$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec4ce038-adb0-340d-991a-17b3e6981613.roa File: ec4ce038-adb0-340d-991a-17b3e6981613.roa (raw, json) Hash identifier: Q6iR21VFnHK594fDrETZxYCj9blEK+PDXP9Rl2SMVZw= Subject key identifier: 36:0B:2A:0F:41:3C:39:46:C0:32:FD:B7:E1:3B:87:C2:79:04:75:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD93670C178E1649F239B8F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec4ce038-adb0-340d-991a-17b3e6981613.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396549 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:70:c1:78:e1:64:9f:23:9b:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=788bf51d-29ab-490e-9295-9156d0a87962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:76:70:5f:13:5a:6f:80:50:ee:19:e4:b0: 70:43:13:94:22:f0:1b:83:b2:fa:0f:3b:9a:87:bb: bd:0f:77:fc:89:d8:94:49:96:27:15:1b:c3:e8:39: 12:f8:68:82:0f:94:ae:9f:3f:37:7a:64:51:b1:e9: ec:90:53:e9:3c:94:5c:e6:99:ae:f4:ea:db:c2:8b: 7b:c0:c0:c8:8f:9e:2a:7d:99:73:c2:e4:e4:9d:11: 0b:7e:22:ce:77:87:b0:ed:5a:ba:b1:c7:af:6d:7e: 64:6e:61:12:75:ea:76:19:36:15:77:3b:df:db:33: ed:64:8a:90:d2:3f:02:d3:8c:f4:07:d7:37:17:c8: f2:e2:66:f4:75:65:27:89:3c:bf:9a:96:d1:66:38: c4:9b:44:eb:64:0a:fe:01:7f:ba:56:a7:70:8a:7a: d2:69:f2:8e:86:93:ee:ec:8e:9d:9b:dc:1d:73:75: a1:e2:51:52:29:69:3c:3a:81:39:db:6e:21:92:b9: 4d:20:cf:e8:64:e8:7a:51:30:82:02:51:b6:fa:f5: 08:42:93:fb:35:42:a1:b3:a5:ee:0e:93:43:92:5d: 16:18:af:33:6d:13:04:1f:4c:c8:c1:a3:1e:58:85: 17:d8:d2:9b:48:df:8a:d1:ea:e8:a0:04:2d:c0:61: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:2A:0F:41:3C:39:46:C0:32:FD:B7:E1:3B:87:C2:79:04:75:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec4ce038-adb0-340d-991a-17b3e6981613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a3:bf:80:06:87:97:51:e9:69:bc:0c:f9:f6:4b:b5:74:8c: d3:4f:b6:0f:2a:1d:50:f3:87:a9:0a:af:7b:99:78:97:96:89: a4:83:26:06:2f:1a:95:8f:3a:cc:76:71:09:82:ce:4e:76:85: 5e:3b:e8:ed:33:65:37:fc:03:6f:17:2d:2d:1d:16:a7:8f:7a: 6b:b2:4f:50:db:62:ff:23:60:3e:2b:4a:16:fc:55:a4:98:40: 18:32:5f:33:9a:f7:75:f4:43:40:b9:89:e9:83:32:d3:63:18: 49:58:21:62:25:46:dc:90:af:16:5d:a7:9b:16:ba:ba:57:b5: e4:58:78:e3:cc:4b:81:ff:0a:e7:9a:9c:e0:2e:a6:82:3c:72: a1:b8:b5:fb:cc:97:54:a1:5e:af:98:c9:c2:bc:af:47:be:3c: c7:69:e0:86:79:6c:4b:af:bd:51:9b:ca:47:cf:38:9a:ee:f3: f5:c7:17:8d:32:c5:62:c7:06:82:4e:b7:99:4c:28:06:80:24: 68:85:83:37:5c:67:ed:6e:33:3d:1f:49:07:73:94:f0:b0:04: 0e:e8:83:60:f8:86:02:3a:d5:02:74:e3:74:1f:2f:70:99:48: 2f:12:90:fb:40:ab:e9:0e:a4:d4:00:30:d4:56:88:00:11:0c: 2b:ae:67:e2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNnDBeOFknyObj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk Nzg4YmY1MWQtMjlhYi00OTBlLTkyOTUtOTE1NmQwYTg3OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh452cF8TWm+AUO4Z5LBwQxOUIvAbg7L6Dzua h7u9D3f8idiUSZYnFRvD6DkS+GiCD5Sunz83emRRsenskFPpPJRc5pmu9Orbwot7 wMDIj54qfZlzwuTknRELfiLOd4ew7Vq6scevbX5kbmESdep2GTYVdzvf2zPtZIqQ 0j8C04z0B9c3F8jy4mb0dWUniTy/mpbRZjjEm0TrZAr+AX+6VqdwinrSafKOhpPu 7I6dm9wdc3Wh4lFSKWk8OoE5224hkrlNIM/oZOh6UTCCAlG2+vUIQpP7NUKhs6Xu DpNDkl0WGK8zbRMEH0zIwaMeWIUX2NKbSN+K0erooAQtwGEDyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDYLKg9BPDlGwDL9t+E7h8J5BHXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM0Y2UwMzgtYWRiMC0z NDBkLTk5MWEtMTdiM2U2OTgxNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBMo7+ABoeXUelpvAz59ku1dIzTT7YPKh1Q84ep Cq97mXiXlomkgyYGLxqVjzrMdnEJgs5OdoVeO+jtM2U3/ANvFy0tHRanj3prsk9Q 22L/I2A+K0oW/FWkmEAYMl8zmvd19ENAuYnpgzLTYxhJWCFiJUbckK8WXaebFrq6 V7XkWHjjzEuB/wrnmpzgLqaCPHKhuLX7zJdUoV6vmMnCvK9HvjzHaeCGeWxLr71R m8pHzzia7vP1xxeNMsVixwaCTreZTCgGgCRohYM3XGftbjM9H0kHc5TwsAQO6INg +IYCOtUCdON0Hy9wmUgvEpD7QKvpDqTUADDUVogAEQwrrmfi -----END CERTIFICATE-----Generated at Sat Aug 23 22:01:19 2025 by rpki-client