$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33d6d3d-845e-301e-bc81-04b0b410152c.roa File: e33d6d3d-845e-301e-bc81-04b0b410152c.roa (raw, json) Hash identifier: l5sA5uhP0fk7abo8As1YO7e2Um/XjwM+DM1++M7SdKs= Subject key identifier: FE:C0:82:F0:F5:81:4F:39:4F:2D:C0:2C:48:36:50:30:54:23:4D:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EC2DD8E364347138B880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33d6d3d-845e-301e-bc81-04b0b410152c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396826 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ec:2d:d8:e3:64:34:71:38:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=70d7afba-90c9-47d3-9fbc-2978d0fb99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:48:c5:ad:62:ac:81:46:f5:29:9e:76:d8: 5a:9f:8a:e3:43:c0:2c:1c:0f:ee:fa:fe:32:32:35: 3c:c8:8a:a7:6e:52:bb:c3:08:aa:a7:04:78:df:aa: c3:11:dd:4c:7f:f9:37:43:f0:d0:15:ec:07:3e:b8: 05:33:2f:c3:5c:50:3f:03:82:68:22:3a:7c:3c:90: 5b:bb:8c:10:0a:35:66:8c:b3:ac:f9:3c:fa:a4:40: 81:90:ce:05:cf:33:02:92:12:e3:56:e7:2a:82:f5: ff:0b:30:3e:64:e7:dd:68:c5:94:d8:5d:47:28:cd: 59:8d:68:b8:23:aa:5c:23:2a:da:65:da:3e:f1:03: e0:b2:ff:09:6c:0c:f3:38:a0:dd:cc:32:c2:48:d5: 66:bb:d9:14:ba:70:e7:55:87:7f:e7:f9:c4:34:a7: d9:a3:6a:0f:b1:15:84:3c:a6:fb:2b:90:e0:90:6e: e2:1d:5c:3b:a4:be:4c:dc:8b:dd:f0:39:d1:7f:3a: 27:76:c7:0c:0f:ff:22:4e:25:45:aa:e7:27:42:9b: 0f:07:00:1e:16:ea:93:ce:b1:f7:17:a7:90:70:de: 95:06:9d:06:0a:96:02:26:9c:06:e9:46:c2:50:09: 49:f3:76:2b:e2:53:ea:96:74:84:88:5f:c9:3d:23: 7e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C0:82:F0:F5:81:4F:39:4F:2D:C0:2C:48:36:50:30:54:23:4D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33d6d3d-845e-301e-bc81-04b0b410152c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:04:23:cd:93:a6:a0:aa:43:c3:67:2c:19:d0:6e:e3:fd:06: 5c:20:05:17:e4:51:ed:52:c4:00:d5:3a:90:c4:14:65:e5:a4: 05:b8:10:c7:10:eb:8f:6c:88:18:55:5a:6b:5f:70:2e:36:0b: c4:40:98:ff:b2:34:fc:d0:d3:34:e4:43:0b:7f:2d:55:e2:4e: 8f:c8:c3:b7:66:a3:35:7e:a4:68:d8:b2:f1:88:87:74:0f:f9: 0c:ed:f6:47:2e:de:57:76:6b:7e:ed:a6:e4:c2:41:be:d9:4f: 2f:b6:a8:1b:69:d5:0a:1d:55:68:37:78:b3:8a:13:57:7e:4e: 04:38:f3:a6:a1:41:b7:f8:46:2f:9e:8d:a9:94:cb:38:fc:f5: a1:a9:78:90:85:69:0d:6e:52:6a:be:b3:9e:d3:2c:83:21:3e: f2:39:df:85:4a:00:7f:47:8a:07:59:14:53:9f:97:4e:c1:43: a7:15:67:e9:d9:ba:14:b2:a1:5a:65:1b:3e:4c:00:03:71:bd: c6:49:0f:d7:fa:41:29:70:dc:12:fb:a3:52:d1:6b:11:85:30: bd:4a:69:3c:56:26:b2:97:eb:d9:e6:06:c9:73:c0:a2:3c:66: cd:69:2d:58:61:20:af:03:9b:3f:4e:26:c7:bd:ae:77:d2:4d: 97:9e:06:93 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOwt2ONkNHE4uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NzBkN2FmYmEtOTBjOS00N2QzLTlmYmMtMjk3OGQwZmI5OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz1Ixa1irIFG9Smedthan4rjQ8AsHA/u+v4y MjU8yIqnblK7wwiqpwR436rDEd1Mf/k3Q/DQFewHPrgFMy/DXFA/A4JoIjp8PJBb u4wQCjVmjLOs+Tz6pECBkM4FzzMCkhLjVucqgvX/CzA+ZOfdaMWU2F1HKM1ZjWi4 I6pcIyraZdo+8QPgsv8JbAzzOKDdzDLCSNVmu9kUunDnVYd/5/nENKfZo2oPsRWE PKb7K5DgkG7iHVw7pL5M3Ivd8DnRfzondscMD/8iTiVFqucnQpsPBwAeFuqTzrH3 F6eQcN6VBp0GCpYCJpwG6UbCUAlJ83Yr4lPqlnSEiF/JPSN+/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP7AgvD1gU85Ty3ALEg2UDBUI01RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTMzZDZkM2QtODQ1ZS0z MDFlLWJjODEtMDRiMGI0MTAxNTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCCBCPNk6agqkPDZywZ0G7j/QZcIAUX5FHtUsQA 1TqQxBRl5aQFuBDHEOuPbIgYVVprX3AuNgvEQJj/sjT80NM05EMLfy1V4k6PyMO3 ZqM1fqRo2LLxiId0D/kM7fZHLt5Xdmt+7abkwkG+2U8vtqgbadUKHVVoN3izihNX fk4EOPOmoUG3+EYvno2plMs4/PWhqXiQhWkNblJqvrOe0yyDIT7yOd+FSgB/R4oH WRRTn5dOwUOnFWfp2boUsqFaZRs+TAADcb3GSQ/X+kEpcNwS+6NS0WsRhTC9Smk8 Viayl+vZ5gbJc8CiPGbNaS1YYSCvA5s/TibHva530k2XngaT -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:40 2025 by rpki-client