36:b2:d2:f4: c5:c5:8b:a9:c1:24:20:e5:39:f2:1a:d3:e6:05:ef: e5:04:be:dc:42:df:5d:4a:88:cf:51:98:b0:d3:21: f1:15:0d:3f:ba:0f:3c:38:d4:56:73:b5:8f:e5:0f: 17:7f:52:42:85:20:fb:88:b1:e2:e8:55:40:75:52: 02:a5:25:3a:2d:93:56:be:7e:f0:4d:e9:ee:09:14: ce:db:0b:4f:70:28:d2:64:79:ef:62:c3:09:53:82: 40:82:41:60:d9:aa:43:28:d8:7b:00:9e:8c:2b:91: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2C:65:42:99:44:A4:0D:0E:D4:27:76:D8:39:4B:E9:69:FF:CA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a0:3e:75:9a:87:a6:73:db:bb:7f:ed:b4:a1:4a:23:16:88: eb:9e:40:a6:46:60:91:1c:c8:64:11:82:dd:43:8b:5e:ee:30: fe:fd:17:ef:94:ba:84:78:ec:e3:89:6d:3d:db:8d:1a:9f:b8: 6c:41:76:50:5c:19:2b:98:08:3d:86:32:c6:05:cc:11:82:3f: 24:bf:1a:41:53:d3:bf:0a:55:45:b6:31:54:db:21:7d:70:db: 63:54:68:23:ef:70:4e:c1:cd:f5:4b:fe:68:3b:00:5c:c4:2c: d2:89:33:82:89:01:0b:66:44:bb:fa:f4:62:50:65:14:d5:d9: f3:d5:ae:37:f8:10:53:98:e9:06:a7:74:87:25:d3:2c:62:b9: 9f:ce:b8:3c:db:df:77:c7:cf:44:e4:3e:0e:50:b1:b8:15:79: d6:01:2f:10:17:0a:88:ce:39:4d:42:5a:1e:a2:cf:9b:33:09: fe:13:e4:3a:34:b8:21:7b:7a:91:ba:1e:45:94:b0:8f:6a:0c: 8c:8f:c5:08:b4:01:32:6a:b5:20:1c:c4:62:ec:03:ac:7e:65: 44:a8:24:91:d2:a8:eb:56:6f:8a:42:c0:57:b8:74:61:80:0c: a9:53:0b:78:ee:75:70:a2:c8:f1:0e:97:e7:d2:86:f8:7f:5b: 48:5a:50:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOBW7bB4Qor8AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YWRjNGQxZjEtZDc4OS00OWY0LThiYWUtNDNhMjhkMzdmNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ8Yg/PGk41lHRbnigMP1UtFTNR0fSwqAY88 vSGUaTugMwssYZNVRxz7nylnK8sIRH1HuE+R9L26il2TvxOlxlNH01ku0wOIP0mW i5hcFgCk9id0Bo5bEfR2CDX3qq5zd19VSEY2RkRzvpZuQbbVih0EJulX+Znh5E+n cko2ZqfTr8/W9uHl8PurJGVAqb0a8zay0vTFxYupwSQg5TnyGtPmBe/lBL7cQt9d SojPUZiw0yHxFQ0/ug88ONRWc7WP5Q8Xf1JChSD7iLHi6FVAdVICpSU6LZNWvn7w TenuCRTO2wtPcCjSZHnvYsMJU4JAgkFg2apDKNh7AJ6MK5FgKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI0sZUKZRKQNDtQndtg5S+lp/8oTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGEwOGZhZjQtZTdhOS0z ZGZlLWI0ZDktMzMxZjMyM2Y3NmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB9oD51moemc9u7f+20oUojFojrnkCmRmCRHMhk EYLdQ4te7jD+/RfvlLqEeOzjiW09240an7hsQXZQXBkrmAg9hjLGBcwRgj8kvxpB U9O/ClVFtjFU2yF9cNtjVGgj73BOwc31S/5oOwBcxCzSiTOCiQELZkS7+vRiUGUU 1dnz1a43+BBTmOkGp3SHJdMsYrmfzrg82993x89E5D4OULG4FXnWAS8QFwqIzjlN Qloeos+bMwn+E+Q6NLghe3qRuh5FlLCPagyMj8UItAEyarUgHMRi7AOsfmVEqCSR 0qjrVm+KQsBXuHRhgAypUwt47nVwosjxDpfn0ob4f1tIWlCO -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:43 2025 by rpki-client