$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa File: a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa (raw, json) Hash identifier: BjWqg5R7pC41IRu5GmPyCALD2+mGfFaF8h4KeBV498Q= Subject key identifier: E1:05:E6:16:FD:5B:0E:24:6C:B4:6E:D2:D6:3D:89:CE:0C:6B:69:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366DDB5D1559554D596580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396571 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6d:db:5d:15:59:55:4d:59:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=8f000a8e-54fc-4e39-bb78-9800999ea5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:af:99:a0:dd:f4:d6:12:b5:cb:64:aa:65: 22:4f:ae:e7:10:0b:ad:b1:90:62:3c:ae:86:38:59: ed:65:02:1e:af:b8:f6:91:3c:1c:ff:11:cd:ca:c7: 8d:2b:4d:f5:d4:b9:25:d9:a9:e2:2f:ed:29:8f:a9: e7:98:03:ca:22:bd:51:5f:80:f6:0b:88:0e:43:7b: 2a:cd:f5:68:c4:0d:e0:42:9f:d3:5c:71:9f:74:ec: a3:e3:de:4e:72:85:a7:85:b0:e4:fb:8d:df:fc:3e: d0:78:18:f3:bb:76:e8:e7:1b:fd:90:8c:8b:6c:5e: 2d:b8:af:9c:f9:8b:41:d8:82:aa:ac:b5:de:f2:62: 72:2c:3c:80:5c:33:a3:57:22:f5:8d:b8:72:53:89: db:68:2c:75:ae:3e:d9:73:63:65:6d:03:57:6e:e2: 12:7f:8c:ed:48:cf:19:25:4e:54:e8:69:c9:84:83: f5:76:c8:0f:78:41:64:f1:bc:3e:00:35:3c:1b:6f: 4f:78:44:92:59:e4:f3:42:0a:b4:af:e5:89:73:ee: 06:7f:6f:5c:e7:91:49:6a:6c:2c:1a:85:da:cd:8a: f0:46:2e:56:e8:02:9e:f0:a2:2b:ec:e7:58:51:72: ba:c3:22:ca:cc:b9:44:8b:ab:5e:ab:b9:c9:11:77: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:05:E6:16:FD:5B:0E:24:6C:B4:6E:D2:D6:3D:89:CE:0C:6B:69:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2c:ee:5f:96:df:26:68:fb:3a:ba:f1:d6:76:84:17:82:f4: 04:76:49:9e:1f:38:12:29:4f:20:d5:2f:92:a5:97:1b:be:00: 17:7e:9f:2a:29:06:a6:53:f4:cb:9e:8f:9c:99:48:f9:60:9d: f1:fe:61:c7:81:5f:07:ef:b1:b6:16:5e:b5:57:f8:16:22:10: 90:ef:af:e2:d2:06:21:4b:66:1a:dd:88:ba:4b:45:ea:01:e9: c5:1b:9d:3c:98:ff:f3:61:ba:4f:58:8f:c1:f1:af:52:83:91: bc:74:4d:01:02:11:da:00:74:1d:97:0f:62:bb:2d:63:95:f0: 83:b8:ca:91:5a:3e:7e:58:3d:e5:0d:0f:53:df:f9:b5:68:20: ca:e0:e5:55:d2:5c:3e:78:1b:09:15:77:f4:b1:f5:92:e1:7f: cd:90:d9:9c:7a:81:8a:9b:d2:80:1f:19:76:11:47:29:4b:41: 8d:63:16:f0:cc:22:8b:61:10:77:dc:27:d7:3f:bf:08:98:ee: f8:4c:93:70:58:cf:f1:d1:f2:fa:b6:22:96:08:15:3d:ba:30: ea:39:a6:5e:a9:7e:fe:d2:eb:e7:36:a1:c4:c0:f0:39:cf:d3: 7d:13:c0:d2:f2:b9:fd:98:97:62:11:ef:2d:3c:a5:9a:c5:60: c3:e3:f9:5e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm3bXRVZVU1ZZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk OGYwMDBhOGUtNTRmYy00ZTM5LWJiNzgtOTgwMDk5OWVhNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoivmaDd9NYStctkqmUiT67nEAutsZBiPK6G OFntZQIer7j2kTwc/xHNyseNK0311Lkl2aniL+0pj6nnmAPKIr1RX4D2C4gOQ3sq zfVoxA3gQp/TXHGfdOyj495OcoWnhbDk+43f/D7QeBjzu3bo5xv9kIyLbF4tuK+c +YtB2IKqrLXe8mJyLDyAXDOjVyL1jbhyU4nbaCx1rj7Zc2NlbQNXbuISf4ztSM8Z JU5U6GnJhIP1dsgPeEFk8bw+ADU8G29PeESSWeTzQgq0r+WJc+4Gf29c55FJamws GoXazYrwRi5W6AKe8KIr7OdYUXK6wyLKzLlEi6teq7nJEXe/RwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOEF5hb9Ww4kbLRu0tY9ic4Ma2kbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTVhZjRjMmYtNzViMi0z MzkyLTlkYWYtMGJhNjNkMzYwYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhLO5flt8maPs6uvHWdoQXgvQEdkmeHzgSKU8g 1S+SpZcbvgAXfp8qKQamU/TLno+cmUj5YJ3x/mHHgV8H77G2Fl61V/gWIhCQ76/i 0gYhS2Ya3Yi6S0XqAenFG508mP/zYbpPWI/B8a9Sg5G8dE0BAhHaAHQdlw9iuy1j lfCDuMqRWj5+WD3lDQ9T3/m1aCDK4OVV0lw+eBsJFXf0sfWS4X/NkNmceoGKm9KA Hxl2EUcpS0GNYxbwzCKLYRB33CfXP78ImO74TJNwWM/x0fL6tiKWCBU9ujDqOaZe qX7+0uvnNqHEwPA5z9N9E8DS8rn9mJdiEe8tPKWaxWDD4/le -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:03 2025 by rpki-client