$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa File: 475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa (raw, json) Hash identifier: R3Srsee0KmslDtWXHtzqqicvy19GvAXZQPlzstzmUf4= Subject key identifier: D7:BF:5A:CF:D1:A8:70:A9:33:86:70:57:F9:E9:E9:49:14:F6:FA:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366BCD858AEA781F023380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396612 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6b:cd:85:8a:ea:78:1f:02:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=d2715766-dccd-4793-b8b9-6d7282272b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:69:84:4e:42:02:c2:08:53:46:d7:64:ac: f5:f9:9e:3e:73:4a:a4:2a:2c:3b:77:98:9f:d7:69: 21:a9:2f:ba:7c:cc:a4:06:58:f3:23:ba:51:91:a1: 8a:35:7a:18:1a:07:fd:f8:a3:49:74:63:e2:06:15: 18:96:f7:68:34:f8:d9:ea:6d:32:7c:35:92:27:7b: 9e:68:03:81:b4:33:74:43:25:df:37:48:2e:5c:f3: 37:6d:c5:52:1c:20:15:8a:9a:13:ea:2f:3d:dc:48: 97:b5:80:59:d6:cf:7e:af:03:2d:99:31:30:e4:51: d8:73:24:62:3d:3d:8e:c4:f0:1b:32:cb:a6:78:f6: c3:e3:83:cf:d0:1c:d3:9a:d0:58:a6:0b:62:81:7a: b5:91:a4:6d:29:de:95:54:ad:76:87:35:41:28:60: fa:dc:5c:2c:4e:34:9a:6e:f9:b0:ec:4c:50:04:73: ae:83:dd:95:09:aa:7b:75:5d:b1:4e:27:01:17:f0: f1:71:a2:47:45:b2:b1:de:fe:35:8d:8d:6e:2d:3a: c0:65:48:d6:b2:ce:55:eb:2c:c3:c7:b1:be:9a:da: a0:eb:d3:be:ef:74:73:ec:e9:7e:3b:71:9f:c0:a8: 59:e6:32:e5:b4:d6:43:45:1e:f9:05:9e:aa:48:38: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:5A:CF:D1:A8:70:A9:33:86:70:57:F9:E9:E9:49:14:F6:FA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/475650bf-7ba0-3fa9-bc01-ddca5df969bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:71:59:4c:0d:4e:82:35:f5:95:e2:be:3d:1d:70:39:99:f3: b2:08:42:6d:f9:14:e7:85:df:d9:16:3b:e8:f0:51:5f:bd:bb: d7:81:32:97:92:a1:90:8e:92:e3:d8:f2:22:31:81:c5:9d:e9: b1:33:80:0d:5e:09:df:b4:91:d1:83:8d:3a:6f:04:b5:5b:92: 1b:c0:74:07:a5:11:0b:3e:05:6c:ec:4f:02:b5:4c:76:7e:7c: ff:2c:be:5b:75:c0:16:df:28:b8:fc:48:61:f9:44:65:2a:ea: b8:6b:5a:73:d9:d8:12:ef:94:de:68:f7:32:63:a1:67:68:a0: ba:1d:d2:d5:4d:e9:a8:79:4c:e2:8e:e5:75:f3:8d:77:cc:bf: 2d:0b:15:8c:46:22:51:61:82:2c:a7:ad:90:ba:ef:93:c5:fd: 41:99:e1:36:ed:58:65:dd:df:4c:aa:98:61:95:97:ee:5a:59: 56:fb:71:92:1c:da:bb:95:5c:a9:0d:ca:31:2a:c7:05:f3:e3: a8:29:a4:77:06:78:17:d9:54:0a:76:0b:7a:e6:cd:31:c9:03: 88:df:49:e9:c9:9a:62:c7:54:60:9d:06:a3:3e:26:e5:32:7f: 14:59:14:db:07:12:ff:50:4b:eb:f9:b2:72:5a:ad:30:6a:8a: 36:ad:81:40 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmvNhYrqeB8CM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDI3MTU3NjYtZGNjZC00NzkzLWI4YjktNmQ3MjgyMjcyYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnatphE5CAsIIU0bXZKz1+Z4+c0qkKiw7d5if 12khqS+6fMykBljzI7pRkaGKNXoYGgf9+KNJdGPiBhUYlvdoNPjZ6m0yfDWSJ3ue aAOBtDN0QyXfN0guXPM3bcVSHCAVipoT6i893EiXtYBZ1s9+rwMtmTEw5FHYcyRi PT2OxPAbMsumePbD44PP0BzTmtBYpgtigXq1kaRtKd6VVK12hzVBKGD63FwsTjSa bvmw7ExQBHOug92VCap7dV2xTicBF/DxcaJHRbKx3v41jY1uLTrAZUjWss5V6yzD x7G+mtqg69O+73Rz7Ol+O3GfwKhZ5jLltNZDRR75BZ6qSDiDOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNe/Ws/RqHCpM4ZwV/np6UkU9vpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc1NjUwYmYtN2JhMC0z ZmE5LWJjMDEtZGRjYTVkZjk2OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAscVlMDU6CNfWV4r49HXA5mfOyCEJt+RTnhd/Z Fjvo8FFfvbvXgTKXkqGQjpLj2PIiMYHFnemxM4ANXgnftJHRg406bwS1W5IbwHQH pRELPgVs7E8CtUx2fnz/LL5bdcAW3yi4/Ehh+URlKuq4a1pz2dgS75TeaPcyY6Fn aKC6HdLVTemoeUzijuV18413zL8tCxWMRiJRYYIsp62Quu+Txf1BmeE27Vhl3d9M qphhlZfuWllW+3GSHNq7lVypDcoxKscF8+OoKaR3BngX2VQKdgt65s0xyQOI30np yZpix1RgnQajPiblMn8UWRTbBxL/UEvr+bJyWq0waoo2rYFA -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:01 2025 by rpki-client