$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de26fd75-de7a-3945-bdf8-aefa2b40fecf.roa File: de26fd75-de7a-3945-bdf8-aefa2b40fecf.roa (raw, json) Hash identifier: BORGx8M6VML5M1lcb5cta+nOmauyzdmc0vAd1HOST9E= Subject key identifier: E6:0B:0B:D0:A4:31:CE:90:6A:82:0B:02:20:CB:EA:A3:0B:F0:B5:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366ADDE597D26503B25300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de26fd75-de7a-3945-bdf8-aefa2b40fecf.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397212 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6a:dd:e5:97:d2:65:03:b2:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=7f5bd002-7666-4188-9ecd-0894f78a6615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:d1:6e:90:71:58:7a:75:2b:1e:4c:27:41: 75:65:2b:e2:50:9c:d0:ba:e3:e0:ff:bb:7d:c7:94: 46:42:20:b5:65:c1:1f:13:18:e7:d4:4d:c8:aa:b5: 1a:85:60:30:67:00:67:22:f4:66:31:72:e7:2e:ba: 69:6d:e0:09:da:88:b4:ba:79:c1:6e:03:0c:b7:42: d5:dd:09:4f:2f:12:43:bb:44:70:1e:5b:f4:92:73: 43:4f:6c:d1:36:73:fc:65:46:51:29:a0:ee:4c:5e: 62:85:0a:37:a0:12:fd:87:a2:d5:78:80:2b:31:b8: 31:82:34:e4:4f:e4:05:4f:c0:1f:22:95:25:fa:01: 59:bd:d7:ea:da:be:88:dd:de:65:90:c0:ed:17:47: ce:3c:f4:7a:e2:6a:9b:3e:6b:2b:da:9d:ef:cf:db: 14:9d:a9:8f:89:0c:47:bf:7e:23:e7:08:91:cb:ad: 57:bd:cb:24:ce:60:ef:4f:86:68:a8:2e:c8:aa:3d: b0:bd:b4:0c:90:89:b5:8c:36:bf:e1:0e:b6:0a:28: a9:93:73:4c:07:bb:fd:94:7b:4c:60:08:05:83:78: 76:4e:d1:d8:7e:26:05:ea:21:1b:6c:49:11:d9:8a: 23:69:07:4b:a1:82:3d:cc:00:a4:15:7f:06:8e:29: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:0B:D0:A4:31:CE:90:6A:82:0B:02:20:CB:EA:A3:0B:F0:B5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de26fd75-de7a-3945-bdf8-aefa2b40fecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:be:19:56:d2:b5:ac:97:9f:9f:56:2a:f5:07:73:f7:73:3e: bd:1e:c9:27:c2:98:c4:8f:dd:26:48:ac:45:0c:78:b3:0a:cb: 8f:12:96:9c:f4:e1:2c:30:d9:22:39:a4:40:b5:33:3c:34:0a: cb:0a:bc:c6:b2:50:7c:d1:9e:a7:d9:53:00:10:c5:66:d4:09: c4:0d:a3:fb:85:e6:00:d9:8a:22:e3:f8:97:19:57:1c:72:42: b2:68:61:29:93:77:ba:cd:14:33:1b:de:00:ec:d1:f5:f8:30: 30:36:a1:ad:64:3f:cf:e4:8e:af:cc:cc:a7:2e:37:1c:a9:09: c1:25:cc:7d:5f:7e:3c:34:fd:79:78:6d:b9:26:2c:34:fa:bd: 2f:25:79:33:52:89:1f:de:0c:a3:3d:c5:7e:92:77:41:7f:8d: 22:13:93:57:3d:67:b2:e7:71:95:ee:a8:88:4b:1a:ed:19:71: c4:d5:38:2c:cc:6a:7d:70:17:ff:f5:52:8c:cf:70:18:b0:41: f4:22:89:eb:67:98:19:85:70:69:61:dc:2e:e5:09:88:c7:13: c9:32:6b:46:73:04:0b:a7:5c:83:3a:30:42:eb:82:3c:6c:9e: 0c:e6:b8:69:11:e0:be:85:69:2d:19:b6:57:0c:69:d0:5c:1e: 28:bb:25:fa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmrd5ZfSZQOyUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk N2Y1YmQwMDItNzY2Ni00MTg4LTllY2QtMDg5NGY3OGE2NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYrRbpBxWHp1Kx5MJ0F1ZSviUJzQuuPg/7t9 x5RGQiC1ZcEfExjn1E3IqrUahWAwZwBnIvRmMXLnLrppbeAJ2oi0unnBbgMMt0LV 3QlPLxJDu0RwHlv0knNDT2zRNnP8ZUZRKaDuTF5ihQo3oBL9h6LVeIArMbgxgjTk T+QFT8AfIpUl+gFZvdfq2r6I3d5lkMDtF0fOPPR64mqbPmsr2p3vz9sUnamPiQxH v34j5wiRy61XvcskzmDvT4ZoqC7Iqj2wvbQMkIm1jDa/4Q62Ciipk3NMB7v9lHtM YAgFg3h2TtHYfiYF6iEbbEkR2YojaQdLoYI9zACkFX8GjimZIwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOYLC9CkMc6QaoILAiDL6qML8LUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUyNmZkNzUtZGU3YS0z OTQ1LWJkZjgtYWVmYTJiNDBmZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAmvhlW0rWsl5+fVir1B3P3cz69HsknwpjEj90m SKxFDHizCsuPEpac9OEsMNkiOaRAtTM8NArLCrzGslB80Z6n2VMAEMVm1AnEDaP7 heYA2Yoi4/iXGVccckKyaGEpk3e6zRQzG94A7NH1+DAwNqGtZD/P5I6vzMynLjcc qQnBJcx9X348NP15eG25Jiw0+r0vJXkzUokf3gyjPcV+kndBf40iE5NXPWey53GV 7qiISxrtGXHE1TgszGp9cBf/9VKMz3AYsEH0IonrZ5gZhXBpYdwu5QmIxxPJMmtG cwQLp1yDOjBC64I8bJ4M5rhpEeC+hWktGbZXDGnQXB4ouyX6 -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:15 2025 by rpki-client