$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b819d6e7-c3a3-3eda-91b1-62df456f225c.roa File: b819d6e7-c3a3-3eda-91b1-62df456f225c.roa (raw, json) Hash identifier: dx8CV1eU0kx+rl1fQsldpdseqQ/lrPHN7aal/nr8gm8= Subject key identifier: AE:C0:F4:31:15:9C:FA:65:A7:38:84:50:DB:EE:D1:FC:83:06:8E:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366AA1BA4523BB65D35400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b819d6e7-c3a3-3eda-91b1-62df456f225c.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396588 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6a:a1:ba:45:23:bb:65:d3:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=0a1e6ed5-c663-4010-94a0-3e8baf99c4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:9b:6d:be:dd:a9:0d:74:c3:66:47:4f:21: e5:c1:dd:d4:a8:2f:c8:3b:bf:a7:a6:b5:1b:1b:17: fe:3f:48:a7:05:38:a7:d4:4a:05:0e:02:76:d4:4c: a0:7b:7c:51:c7:8e:60:0e:a7:c3:cf:37:cb:d2:f9: 8c:4a:af:21:e4:47:c8:ce:a5:0c:37:bf:3e:c3:c4: 07:1e:24:d9:43:8f:d2:0f:55:86:42:11:2f:85:1f: aa:a0:5a:9f:05:5c:b5:f5:46:3d:e2:5a:74:16:ca: 13:61:c4:6c:8f:4d:f7:77:df:75:ea:ef:91:6c:e3: e6:70:68:fd:af:26:69:59:ad:60:77:3e:da:2f:06: ec:0f:ba:e5:e2:c8:6e:25:38:f1:ee:2e:bb:14:0c: d9:cc:78:e3:19:c7:83:4b:a6:d5:81:0e:6d:44:0f: 3a:42:a4:53:34:b5:47:a0:8e:22:25:46:fb:ad:43: 5d:d7:d5:5f:cb:dd:0c:7c:f0:07:bd:4e:88:41:44: 57:03:44:4b:46:03:04:2c:1e:f2:30:8a:68:90:9e: f9:14:4a:b9:86:5c:19:73:ef:38:f9:a0:fa:78:5a: 45:d9:a2:b5:76:d7:3b:11:61:7a:2f:55:3d:03:a8: 00:5e:2b:d1:8f:c3:10:ad:12:a2:6a:a2:49:7b:01: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C0:F4:31:15:9C:FA:65:A7:38:84:50:DB:EE:D1:FC:83:06:8E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b819d6e7-c3a3-3eda-91b1-62df456f225c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:51:3c:d3:0d:68:64:92:0b:94:57:b1:c3:1f:a4:2e:c1:96: 5b:6f:23:31:54:e9:c2:f6:0a:c7:bf:2d:de:0d:7d:be:89:45: cf:e2:7d:17:30:29:94:f2:5b:f8:8b:c6:6c:61:1a:a8:74:38: f6:fe:63:4d:86:4f:97:8c:74:5f:ce:65:8f:66:5d:96:fe:31: 19:37:03:e2:96:0f:c0:a5:b8:f1:03:48:4b:c5:aa:dc:79:0d: b9:c8:1f:10:9b:ce:ef:9c:5b:25:72:dd:4e:8f:aa:6c:91:75: db:42:6e:94:81:4c:8e:53:bd:61:82:d3:1a:44:60:1b:fd:55: 20:37:42:18:c3:09:8b:3e:00:07:24:8a:b7:cd:82:16:ff:3c: fc:9d:10:f4:ab:34:3a:3f:e9:07:66:c9:af:07:2f:43:e4:6f: 28:e7:ae:c2:60:5e:d5:67:40:84:2f:a4:b2:40:df:ef:58:cc: 81:da:f9:57:4a:ed:43:dd:9f:0a:17:41:a2:68:ea:cc:0c:94: 92:31:f5:8e:4a:24:85:65:26:42:91:ec:6a:54:1c:c7:8f:c5: 6a:b1:9f:ca:21:9d:dc:4b:ec:57:81:9b:ee:04:73:2c:fd:a6: 9f:33:79:1e:fd:bf:4b:ff:8b:b3:fe:41:49:51:dc:52:f7:da: ee:68:1b:99 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmqhukUju2XTVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MGExZTZlZDUtYzY2My00MDEwLTk0YTAtM2U4YmFmOTljNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaebbb7dqQ10w2ZHTyHlwd3UqC/IO7+nprUb Gxf+P0inBTin1EoFDgJ21Eyge3xRx45gDqfDzzfL0vmMSq8h5EfIzqUMN78+w8QH HiTZQ4/SD1WGQhEvhR+qoFqfBVy19UY94lp0FsoTYcRsj033d9916u+RbOPmcGj9 ryZpWa1gdz7aLwbsD7rl4shuJTjx7i67FAzZzHjjGceDS6bVgQ5tRA86QqRTNLVH oI4iJUb7rUNd19Vfy90MfPAHvU6IQURXA0RLRgMELB7yMIpokJ75FEq5hlwZc+84 +aD6eFpF2aK1dtc7EWF6L1U9A6gAXivRj8MQrRKiaqJJewF3VQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK7A9DEVnPplpziEUNvu0fyDBo75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjgxOWQ2ZTctYzNhMy0z ZWRhLTkxYjEtNjJkZjQ1NmYyMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXUTzTDWhkkguUV7HDH6QuwZZbbyMxVOnC9grH vy3eDX2+iUXP4n0XMCmU8lv4i8ZsYRqodDj2/mNNhk+XjHRfzmWPZl2W/jEZNwPi lg/ApbjxA0hLxarceQ25yB8Qm87vnFslct1Oj6pskXXbQm6UgUyOU71hgtMaRGAb /VUgN0IYwwmLPgAHJIq3zYIW/zz8nRD0qzQ6P+kHZsmvBy9D5G8o567CYF7VZ0CE L6SyQN/vWMyB2vlXSu1D3Z8KF0GiaOrMDJSSMfWOSiSFZSZCkexqVBzHj8VqsZ/K IZ3cS+xXgZvuBHMs/aafM3ke/b9L/4uz/kFJUdxS99ruaBuZ -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:28 2025 by rpki-client