$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa File: 6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa (raw, json) Hash identifier: mu+ac9KlfI1KrQEc0PJD5ee7zw6sBKqrfTvQbrspqUc= Subject key identifier: 77:DA:07:DC:F0:B4:EC:63:9F:6B:1F:8F:85:A0:45:6F:88:EE:3C:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366C50B07F5D72A5800580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 20172 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6c:50:b0:7f:5d:72:a5:80:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=ad6dfe14-97ec-40de-b2f2-43265eba1ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:2b:e8:44:45:0d:93:e1:7e:ab:bc:0a:b1: a8:ce:61:64:49:b3:71:14:14:fb:4d:14:e9:70:8d: e3:48:5d:50:9a:53:4e:28:0d:66:df:b2:ad:78:f0: 54:dc:37:c1:af:c0:1c:67:59:69:d1:cf:4b:85:f7: 6e:0a:a4:ca:a4:f7:35:56:31:cd:42:0a:54:4e:02: 3f:82:5b:39:0a:77:c2:bf:4a:81:5f:5f:94:be:7e: 89:ee:83:bd:e6:c9:c5:29:18:1b:cc:e3:90:41:17: 3d:60:01:be:a0:ab:a3:e6:b9:dd:19:f5:a6:c6:9d: 36:b6:e2:12:b8:8a:c1:2d:e2:fa:79:62:73:e4:5a: 4f:92:99:a4:5f:98:65:b2:3a:94:da:7d:77:1b:42: e2:98:e2:7a:67:63:aa:7b:f6:61:01:ef:35:20:24: 99:1c:63:da:07:d5:6f:22:33:42:da:b2:6b:c7:4c: 92:93:78:62:ff:ce:2e:2a:7f:81:e4:23:52:b0:ec: 0d:25:4e:33:a4:f2:30:ad:c0:c8:8f:14:1e:45:38: 3b:8c:5c:49:7a:16:7b:a3:62:5f:83:b4:bd:eb:d6: 9c:d2:46:15:fc:46:55:33:75:92:f5:7d:f0:2d:60: 92:10:3a:36:98:d7:be:18:cf:9c:50:45:83:4a:58: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DA:07:DC:F0:B4:EC:63:9F:6B:1F:8F:85:A0:45:6F:88:EE:3C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7f:63:e7:c9:8b:6d:aa:b5:ee:d6:83:53:81:4c:cf:a3:4b: e6:f0:41:0a:6e:20:37:9c:bd:64:e3:44:0e:58:21:72:79:cc: b4:99:fa:d3:36:53:85:ec:88:46:fd:c8:11:2e:79:b6:17:be: b2:8e:91:97:1a:3c:4b:5a:cb:38:dd:c7:ef:4c:77:93:80:d8: 0e:35:9c:61:89:9a:c9:36:41:a3:8b:a1:ec:0c:84:a9:9b:f2: 52:a6:bd:da:68:a0:39:8f:1f:84:31:0e:3f:1d:f3:36:09:a4: 01:8b:c0:05:5b:a0:4e:ca:9c:db:7c:a1:72:bc:28:15:ac:16: d9:4d:41:01:7d:af:df:7d:e9:01:bc:8a:2d:d7:9d:44:bf:40: db:45:89:93:5a:92:60:4c:69:bb:9e:c1:52:b8:21:83:0d:ee: 99:6f:b8:e9:49:bc:ce:1e:a1:d2:94:da:00:ca:33:3b:e6:5c: 59:c5:fa:ff:a5:38:83:66:f8:b3:ce:fe:db:5b:94:55:6b:4e: 04:e3:0c:ff:a8:28:cb:1e:d0:9d:2d:1e:06:05:7b:f0:5c:6e: fd:56:aa:3f:df:d0:e9:8a:fe:bd:0f:6c:92:89:d8:66:3c:a7: 4b:74:44:95:43:05:26:44:78:2d:f5:83:03:ee:37:b2:94:a1: 6d:1f:ec:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmxQsH9dcqWABYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YWQ2ZGZlMTQtOTdlYy00MGRlLWIyZjItNDMyNjVlYmExYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Ir6ERFDZPhfqu8CrGozmFkSbNxFBT7TRTp cI3jSF1QmlNOKA1m37KtePBU3DfBr8AcZ1lp0c9LhfduCqTKpPc1VjHNQgpUTgI/ gls5CnfCv0qBX1+Uvn6J7oO95snFKRgbzOOQQRc9YAG+oKuj5rndGfWmxp02tuIS uIrBLeL6eWJz5FpPkpmkX5hlsjqU2n13G0LimOJ6Z2Oqe/ZhAe81ICSZHGPaB9Vv IjNC2rJrx0ySk3hi/84uKn+B5CNSsOwNJU4zpPIwrcDIjxQeRTg7jFxJehZ7o2Jf g7S969ac0kYV/EZVM3WS9X3wLWCSEDo2mNe+GM+cUEWDSljI5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHfaB9zwtOxjn2sfj4WgRW+I7jwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmY4ZmUyYWItOWE0NC0z MWM1LTgwOWItYjU4YjgyYjQxMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCHf2PnyYttqrXu1oNTgUzPo0vm8EEKbiA3nL1k 40QOWCFyecy0mfrTNlOF7IhG/cgRLnm2F76yjpGXGjxLWss43cfvTHeTgNgONZxh iZrJNkGji6HsDISpm/JSpr3aaKA5jx+EMQ4/HfM2CaQBi8AFW6BOypzbfKFyvCgV rBbZTUEBfa/ffekBvIot151Ev0DbRYmTWpJgTGm7nsFSuCGDDe6Zb7jpSbzOHqHS lNoAyjM75lxZxfr/pTiDZvizzv7bW5RVa04E4wz/qCjLHtCdLR4GBXvwXG79Vqo/ 39Dpiv69D2ySidhmPKdLdESVQwUmRHgt9YMD7jeylKFtH+x2 -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:08 2025 by rpki-client