$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa File: d9a49422-7587-3e1c-ae43-6db8a437033e.roa (raw, json) Hash identifier: gyQ3DYmA8CAYm0faAPL+LIA+iv3MrbPugggGwKG1ygw= Subject key identifier: 9E:A6:B8:94:38:7E:4B:2A:8D:08:7B:52:11:56:3B:50:7C:CC:B2:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366E12A114D503DFB83040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 36619 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6e:12:a1:14:d5:03:df:b8:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=de7663e1-0c95-45b3-835e-e212ba67b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:e6:15:dc:63:6c:77:4c:45:c8:d0:ed:39: 4b:4d:82:dc:4e:9a:0a:53:54:df:be:2b:89:36:5a: c6:13:23:d0:b8:65:bc:a6:f4:be:2b:3b:ba:9b:49: b0:a0:29:a1:3f:a0:68:04:b4:01:77:30:a9:59:1b: d1:29:70:84:6b:c2:b4:97:2f:ff:6d:40:35:05:ef: d8:76:0a:91:62:e1:9f:37:85:e7:a4:2f:83:8a:63: ec:27:56:c2:c2:c3:82:f2:62:26:78:f7:cf:c8:81: 5f:ac:1b:55:17:41:b4:3a:6e:b7:6c:26:04:1a:49: a8:de:30:1b:0f:b5:7a:62:e8:e9:43:40:cd:ce:09: de:b9:91:b6:de:bf:63:52:9f:51:eb:24:9c:08:22: 26:df:07:90:a6:47:42:5b:4c:d2:89:7b:b8:68:4c: af:1d:9b:39:45:26:cd:16:bd:73:fb:e4:57:23:4a: 40:93:1b:f3:19:dd:d7:5b:0c:7b:46:b7:8f:46:84: 77:78:e3:19:b4:0c:ce:01:59:e6:9b:ae:3f:e4:b7: e7:f9:16:06:70:c1:85:7e:09:3a:67:4b:0e:5a:20: 44:1a:3d:b5:ff:3e:3b:50:d7:a5:b3:f1:b3:25:f8: d8:c4:13:99:57:2c:a1:43:7f:db:5f:df:73:77:a0: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A6:B8:94:38:7E:4B:2A:8D:08:7B:52:11:56:3B:50:7C:CC:B2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:18:0a:7c:7f:97:df:81:f3:9e:ce:57:df:df:d5:b4:f1:3d: 2c:f7:b5:0a:a0:36:2b:7d:5a:1a:39:6c:ca:b3:84:99:05:dd: 4b:b3:36:58:1f:eb:73:71:b3:f7:82:b8:43:59:18:f6:ba:ed: 5c:f6:f2:b4:cc:6b:3e:42:ca:de:0e:62:c6:4f:b7:75:71:43: e2:39:c0:5c:cb:00:d0:5d:ee:65:5d:26:88:4f:36:d8:68:7e: 0f:d0:f7:03:65:25:53:cc:57:a4:39:c2:99:d2:12:ef:5f:63: 50:fc:fc:1f:41:16:1e:64:5d:dc:0f:f3:0f:e3:74:41:70:6c: 66:7f:d2:65:33:11:76:77:6b:c1:8c:35:33:82:0e:fa:ec:1b: 95:0e:37:dd:4b:b9:94:49:e3:bd:75:0f:c2:cd:10:b2:d5:72: 27:32:d1:22:15:c6:08:bd:b3:32:49:f4:40:ad:33:0e:2f:e8: c5:79:72:0d:ed:aa:af:3e:4c:96:86:39:94:9c:25:52:51:83: f5:cc:6a:6a:62:6a:c5:2c:75:66:a1:b1:c9:91:d4:f1:79:65: fb:60:45:3e:b4:05:53:79:f3:cc:db:8d:a6:47:1b:bf:66:87: 87:1b:d5:7b:37:39:7d:20:2d:ae:89:63:a1:8f:b7:72:67:c8: 5a:0c:e9:99 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm4SoRTVA9+4MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGU3NjYzZTEtMGM5NS00NWIzLTgzNWUtZTIxMmJhNjdiNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9nmFdxjbHdMRcjQ7TlLTYLcTpoKU1TfviuJ NlrGEyPQuGW8pvS+Kzu6m0mwoCmhP6BoBLQBdzCpWRvRKXCEa8K0ly//bUA1Be/Y dgqRYuGfN4XnpC+DimPsJ1bCwsOC8mImePfPyIFfrBtVF0G0Om63bCYEGkmo3jAb D7V6YujpQ0DNzgneuZG23r9jUp9R6yScCCIm3weQpkdCW0zSiXu4aEyvHZs5RSbN Fr1z++RXI0pAkxvzGd3XWwx7RrePRoR3eOMZtAzOAVnmm64/5Lfn+RYGcMGFfgk6 Z0sOWiBEGj21/z47UNels/GzJfjYxBOZVyyhQ3/bX99zd6By5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ6muJQ4fksqjQh7UhFWO1B8zLI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDlhNDk0MjItNzU4Ny0z ZTFjLWFlNDMtNmRiOGE0MzcwMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA2GAp8f5ffgfOezlff39W08T0s97UKoDYrfVoa OWzKs4SZBd1LszZYH+tzcbP3grhDWRj2uu1c9vK0zGs+QsreDmLGT7d1cUPiOcBc ywDQXe5lXSaITzbYaH4P0PcDZSVTzFekOcKZ0hLvX2NQ/PwfQRYeZF3cD/MP43RB cGxmf9JlMxF2d2vBjDUzgg767BuVDjfdS7mUSeO9dQ/CzRCy1XInMtEiFcYIvbMy SfRArTMOL+jFeXIN7aqvPkyWhjmUnCVSUYP1zGpqYmrFLHVmobHJkdTxeWX7YEU+ tAVTefPM242mRxu/ZoeHG9V7Nzl9IC2uiWOhj7dyZ8haDOmZ -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:59 2025 by rpki-client