$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e7a4540e-b304-354f-9a8c-d0816130686f.roa File: e7a4540e-b304-354f-9a8c-d0816130686f.roa (raw, json) Hash identifier: OR+oYnI/kWqL7wbwEiwYLFszFzE0b2Hb0Ja3f26+/nM= Subject key identifier: 81:37:84:3C:E6:68:A3:6D:1F:3C:F2:3D:4B:D9:14:4A:CC:66:A9:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E9742618B5707A349680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e7a4540e-b304-354f-9a8c-d0816130686f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 211369 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e9:74:26:18:b5:70:7a:34:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=23dc9959-7e54-4477-9c4d-1a3d9c5cf435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:d4:e1:50:9b:b0:ab:7b:f9:0b:90:98:70: b1:20:e9:0b:3a:04:b8:98:58:8f:de:71:9a:71:8b: 59:c4:ab:ab:2c:54:e0:45:19:37:84:d1:f9:f8:30: ec:58:75:48:87:ba:4b:60:1d:bc:ed:41:bd:f9:e1: 51:8b:b9:10:c7:cf:48:71:7f:2f:e2:a7:1f:9a:5a: 8e:b5:4a:af:bf:d5:61:a9:67:18:23:16:b0:97:77: 95:dd:b1:92:aa:bd:0e:90:2a:e0:95:7b:66:96:30: 7b:b3:8c:3f:46:1e:80:b1:4a:79:e4:ab:b9:d5:19: 99:01:31:15:e2:af:1a:46:03:4e:24:67:11:86:17: 3e:58:16:cb:bf:c3:06:c1:7e:57:10:73:1f:f0:4c: 83:f9:7f:31:cf:50:fd:7f:48:56:d5:9d:31:b2:ba: c8:85:0e:d5:38:5b:e5:18:b2:e3:bb:4b:58:4b:36: ef:a4:2d:5b:74:d5:83:62:bf:9b:77:73:9e:58:84: f3:78:7e:7c:5a:4e:cd:0d:de:25:aa:88:22:6b:2f: aa:e1:a1:6f:89:2e:78:63:75:a9:99:55:da:08:e1: 4e:42:dc:33:77:34:50:c4:22:2e:5a:44:b2:b3:9c: eb:bc:16:f5:3b:cb:2c:cf:dc:ed:85:3e:5b:80:20: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:37:84:3C:E6:68:A3:6D:1F:3C:F2:3D:4B:D9:14:4A:CC:66:A9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e7a4540e-b304-354f-9a8c-d0816130686f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8a:da:60:53:6e:cf:cf:ba:29:d8:4d:61:2b:f4:9c:4f:0c: 8a:09:bd:a9:71:bc:0b:3d:04:b6:90:52:fb:49:ec:1f:40:32: d8:dd:59:75:2b:63:b2:c0:7e:02:8a:b3:53:c0:08:07:d3:dd: e1:6a:88:5d:32:23:4b:48:11:ac:af:da:cf:da:dc:ca:37:32: 7d:d3:63:59:15:e5:97:52:33:01:3a:86:3c:10:03:30:a9:45: db:50:d2:77:8b:16:82:a9:d0:f6:5e:de:03:16:7a:e5:5b:01: 8e:da:7b:95:4c:af:0f:36:47:11:e4:29:30:97:84:5a:a4:1b: e5:bd:7f:36:4d:fa:b3:3c:91:4b:23:f5:8d:13:98:88:7b:cf: a9:d2:0c:d9:3c:11:b3:75:fa:70:40:d2:7c:ca:6d:c1:f4:89: b7:a8:40:9a:d3:02:52:c3:96:a2:ad:12:73:1f:f4:7f:59:58: 28:9f:c1:a9:81:9b:5c:b2:45:e7:08:55:eb:f4:ee:f8:30:b1: 81:c9:53:cb:ea:dc:8e:61:5b:89:e4:ba:ff:5f:da:3c:6c:c6: 74:bd:00:3f:7f:49:b8:e9:87:e5:7b:82:74:b5:1e:53:fa:61: c1:2d:42:b1:b9:de:b1:b8:a4:07:a8:85:14:15:18:60:2c:e9: 34:aa:90:1b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOl0Jhi1cHo0loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjNkYzk5NTktN2U1NC00NDc3LTljNGQtMWEzZDljNWNmNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVXU4VCbsKt7+QuQmHCxIOkLOgS4mFiP3nGa cYtZxKurLFTgRRk3hNH5+DDsWHVIh7pLYB287UG9+eFRi7kQx89IcX8v4qcfmlqO tUqvv9VhqWcYIxawl3eV3bGSqr0OkCrglXtmljB7s4w/Rh6AsUp55Ku51RmZATEV 4q8aRgNOJGcRhhc+WBbLv8MGwX5XEHMf8EyD+X8xz1D9f0hW1Z0xsrrIhQ7VOFvl GLLju0tYSzbvpC1bdNWDYr+bd3OeWITzeH58Wk7NDd4lqogiay+q4aFviS54Y3Wp mVXaCOFOQtwzdzRQxCIuWkSys5zrvBb1O8ssz9zthT5bgCAGnwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIE3hDzmaKNtHzzyPUvZFErMZqmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTdhNDU0MGUtYjMwNC0z NTRmLTlhOGMtZDA4MTYxMzA2ODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAEitpgU27Pz7op2E1hK/ScTwyKCb2pcbwLPQS2 kFL7SewfQDLY3Vl1K2OywH4CirNTwAgH093haohdMiNLSBGsr9rP2tzKNzJ902NZ FeWXUjMBOoY8EAMwqUXbUNJ3ixaCqdD2Xt4DFnrlWwGO2nuVTK8PNkcR5Ckwl4Ra pBvlvX82TfqzPJFLI/WNE5iIe8+p0gzZPBGzdfpwQNJ8ym3B9Im3qECa0wJSw5ai rRJzH/R/WVgon8GpgZtcskXnCFXr9O74MLGByVPL6tyOYVuJ5Lr/X9o8bMZ0vQA/ f0m46Yfle4J0tR5T+mHBLUKxud6xuKQHqIUUFRhgLOk0qpAb -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:56 2025 by rpki-client