$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa File: c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa (raw, json) Hash identifier: a4J7/DBPmpYvPw2uT6uyqIUd2/6NYO/AF4AZuQKiB1s= Subject key identifier: D3:49:76:8D:91:87:D1:9D:49:1D:63:4C:4B:7A:AE:83:1C:08:6A:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366CD4F520941207CCFBC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397205 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6c:d4:f5:20:94:12:07:cc:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=35342243-7f86-4e9b-9ffe-8ea9953f544d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:a8:19:42:e2:a7:85:54:d9:06:e8:ff:c4: 03:85:41:40:79:68:56:3d:74:fd:91:f1:84:eb:89: c8:00:7f:e6:e0:22:1e:50:38:01:cb:20:94:41:cd: c7:f2:52:a9:15:29:41:fa:bd:e3:b1:31:5d:5c:0f: f1:78:68:db:2c:70:e5:23:62:0c:29:32:25:ed:4f: a3:21:f9:49:87:0e:cf:c6:8a:72:cf:56:f3:56:fd: 4b:07:2c:c9:b6:40:25:9b:53:4d:97:85:35:55:0d: 10:ac:c9:6a:67:65:f7:6e:27:7d:0b:f6:94:df:01: fe:8d:1e:91:70:71:89:ee:63:43:4a:23:19:9a:1b: 05:30:21:73:0b:e8:4e:62:aa:52:2e:a1:58:14:8a: d1:78:35:03:12:a2:e7:9e:6e:3f:97:8a:8a:39:65: c2:3f:37:23:c7:14:a5:ff:23:a2:54:1b:fd:36:5d: cb:57:2b:a6:e2:70:d5:8d:c5:47:1d:3f:48:a6:0c: 92:ee:90:c4:c2:0d:92:01:fe:ed:7c:02:47:d2:64: e4:28:0b:67:f6:7f:28:33:aa:89:bb:60:92:30:21: af:d5:ca:37:7f:4a:2b:18:99:59:cb:f4:94:4f:f5: ef:77:17:1c:12:3a:8a:37:09:fc:aa:c2:2f:81:1d: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:49:76:8D:91:87:D1:9D:49:1D:63:4C:4B:7A:AE:83:1C:08:6A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0d:2b:c6:48:7f:04:e1:45:66:8c:59:77:dd:85:db:de:0a: e2:af:a6:67:2d:57:1b:21:9a:28:85:25:02:93:92:aa:ea:93: 32:90:fa:38:3c:fe:c8:b0:94:1b:a8:4c:65:4d:38:c5:e6:c9: 11:e6:22:16:a1:9e:a2:db:4e:a9:63:20:75:e5:2d:0b:83:b2: f3:23:d9:8f:07:4f:91:80:57:4d:06:df:69:47:dd:6d:68:32: 08:2b:14:c0:90:98:4e:62:44:f6:10:bb:cc:9b:ea:c7:37:a0: ba:ba:6c:21:c6:19:02:e5:9d:1d:c3:cb:2a:bf:37:14:88:a3: 4e:be:7d:73:1d:78:37:ee:4a:b5:9d:8f:4b:90:4d:59:59:19: ca:e3:f3:9a:66:a8:80:23:92:9d:cb:18:06:c8:85:25:4d:38: b3:95:48:81:9d:cf:ae:bc:ba:59:82:69:b1:1a:a9:96:8a:09: 2e:86:7d:f9:52:d5:4e:f2:60:8d:b9:cf:b8:29:58:2b:27:de: 37:c6:72:a5:67:47:fa:53:85:cd:30:88:b2:19:84:dd:5f:df: d9:05:21:b4:00:d7:8f:1d:dc:ae:68:e0:84:d9:99:d2:c7:63: d3:07:66:26:13:8e:87:66:c9:3f:0d:3e:15:73:80:c4:b5:05: 4e:9f:07:e5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmzU9SCUEgfM+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MzUzNDIyNDMtN2Y4Ni00ZTliLTlmZmUtOGVhOTk1M2Y1NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos2oGULip4VU2Qbo/8QDhUFAeWhWPXT9kfGE 64nIAH/m4CIeUDgByyCUQc3H8lKpFSlB+r3jsTFdXA/xeGjbLHDlI2IMKTIl7U+j IflJhw7Pxopyz1bzVv1LByzJtkAlm1NNl4U1VQ0QrMlqZ2X3bid9C/aU3wH+jR6R cHGJ7mNDSiMZmhsFMCFzC+hOYqpSLqFYFIrReDUDEqLnnm4/l4qKOWXCPzcjxxSl /yOiVBv9Nl3LVyum4nDVjcVHHT9IpgyS7pDEwg2SAf7tfAJH0mTkKAtn9n8oM6qJ u2CSMCGv1co3f0orGJlZy/SUT/XvdxccEjqKNwn8qsIvgR09jQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNNJdo2Rh9GdSR1jTEt6roMcCGo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFhM2Y5YzgtNWY2NC0z YzkzLTlmMTAtYTU4NGNhOTA3N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqDSvGSH8E4UVmjFl33YXb3grir6ZnLVcbIZoo hSUCk5Kq6pMykPo4PP7IsJQbqExlTTjF5skR5iIWoZ6i206pYyB15S0Lg7LzI9mP B0+RgFdNBt9pR91taDIIKxTAkJhOYkT2ELvMm+rHN6C6umwhxhkC5Z0dw8sqvzcU iKNOvn1zHXg37kq1nY9LkE1ZWRnK4/OaZqiAI5KdyxgGyIUlTTizlUiBnc+uvLpZ gmmxGqmWigkuhn35UtVO8mCNuc+4KVgrJ943xnKlZ0f6U4XNMIiyGYTdX9/ZBSG0 ANePHdyuaOCE2ZnSx2PTB2YmE46HZsk/DT4Vc4DEtQVOnwfl -----END CERTIFICATE-----Generated at Sat Aug 23 12:57:44 2025 by rpki-client