$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/652542c3-1d40-3378-83f0-fa3486bbad43.roa File: 652542c3-1d40-3378-83f0-fa3486bbad43.roa (raw, json) Hash identifier: 4/PgS3mfxApOME3x2h7clEQGZk6KYmsm3CTE+mNMgms= Subject key identifier: 2D:FA:C2:76:43:01:EC:9B:ED:81:DC:73:6C:A6:8E:5C:FD:B2:6E:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366927E66C327ECC472780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/652542c3-1d40-3378-83f0-fa3486bbad43.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396617 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:69:27:e6:6c:32:7e:cc:47:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=4777635f-297e-4fbd-8f4d-7e1e8026d80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:1d:12:69:46:28:59:ee:fd:ba:69:3f:d6: b6:f0:75:ae:1c:ed:b1:73:0d:4c:7b:8d:5e:c2:8e: 7c:7f:bf:54:cf:1d:e4:e2:ce:d6:af:4c:5f:a1:14: 8b:41:e6:25:3f:f0:2f:a7:a0:b6:a7:6c:0f:9b:41: 5e:93:20:67:83:06:e7:f0:87:3f:b8:78:91:84:d0: 63:97:63:0b:21:e3:73:9f:90:8b:c3:13:db:a8:09: e1:0d:68:3e:b4:bd:3e:87:59:b9:a0:97:3c:80:fb: 62:8f:37:49:95:2f:51:39:22:7c:41:42:e9:75:02: 5e:a5:b5:f5:d8:25:25:cd:9e:6f:5b:67:e6:89:cd: 16:bd:bf:e9:a7:18:34:70:6d:c4:fb:56:d2:cb:6d: 5d:03:26:36:72:a3:8b:b2:af:bb:51:49:8d:d9:37: 95:bc:d1:83:8d:a9:a1:f8:2a:05:8e:ed:3b:ac:19: ca:4f:f7:44:aa:34:a9:cb:7a:25:25:b1:74:ca:4b: 9a:aa:28:e3:23:06:8c:b9:68:35:1b:e4:be:8f:44: d0:10:e1:e8:c4:d7:41:05:38:27:5e:ac:8f:86:51: b3:4d:25:df:50:b6:f6:48:72:bf:d2:f5:be:7e:58: ca:a1:f1:63:a7:32:63:b1:91:ef:9b:e8:2b:2f:2e: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FA:C2:76:43:01:EC:9B:ED:81:DC:73:6C:A6:8E:5C:FD:B2:6E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/652542c3-1d40-3378-83f0-fa3486bbad43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:96:82:6c:b4:e4:f8:90:fb:aa:10:07:30:54:4b:3f:3b:51: 12:62:df:d6:c4:09:2f:92:16:9d:6d:9e:d7:44:18:ed:c0:97: 5c:f4:7c:34:67:a1:66:cc:f5:4f:65:0d:03:d8:e4:e8:12:bf: 51:e7:d4:75:05:56:0b:7e:28:e8:b0:35:72:79:50:ea:58:c3: 40:c2:ba:5d:cd:52:fa:ad:2c:26:ae:c9:a4:07:cd:f8:3a:8a: e7:c0:df:46:ea:c5:11:53:85:d9:20:85:fa:3d:cf:74:6d:d5: 02:44:3a:c9:d9:06:40:17:05:1c:19:af:d9:bd:fa:27:89:ab: e8:b4:a5:c4:09:eb:f9:03:4e:6e:3f:a0:ff:ed:24:1f:66:59: 2e:33:b1:b7:db:93:da:a7:e2:bd:f6:7b:81:0e:82:c1:28:b9: af:1b:10:98:11:e5:95:ff:70:20:96:66:54:13:2c:1f:41:20: 36:07:64:57:dc:2c:7c:33:e4:78:16:31:01:e9:d2:e6:03:57: 8f:92:b4:5d:12:92:26:d6:41:1a:50:45:84:8b:f3:ad:75:b8: b2:91:33:8b:aa:49:88:d3:a8:ff:90:e0:19:59:c8:c0:cc:0b: e7:ed:e3:95:5d:59:c6:fb:10:9e:5c:6c:7a:38:d2:16:fb:0f: 6f:6f:08:3a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmkn5mwyfsxHJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NDc3NzYzNWYtMjk3ZS00ZmJkLThmNGQtN2UxZTgwMjZkODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5wdEmlGKFnu/bppP9a28HWuHO2xcw1Me41e wo58f79Uzx3k4s7Wr0xfoRSLQeYlP/Avp6C2p2wPm0FekyBngwbn8Ic/uHiRhNBj l2MLIeNzn5CLwxPbqAnhDWg+tL0+h1m5oJc8gPtijzdJlS9ROSJ8QULpdQJepbX1 2CUlzZ5vW2fmic0Wvb/ppxg0cG3E+1bSy21dAyY2cqOLsq+7UUmN2TeVvNGDjamh +CoFju07rBnKT/dEqjSpy3olJbF0ykuaqijjIwaMuWg1G+S+j0TQEOHoxNdBBTgn XqyPhlGzTSXfULb2SHK/0vW+fljKofFjpzJjsZHvm+grLy4LjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC36wnZDAeyb7YHcc2ymjlz9sm5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjUyNTQyYzMtMWQ0MC0z Mzc4LTgzZjAtZmEzNDg2YmJhZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQACloJstOT4kPuqEAcwVEs/O1ESYt/WxAkvkhad bZ7XRBjtwJdc9Hw0Z6FmzPVPZQ0D2OToEr9R59R1BVYLfijosDVyeVDqWMNAwrpd zVL6rSwmrsmkB834OornwN9G6sURU4XZIIX6Pc90bdUCRDrJ2QZAFwUcGa/Zvfon iavotKXECev5A05uP6D/7SQfZlkuM7G325Pap+K99nuBDoLBKLmvGxCYEeWV/3Ag lmZUEywfQSA2B2RX3Cx8M+R4FjEB6dLmA1ePkrRdEpIm1kEaUEWEi/OtdbiykTOL qkmI06j/kOAZWcjAzAvn7eOVXVnG+xCeXGx6ONIW+w9vbwg6 -----END CERTIFICATE-----Generated at Sat Aug 23 13:26:21 2025 by rpki-client