$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5153790-54bf-33ac-8c4f-0c829feee75f.roa File: e5153790-54bf-33ac-8c4f-0c829feee75f.roa (raw, json) Hash identifier: foVedjVE1EeKpyepfwu5PJUYzZRCxAcpD/GaeMKdeEA= Subject key identifier: 09:18:74:21:DB:59:35:53:3C:AB:19:89:CE:86:C1:FC:AE:B6:AE:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366D56878ED22C8F68AA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5153790-54bf-33ac-8c4f-0c829feee75f.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397207 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6d:56:87:8e:d2:2c:8f:68:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=7ba663e1-3990-4fef-b2c9-12c96bfbbbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:70:60:13:96:21:26:0b:cd:1c:c3:86:55: 29:78:b8:c8:6b:d9:fd:9c:97:2c:ad:6d:3b:43:50: 45:80:c8:df:2d:d1:5e:cd:a8:4e:a0:a0:4e:27:6e: 3f:e0:68:da:3b:b0:0c:3f:50:1f:64:7b:ce:66:fc: 45:84:79:91:fe:3e:4a:b1:f5:21:80:6e:6c:c0:0e: 2d:1b:87:0b:51:80:d3:0e:00:e5:72:25:87:b8:12: a6:05:0a:4d:e8:3c:3a:42:d4:1a:50:2a:8a:5c:04: 8d:6f:f9:43:86:ca:d2:dd:7f:70:3c:4e:c6:55:76: cd:0c:59:4b:cf:57:3c:f3:20:54:c0:80:1f:48:91: db:63:12:c5:90:d6:37:27:9a:72:4a:4a:a8:da:0b: 0b:57:17:ce:78:c3:fa:ae:ef:20:7e:1b:de:66:80: 18:d5:9a:63:9d:67:68:6f:0e:19:40:0f:c2:1d:18: ea:a0:44:7b:50:12:e9:ad:ed:bd:e0:54:8c:44:51: 73:c2:dd:4d:54:e9:67:42:2e:76:75:fd:ce:71:75: a8:ac:39:80:03:46:24:38:23:08:16:59:f4:f4:d6: a1:d7:87:4d:33:00:a1:b4:f5:15:a9:17:00:62:41: ab:36:85:ac:67:09:e1:6f:b3:06:5e:92:8d:cd:50: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:74:21:DB:59:35:53:3C:AB:19:89:CE:86:C1:FC:AE:B6:AE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5153790-54bf-33ac-8c4f-0c829feee75f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ec:d1:04:c7:75:8c:4d:b9:1c:b5:5f:f1:52:07:b9:83:9d: 30:78:85:b9:5c:b8:06:11:96:62:32:83:77:04:75:ab:c3:92: fd:62:ec:4b:e4:26:46:03:2e:0c:10:be:07:b6:1a:74:a6:55: a5:a6:a2:35:b3:69:10:e2:39:7a:25:5f:c5:e0:53:bb:06:92: 80:b6:72:f7:bf:8b:b7:d8:44:ec:d6:54:d9:fb:22:df:ba:56: b9:78:3b:2f:89:73:70:fe:73:03:ad:1a:92:4f:95:c5:08:b9: 6c:a6:6d:bf:c5:53:12:c3:30:b5:78:95:a4:21:02:ee:06:c2: 77:5e:ec:b0:72:c4:34:6d:e2:55:39:29:42:76:fd:a2:dd:1c: 97:1e:9d:9d:72:19:52:bc:e5:f4:3d:b3:74:16:5a:69:4d:81: 62:6c:97:39:94:fa:d2:ba:fe:aa:3d:3b:b0:c1:fd:eb:1f:32: aa:63:a9:5f:6b:32:d7:55:ce:69:c8:71:1a:5d:55:24:2f:74: c4:4e:70:98:12:f3:a6:40:af:bc:a1:15:91:d9:56:e5:fd:2f: dd:46:d9:44:e5:5b:de:9f:04:85:32:d1:e2:8e:cf:3d:9f:88: 53:8f:6d:eb:6c:41:03:fa:c9:8e:95:71:1a:41:18:06:88:bc: 78:98:69:f7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm1Wh47SLI9oqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk N2JhNjYzZTEtMzk5MC00ZmVmLWIyYzktMTJjOTZiZmJiYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+BwYBOWISYLzRzDhlUpeLjIa9n9nJcsrW07 Q1BFgMjfLdFezahOoKBOJ24/4GjaO7AMP1AfZHvOZvxFhHmR/j5KsfUhgG5swA4t G4cLUYDTDgDlciWHuBKmBQpN6Dw6QtQaUCqKXASNb/lDhsrS3X9wPE7GVXbNDFlL z1c88yBUwIAfSJHbYxLFkNY3J5pySkqo2gsLVxfOeMP6ru8gfhveZoAY1ZpjnWdo bw4ZQA/CHRjqoER7UBLpre294FSMRFFzwt1NVOlnQi52df3OcXWorDmAA0YkOCMI Fln09Nah14dNMwChtPUVqRcAYkGrNoWsZwnhb7MGXpKNzVAN6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAkYdCHbWTVTPKsZic6Gwfyutq5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTUxNTM3OTAtNTRiZi0z M2FjLThjNGYtMGM4MjlmZWVlNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBS7NEEx3WMTbkctV/xUge5g50weIW5XLgGEZZi MoN3BHWrw5L9YuxL5CZGAy4MEL4Hthp0plWlpqI1s2kQ4jl6JV/F4FO7BpKAtnL3 v4u32ETs1lTZ+yLfula5eDsviXNw/nMDrRqST5XFCLlspm2/xVMSwzC1eJWkIQLu BsJ3XuywcsQ0beJVOSlCdv2i3RyXHp2dchlSvOX0PbN0FlppTYFibJc5lPrSuv6q PTuwwf3rHzKqY6lfazLXVc5pyHEaXVUkL3TETnCYEvOmQK+8oRWR2Vbl/S/dRtlE 5VvenwSFMtHijs89n4hTj23rbEED+smOlXEaQRgGiLx4mGn3 -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:32 2025 by rpki-client