$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa File: d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa (raw, json) Hash identifier: S35DM6evDoX9HrzTvT3MTeu2EH4eC0LAkY9ZOCIe/CE= Subject key identifier: FD:02:23:49:B4:EA:65:30:89:F6:A8:07:2D:B2:D2:5D:F1:F0:01:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366DB5654E2EA50952CDC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 25485 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6d:b5:65:4e:2e:a5:09:52:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=f26feaae-c160-443b-a3db-723c6abace35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:c2:84:6b:f8:31:b8:ba:0e:18:40:06:8e: a8:f3:49:f1:1a:d5:9b:b1:66:b9:35:a4:8a:9b:14: 93:1a:22:40:ab:15:4b:fc:2d:fd:85:89:af:fc:39: 3f:e5:db:1f:4b:f5:e6:8c:02:0c:b5:7d:7c:42:2b: e7:b7:57:6d:4d:c9:20:d6:19:94:1e:2a:32:33:a7: d9:60:f8:9f:b9:9f:5a:aa:77:df:05:b1:c8:38:1b: bd:7e:39:19:f5:6a:55:b1:4d:2e:e4:a7:c3:d9:df: 86:f5:0a:16:9d:a5:02:b5:71:c8:8b:98:65:e4:1f: c4:db:e0:5f:f2:01:13:3c:d0:1f:8c:a9:1e:cd:30: 01:50:d5:b9:98:af:da:da:24:76:b7:f0:a9:ae:94: 06:3d:8e:9c:b0:2e:a0:01:5c:06:0b:e3:de:c4:36: 32:1c:bf:aa:ec:94:53:f8:ac:f0:60:c7:82:32:3d: 75:75:fc:48:f1:41:3d:f2:ac:00:6d:a9:17:de:e9: 91:4a:17:ec:58:bb:78:5d:d5:db:f2:d9:52:ca:80: 78:0c:92:3a:bc:10:8d:c7:af:06:fa:a9:88:be:db: eb:6e:80:13:ac:62:5a:bd:ee:95:38:f4:26:27:6f: a0:f4:e7:d5:bd:e9:b6:36:8f:8e:9c:b3:f0:77:57: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:02:23:49:B4:EA:65:30:89:F6:A8:07:2D:B2:D2:5D:F1:F0:01:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:29:52:ea:35:be:e2:5b:8c:5a:8a:2a:23:07:08:c6:77:db: 27:3e:a6:1c:fd:05:d8:6e:25:39:6c:93:c2:c1:7c:d2:cf:b2: 20:12:b0:9d:3e:5a:e0:ef:59:b7:9c:db:38:cc:c0:9d:66:8d: f5:6f:8e:50:30:32:7a:f2:e6:aa:fb:3e:19:c5:d4:0f:74:3b: 70:ad:cb:f1:64:c2:06:c1:8b:f1:a0:65:97:cd:ec:17:cb:09: 5f:db:1d:dc:d2:48:a9:89:9d:7d:7a:89:86:c7:84:7e:b0:f9: 2a:9a:2b:82:1c:c5:7a:6c:a7:a9:53:a9:e4:28:38:41:50:55: 56:b6:2a:4e:13:28:4a:1a:b8:a9:74:28:a3:51:95:c7:4d:aa: 9c:c8:d8:4e:c1:0a:d5:1c:f6:b1:7c:5e:30:93:e0:03:a2:1a: 20:92:cb:b0:8f:97:4a:4a:4a:39:e7:91:39:dc:bf:f5:d7:24: 19:3d:0a:04:f2:65:61:73:9e:7f:8f:aa:5f:94:1f:8c:c6:9e: 88:38:42:c5:c7:83:45:90:57:b2:2b:43:1b:39:f8:80:b6:b5: f7:4b:39:cd:fd:34:3c:f5:90:ce:1f:b0:75:82:d2:8b:23:e0: 5e:16:93:a9:44:36:3e:1b:18:74:b4:ed:a4:ae:5a:4e:ed:8c: 3a:fa:68:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm21ZU4upQlSzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjI2ZmVhYWUtYzE2MC00NDNiLWEzZGItNzIzYzZhYmFjZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNvChGv4Mbi6DhhABo6o80nxGtWbsWa5NaSK mxSTGiJAqxVL/C39hYmv/Dk/5dsfS/XmjAIMtX18Qivnt1dtTckg1hmUHioyM6fZ YPifuZ9aqnffBbHIOBu9fjkZ9WpVsU0u5KfD2d+G9QoWnaUCtXHIi5hl5B/E2+Bf 8gETPNAfjKkezTABUNW5mK/a2iR2t/CprpQGPY6csC6gAVwGC+PexDYyHL+q7JRT +KzwYMeCMj11dfxI8UE98qwAbakX3umRShfsWLt4XdXb8tlSyoB4DJI6vBCNx68G +qmIvtvrboATrGJave6VOPQmJ2+g9OfVvem2No+OnLPwd1dIxQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP0CI0m06mUwifaoBy2y0l3x8AGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDliZjRjMjAtODRkOS0z YmNlLTliYTYtZTdiZWQ5NDZjZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAOKVLqNb7iW4xaiiojBwjGd9snPqYc/QXYbiU5 bJPCwXzSz7IgErCdPlrg71m3nNs4zMCdZo31b45QMDJ68uaq+z4ZxdQPdDtwrcvx ZMIGwYvxoGWXzewXywlf2x3c0kipiZ19eomGx4R+sPkqmiuCHMV6bKepU6nkKDhB UFVWtipOEyhKGripdCijUZXHTaqcyNhOwQrVHPaxfF4wk+ADohogksuwj5dKSko5 55E53L/11yQZPQoE8mVhc55/j6pflB+Mxp6IOELFx4NFkFeyK0MbOfiAtrX3SznN /TQ89ZDOH7B1gtKLI+BeFpOpRDY+Gxh0tO2krlpO7Yw6+mh5 -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:26 2025 by rpki-client