$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaed9d8-1419-31cf-bebe-0a85f88d9887.roa File: fbaed9d8-1419-31cf-bebe-0a85f88d9887.roa (raw, json) Hash identifier: X1JKZDLrfBzYQcJIMKzyFg05vV1pa2GcONeSTpwnBPc= Subject key identifier: A4:1C:7B:88:36:81:1C:2E:89:7E:40:EF:88:DC:09:B5:FD:59:15:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EAD8DB3790D3E2837F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaed9d8-1419-31cf-bebe-0a85f88d9887.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396565 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ea:d8:db:37:90:d3:e2:83:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=db75533e-21bf-4e77-9756-b5185f46148c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:17:57:78:5d:62:d8:b7:4f:14:20:b6:92: 4a:d6:ec:72:45:01:b1:83:7c:24:b8:2b:de:50:fa: 1a:2e:73:ef:96:e7:a4:9c:07:50:f6:6e:24:09:3d: 9f:f9:21:5b:66:05:6a:9c:60:c9:cd:49:84:3a:9c: 78:a4:bb:69:8c:cc:11:71:1c:40:25:30:73:76:66: e0:8f:eb:86:99:7c:e4:5d:ee:cf:1a:1b:62:14:4b: 0e:4c:41:ab:7a:42:1b:ed:41:39:e0:a6:40:4d:d4: e6:22:48:a7:eb:62:68:6e:a1:2a:9f:81:61:4f:b1: 0d:9f:42:c2:0e:f5:08:ef:ac:17:d6:8c:db:27:a7: a1:a3:89:40:6a:26:d4:06:34:e6:e4:39:1d:8c:43: e1:a6:e6:1c:a6:e0:a3:d3:70:56:34:0b:6d:55:37: 9e:bb:74:04:ac:b4:1f:0d:aa:20:64:cf:3e:e8:38: 58:8b:60:f1:44:b9:8d:20:ce:72:ac:91:bb:10:e5: a0:21:5f:a5:6f:52:32:34:30:2b:e0:39:84:c2:31: 0e:a0:f0:7d:48:79:87:2d:81:f3:ab:78:ee:a3:df: 2e:99:90:fd:5d:f0:7e:53:0b:df:34:7c:0a:12:50: a1:ce:e3:0a:f5:89:08:73:f3:b7:73:df:27:a7:59: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1C:7B:88:36:81:1C:2E:89:7E:40:EF:88:DC:09:B5:FD:59:15:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaed9d8-1419-31cf-bebe-0a85f88d9887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:88:19:d4:86:f2:2e:8f:fd:38:22:fa:28:2e:21:38:cf:65: be:f3:13:b6:52:c6:e2:88:9b:ad:eb:3b:57:b7:31:3b:25:c8: aa:d1:fb:14:27:48:aa:44:80:c6:d0:5a:28:d9:47:d1:82:46: de:d6:df:c6:02:0c:eb:73:de:ee:a4:bf:4a:b9:34:ac:be:72: c6:90:8a:34:22:15:40:4b:2e:dd:47:65:31:f5:de:ba:5f:4b: 9b:52:54:0c:26:06:23:dd:95:fe:2d:ed:5b:63:f3:b3:0e:dc: c8:06:04:c1:9c:66:bd:3f:f0:e3:36:a2:64:c9:ea:b1:65:87: 82:34:b7:01:2a:05:79:6a:b8:89:a9:55:c8:37:92:88:cb:05: 55:70:11:dc:cb:6e:c9:51:f5:58:87:cb:de:9f:bc:6e:a3:54: 00:9c:25:fb:73:b9:cd:a2:14:56:0e:93:d4:f1:e7:b4:d9:c5: 09:2f:b7:a0:69:a2:dd:ff:6f:f4:fe:8e:e0:b8:b8:21:e4:64: d3:80:47:53:f8:9f:c0:cf:18:d8:95:88:87:dc:40:a4:5b:cf: 69:fd:eb:bd:d4:d4:0d:23:7d:17:17:f6:ab:e4:44:ed:85:c6: 43:54:55:f1:d5:89:22:1d:33:d6:e6:74:9e:2d:5d:57:a9:52: ca:c5:35:70 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOrY2zeQ0+KDf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZGI3NTUzM2UtMjFiZi00ZTc3LTk3NTYtYjUxODVmNDYxNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3UXV3hdYti3TxQgtpJK1uxyRQGxg3wkuCve UPoaLnPvlueknAdQ9m4kCT2f+SFbZgVqnGDJzUmEOpx4pLtpjMwRcRxAJTBzdmbg j+uGmXzkXe7PGhtiFEsOTEGrekIb7UE54KZATdTmIkin62JobqEqn4FhT7ENn0LC DvUI76wX1ozbJ6eho4lAaibUBjTm5DkdjEPhpuYcpuCj03BWNAttVTeeu3QErLQf DaogZM8+6DhYi2DxRLmNIM5yrJG7EOWgIV+lb1IyNDAr4DmEwjEOoPB9SHmHLYHz q3juo98umZD9XfB+UwvfNHwKElChzuMK9YkIc/O3c98np1l1oQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKQce4g2gRwuiX5A74jcCbX9WRWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJhZWQ5ZDgtMTQxOS0z MWNmLWJlYmUtMGE4NWY4OGQ5ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCBiBnUhvIuj/04IvooLiE4z2W+8xO2UsbiiJut 6ztXtzE7Jciq0fsUJ0iqRIDG0Foo2UfRgkbe1t/GAgzrc97upL9KuTSsvnLGkIo0 IhVASy7dR2Ux9d66X0ubUlQMJgYj3ZX+Le1bY/OzDtzIBgTBnGa9P/DjNqJkyeqx ZYeCNLcBKgV5ariJqVXIN5KIywVVcBHcy27JUfVYh8ven7xuo1QAnCX7c7nNohRW DpPU8ee02cUJL7egaaLd/2/0/o7guLgh5GTTgEdT+J/AzxjYlYiH3ECkW89p/eu9 1NQNI30XF/ar5ETthcZDVFXx1YkiHTPW5nSeLV1XqVLKxTVw -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:31 2025 by rpki-client