$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa File: 7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa (raw, json) Hash identifier: 1uWJV2dffOgvaGL5dgHfBnE22pnI5P4FSzpu8fx3zhM= Subject key identifier: 4F:3D:14:07:EF:6C:22:E1:88:0D:3C:4A:6F:8E:A1:A7:1A:22:76:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B32847CCFC72E7712F040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 397210 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:32:84:7c:cf:c7:2e:77:12:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=21180849-3f4f-4788-823e-248bc5b7461a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:dc:05:1b:e6:b1:67:bc:ec:6f:29:78:ab: 1c:d5:26:5c:d6:c2:a1:b0:bb:50:c2:cd:8f:c8:d2: fb:03:63:61:e9:e0:99:14:04:de:09:e9:4a:fe:53: 3b:20:d7:26:58:8a:39:a0:4f:79:77:53:30:4a:1b: b7:af:41:29:ae:31:4c:9a:49:6e:f4:35:47:52:dc: c1:83:f0:48:8a:c7:d0:64:1a:03:04:9c:62:51:15: f8:f2:47:f5:c1:77:b4:6d:10:6c:0d:c2:33:64:99: 48:92:5a:3f:dd:df:28:04:8a:85:d2:3d:ee:ff:ea: 38:24:c5:1c:a4:42:91:36:75:4b:7c:7a:a6:10:86: a7:b2:4c:ab:f4:06:23:e7:3c:d5:37:d7:d1:1c:dd: 8b:39:3c:6a:df:70:b5:f5:fc:6c:8b:2e:4f:f3:5a: bc:bf:0c:a6:a8:f4:bb:bb:98:d1:47:e3:c8:a1:2b: 63:3a:44:e4:29:df:bd:19:44:ae:12:33:7a:6f:20: 80:ff:ca:27:37:d2:0f:da:c5:95:9b:3c:9d:0d:c7: 6e:72:85:6a:c4:33:2c:ee:1b:60:62:b8:bb:14:99: b3:91:6d:7d:29:77:0a:6f:b1:0e:37:2c:75:81:60: 7d:75:f5:b3:11:41:05:14:1d:ac:ec:8a:89:97:06: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3D:14:07:EF:6C:22:E1:88:0D:3C:4A:6F:8E:A1:A7:1A:22:76:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:fc:21:a5:e7:9f:00:c2:ac:fd:76:f5:a2:e7:c4:bf:75:d1: 33:a6:ee:f8:83:3f:5d:4f:84:a7:53:36:d2:ac:c1:ca:ee:6d: d0:0c:0c:1c:fa:8b:ad:e4:48:a9:4d:44:59:24:9d:cd:8a:ba: 2d:53:ab:37:b8:5c:3a:76:a9:97:cc:2f:36:16:6e:31:1d:88: ee:ad:e6:a6:8f:04:a5:80:a3:c0:1b:5b:47:ed:bc:b9:d1:3e: ef:60:db:02:1c:83:98:49:2f:db:ce:de:5d:5c:94:e1:0b:b2: d6:75:95:8e:2e:84:85:a5:3b:de:e3:19:d4:ca:c0:8e:85:41: cb:44:16:23:36:79:3e:0c:21:43:b0:e5:24:12:ef:d7:30:3b: dc:62:20:38:76:99:28:93:2a:c2:10:cc:1d:e0:74:dc:a3:be: 82:71:26:cc:3e:96:45:93:75:30:68:c9:8f:90:b5:55:30:97: 11:2b:16:90:8d:4e:d8:bc:2a:be:1b:0a:c1:42:dd:79:68:0a: 82:49:34:71:b9:4c:ec:d0:28:5f:e2:ee:5b:6c:95:c8:65:07: 63:e7:28:1b:5c:da:87:b9:f2:0b:91:a2:b5:0e:0e:7b:3a:f7: 37:67:73:76:9d:2f:01:08:bc:7b:c4:5a:b8:f8:b1:fe:8b:82: 96:c3:b3:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmzKEfM/HLncS8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MjExODA4NDktM2Y0Zi00Nzg4LTgyM2UtMjQ4YmM1Yjc0NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJPcBRvmsWe87G8peKsc1SZc1sKhsLtQws2P yNL7A2Nh6eCZFATeCelK/lM7INcmWIo5oE95d1MwShu3r0EprjFMmklu9DVHUtzB g/BIisfQZBoDBJxiURX48kf1wXe0bRBsDcIzZJlIklo/3d8oBIqF0j3u/+o4JMUc pEKRNnVLfHqmEIanskyr9AYj5zzVN9fRHN2LOTxq33C19fxsiy5P81q8vwymqPS7 u5jRR+PIoStjOkTkKd+9GUSuEjN6byCA/8onN9IP2sWVmzydDcducoVqxDMs7htg Yri7FJmzkW19KXcKb7EONyx1gWB9dfWzEUEFFB2s7IqJlwZ6ZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE89FAfvbCLhiA08Sm+OoacaInYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2FhNTI2YzktNTNkOC0z MDkyLWFjMzItY2YzZGRhYzA3OWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCK/CGl558Awqz9dvWi58S/ddEzpu74gz9dT4Sn UzbSrMHK7m3QDAwc+out5EipTURZJJ3NirotU6s3uFw6dqmXzC82Fm4xHYjuream jwSlgKPAG1tH7by50T7vYNsCHIOYSS/bzt5dXJThC7LWdZWOLoSFpTve4xnUysCO hUHLRBYjNnk+DCFDsOUkEu/XMDvcYiA4dpkokyrCEMwd4HTco76CcSbMPpZFk3Uw aMmPkLVVMJcRKxaQjU7YvCq+GwrBQt15aAqCSTRxuUzs0Chf4u5bbJXIZQdj5ygb XNqHufILkaK1Dg57Ovc3Z3N2nS8BCLx7xFq4+LH+i4KWw7Mo -----END CERTIFICATE-----Generated at Sun Jun 29 23:18:33 2025 by rpki-client