$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa File: fd2672cb-ea7b-3db3-8538-a969394a19b4.roa (raw, json) Hash identifier: +voJdVBCZ81rwkrRm3/Ko2+QjhgQ6qO0IAysJoE9P/M= Subject key identifier: 53:24:5C:A5:26:A9:BA:37:35:6D:6C:50:4D:8C:B2:A0:77:E7:57:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E8DCE69A724DB1896DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 211369 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e8:dc:e6:9a:72:4d:b1:89:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=462097d5-c29c-46ff-9319-236e98b07c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fd:fb:91:d4:27:38:d0:35:bf:68:2f:82:a7: 89:a9:62:57:61:76:94:57:40:9d:50:d0:cf:08:ab: f0:d9:62:f1:29:67:ac:d5:f9:d0:e8:8f:3e:30:02: ed:e6:9a:f6:3c:47:ee:ea:9f:a8:52:e3:d9:56:73: d7:54:51:58:a9:56:cd:3a:01:8a:f5:18:72:75:75: d1:2b:28:90:ed:ed:c3:7b:0b:03:b0:14:52:b9:93: d8:0e:74:6f:d0:cf:f8:60:e8:ec:2c:54:17:80:75: ac:c7:0b:59:8c:08:55:4a:9d:65:95:07:44:45:c0: 33:85:54:29:b6:4b:64:f3:95:ac:2a:44:e2:0c:ab: 04:e1:b6:de:f6:92:3a:17:e7:c3:10:13:b1:b9:4a: 7a:67:94:eb:2b:b0:64:b3:d0:26:d4:77:0d:2e:a1: 0d:fc:ad:3d:45:37:44:30:b8:54:8b:a9:56:23:95: bd:92:59:1a:c6:99:0a:50:27:81:44:38:43:be:74: 13:08:e9:7e:b6:67:75:dc:5e:ee:1e:21:1b:d8:eb: 85:cd:e3:79:e7:c4:69:4b:9e:d1:1d:a4:8b:88:88: 85:43:15:af:27:87:f8:e4:22:d3:56:71:45:1a:c2: 51:8e:59:6a:1b:47:97:71:17:4e:41:f3:9e:47:b1: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:24:5C:A5:26:A9:BA:37:35:6D:6C:50:4D:8C:B2:A0:77:E7:57:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:72:d1:a9:b9:c9:0f:b7:db:50:6e:1f:78:9c:98:6d:66:9c: 0c:45:48:00:34:93:b0:dc:ca:3e:d0:c0:ce:74:1e:f8:e5:85: ee:a4:2e:36:7d:36:41:55:ae:81:cf:13:5b:33:75:50:61:f1: bc:99:1f:f6:6c:72:f4:ad:93:21:69:12:f7:b3:89:0d:41:d0: 84:bb:02:71:e5:49:6a:82:75:fd:6d:1e:06:89:ed:47:64:35: 8c:45:cb:19:9d:9f:98:94:33:22:b4:b8:67:ec:60:7b:18:c4: f1:6d:a1:2b:87:ec:3b:af:13:99:d4:0f:70:8f:cd:5e:27:a6: 1f:22:5c:e5:7d:2b:59:16:ec:e4:69:0b:0b:b1:ba:37:3f:11: 89:41:e1:d3:a3:51:72:4b:a4:23:c1:d6:21:40:a7:13:0d:26: 1c:77:1d:29:06:23:33:2e:df:f6:02:04:b8:d6:39:3a:fa:37: 9d:39:4e:84:d2:34:b4:5c:ac:c6:87:7c:8c:69:c3:48:05:3b: 93:16:e5:06:2c:a8:da:a0:49:d3:d8:1b:7f:09:71:4b:cd:98: 6e:c1:b8:49:c1:78:43:f3:56:a5:af:e0:f3:30:67:cb:05:6d: b3:03:a6:c6:fc:2a:ce:aa:4d:1a:87:61:c5:53:db:97:79:49: 18:fc:e9:ea -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOjc5ppyTbGJbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDYyMDk3ZDUtYzI5Yy00NmZmLTkzMTktMjM2ZTk4YjA3YzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f37kdQnONA1v2gvgqeJqWJXYXaUV0CdUNDP CKvw2WLxKWes1fnQ6I8+MALt5pr2PEfu6p+oUuPZVnPXVFFYqVbNOgGK9RhydXXR KyiQ7e3DewsDsBRSuZPYDnRv0M/4YOjsLFQXgHWsxwtZjAhVSp1llQdERcAzhVQp tktk85WsKkTiDKsE4bbe9pI6F+fDEBOxuUp6Z5TrK7Bks9Am1HcNLqEN/K09RTdE MLhUi6lWI5W9klkaxpkKUCeBRDhDvnQTCOl+tmd13F7uHiEb2OuFzeN558RpS57R HaSLiIiFQxWvJ4f45CLTVnFFGsJRjllqG0eXcRdOQfOeR7HIgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFMkXKUmqbo3NW1sUE2MsqB351dBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQyNjcyY2ItZWE3Yi0z ZGIzLTg1MzgtYTk2OTM5NGExOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAZctGpuckPt9tQbh94nJhtZpwMRUgANJOw3Mo+ 0MDOdB745YXupC42fTZBVa6BzxNbM3VQYfG8mR/2bHL0rZMhaRL3s4kNQdCEuwJx 5UlqgnX9bR4Gie1HZDWMRcsZnZ+YlDMitLhn7GB7GMTxbaErh+w7rxOZ1A9wj81e J6YfIlzlfStZFuzkaQsLsbo3PxGJQeHTo1FyS6QjwdYhQKcTDSYcdx0pBiMzLt/2 AgS41jk6+jedOU6E0jS0XKzGh3yMacNIBTuTFuUGLKjaoEnT2Bt/CXFLzZhuwbhJ wXhD81alr+DzMGfLBW2zA6bG/CrOqk0ah2HFU9uXeUkY/Onq -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:17 2025 by rpki-client