$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06435325-c558-39cc-b2ac-d85b82829c6a.roa File: 06435325-c558-39cc-b2ac-d85b82829c6a.roa (raw, json) Hash identifier: bNgfoHo7hWK+BMXTIcoLO5eCng/5iONfyY6Xxj49BN0= Subject key identifier: 8E:7D:0A:6B:DF:77:CB:81:74:5A:30:EC:A4:89:18:6B:CF:B9:C5:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE3FFC1CE7D59A79A7B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06435325-c558-39cc-b2ac-d85b82829c6a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396605 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e3:ff:c1:ce:7d:59:a7:9a:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=07760fb2-c056-4108-8631-e1408356df69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:00:6a:3c:3a:ea:3f:75:4e:8c:ac:1c:3c:53: 0f:b7:4b:b7:47:ab:cb:16:6d:51:b1:76:92:24:66: 60:d8:10:e4:9b:e2:ae:09:57:3b:2b:5b:0d:24:02: a3:5d:f4:9c:4b:51:88:3a:11:6f:a6:7a:8e:2b:34: f5:a4:9b:42:4c:05:3d:31:9b:57:d0:eb:a1:c0:53: 15:89:19:45:d4:25:c4:79:98:f2:86:3e:1d:bc:80: ff:f1:12:e7:0f:7a:08:73:99:2f:f4:b9:1c:b8:2f: 44:46:f0:a6:b6:0d:59:40:92:21:e3:05:4b:87:bd: d7:94:35:85:24:9e:34:72:2a:04:4a:3d:69:19:8b: 42:1f:63:97:63:f2:86:22:b0:ba:0e:15:26:bb:3a: 8c:ec:48:2f:94:1c:98:a7:11:23:d3:a2:66:19:98: 69:07:0f:61:1c:f6:5a:21:92:f9:3e:6c:c7:4b:6e: 54:d7:87:de:f3:26:ed:35:ad:39:ea:79:5d:b5:04: 73:a3:8b:1b:9b:7e:42:4d:f2:14:b2:d4:ee:13:34: 4a:ba:fa:7d:2c:0f:82:82:22:8b:00:05:e4:e0:b1: 7a:cd:23:a9:50:9d:d5:8d:8f:cb:a4:ab:03:00:fd: e0:3d:84:b7:8f:33:f4:9d:e3:88:2f:0a:eb:44:87: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7D:0A:6B:DF:77:CB:81:74:5A:30:EC:A4:89:18:6B:CF:B9:C5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06435325-c558-39cc-b2ac-d85b82829c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:33:6c:b1:12:bc:48:91:d9:50:87:65:c7:d5:5a:a4:fa:37: 92:ee:ec:61:72:ce:5d:b1:6e:27:1d:a0:ac:c9:aa:89:91:f6: 68:ae:8a:31:83:fe:2a:df:b1:96:79:d2:f0:f0:b3:f8:1f:18: 44:f5:46:a3:e8:c4:c7:36:c0:84:fe:62:38:01:bd:3b:f5:5f: e4:7d:ba:2e:1f:41:b8:19:89:7f:7c:d1:d9:19:35:77:be:26: d6:41:2c:a5:5a:2c:df:bf:e0:53:7b:b4:f8:3f:78:5d:89:7d: 1b:bc:77:c0:d0:1f:0e:10:b8:57:6d:57:3f:b0:eb:0e:42:10: 8b:f0:4a:b2:ea:96:bd:9b:a1:b6:20:fb:f6:09:8e:98:10:0d: f3:f2:9c:11:31:87:63:0e:f8:4f:8c:cf:29:a2:ff:34:e3:b9: 08:a5:b4:99:5f:8d:20:1a:25:12:54:7d:40:26:c8:7f:d8:8e: e0:a7:ee:01:53:02:fd:24:44:3d:78:66:89:3d:4b:60:df:f2: 30:b8:34:bb:dc:06:a8:9b:51:c6:4c:c8:ea:b6:60:d3:80:31: 26:ce:4a:ba:8a:02:e5:64:d8:6c:47:f9:e7:78:61:a9:58:46: 7f:9f:63:31:0a:bf:aa:20:7b:48:91:bf:29:02:df:e9:f4:e5: 7c:0e:2d:85 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+P/wc59Waeae0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDc3NjBmYjItYzA1Ni00MTA4LTg2MzEtZTE0MDgzNTZkZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwBqPDrqP3VOjKwcPFMPt0u3R6vLFm1RsXaS JGZg2BDkm+KuCVc7K1sNJAKjXfScS1GIOhFvpnqOKzT1pJtCTAU9MZtX0OuhwFMV iRlF1CXEeZjyhj4dvID/8RLnD3oIc5kv9LkcuC9ERvCmtg1ZQJIh4wVLh73XlDWF JJ40cioESj1pGYtCH2OXY/KGIrC6DhUmuzqM7EgvlByYpxEj06JmGZhpBw9hHPZa IZL5PmzHS25U14fe8ybtNa056nldtQRzo4sbm35CTfIUstTuEzRKuvp9LA+CgiKL AAXk4LF6zSOpUJ3VjY/LpKsDAP3gPYS3jzP0neOILwrrRIfj/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI59Cmvfd8uBdFow7KSJGGvPucX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDY0MzUzMjUtYzU1OC0z OWNjLWIyYWMtZDg1YjgyODI5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnM2yxErxIkdlQh2XH1Vqk+jeS7uxhcs5dsW4n HaCsyaqJkfZorooxg/4q37GWedLw8LP4HxhE9Uaj6MTHNsCE/mI4Ab079V/kfbou H0G4GYl/fNHZGTV3vibWQSylWizfv+BTe7T4P3hdiX0bvHfA0B8OELhXbVc/sOsO QhCL8Eqy6pa9m6G2IPv2CY6YEA3z8pwRMYdjDvhPjM8pov8047kIpbSZX40gGiUS VH1AJsh/2I7gp+4BUwL9JEQ9eGaJPUtg3/IwuDS73Aaom1HGTMjqtmDTgDEmzkq6 igLlZNhsR/nneGGpWEZ/n2MxCr+qIHtIkb8pAt/p9OV8Di2F -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:19 2025 by rpki-client