$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa File: 0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa (raw, json) Hash identifier: qO/QEoGbErPNesSOE4eyCuIsjkjJ+/PeJU3KVpRFfYU= Subject key identifier: 22:FB:6D:AB:55:44:18:5A:07:5C:D7:1F:DC:56:CA:3E:86:A0:2A:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9D8EFA2AEF7CF5B19B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396599 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9d:8e:fa:2a:ef:7c:f5:b1:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=b3589e87-7980-47fe-9a4e-9b9d8b5d4717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:78:74:7a:84:cc:a1:73:ec:38:89:88:76: 36:2e:22:c0:49:f8:4a:63:69:82:2f:81:e7:0a:97: 38:24:42:58:63:a5:df:40:56:a9:9b:2d:40:d6:22: 0f:31:2b:85:c0:7c:8b:c2:2e:ea:70:59:33:5c:0f: 9c:89:65:ef:2e:b5:57:3b:e6:78:16:46:47:3f:5e: 83:e0:ec:88:7b:78:1d:dd:fa:2c:24:02:cc:09:a7: eb:91:05:8a:6d:38:9e:9d:42:7a:49:c2:da:ad:27: 44:b1:03:b0:6a:e1:e7:18:4c:80:2a:13:ff:e5:09: 7d:77:b4:c3:2f:8e:c7:b9:60:05:26:9b:b1:39:71: 70:dc:e3:ba:1c:c9:07:f6:be:57:12:72:4a:cc:c6: 9d:09:43:09:e9:e1:b7:ce:1f:f3:bb:ee:03:b1:a8: 0a:1c:4e:93:44:62:a8:25:73:c7:58:1d:f3:1c:34: 39:c6:c6:86:ef:07:a4:48:89:a1:5c:4c:43:f3:a2: 88:c1:4a:45:b4:de:5e:77:b6:33:97:0d:9e:5c:a0: 47:2e:6d:7f:0b:c6:94:6c:59:ca:b2:57:cf:a4:93: 57:aa:23:9e:90:19:e5:81:1d:da:d4:90:fe:37:06: 00:c2:c1:6c:41:3d:88:50:a7:55:94:06:1d:ce:72: ea:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FB:6D:AB:55:44:18:5A:07:5C:D7:1F:DC:56:CA:3E:86:A0:2A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fc:b0:6f:40:aa:04:eb:3f:bf:da:bf:37:df:2e:ea:c4:2a: 45:f0:5d:90:e5:f9:36:e1:20:3c:f5:c0:ec:c6:34:3e:74:fc: 49:51:6a:db:a0:38:77:b9:db:08:98:6d:69:e9:9f:67:af:ff: cb:92:21:ce:6d:b6:e9:ca:5f:96:c4:17:25:e4:79:b3:cf:3c: 88:6e:e6:7b:d1:65:e2:7b:3d:3b:e2:69:96:bb:36:48:5c:18: d2:6d:15:bb:48:2d:48:d3:30:bf:69:94:57:8e:03:09:9f:14: 2a:bf:15:f5:d6:3e:cd:f8:7f:02:74:c8:fd:f2:7a:d5:9b:27: b5:bb:ac:63:72:ef:ab:d9:91:ad:f7:17:23:d6:c8:76:32:35: bc:31:c4:66:a7:be:01:b5:46:fe:44:75:49:dd:9e:c3:5b:56: 70:90:32:59:10:a0:87:bf:1f:14:90:ea:ab:9a:02:6f:b0:45: 4e:89:6d:5b:92:71:72:54:f1:f5:1c:1d:e3:b4:11:81:92:e9: c7:ee:f0:54:ef:a5:7a:6f:a8:9c:b2:c1:46:5c:5e:b0:1d:fa: 91:88:8a:71:ea:b8:d6:d4:4e:05:40:24:12:dd:05:d5:bc:f3: 8d:2d:10:19:7a:72:c8:6c:c8:06:50:5b:cc:38:72:39:10:88: 2f:99:ce:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK52O+irvfPWxm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YjM1ODllODctNzk4MC00N2ZlLTlhNGUtOWI5ZDhiNWQ0NzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW14dHqEzKFz7DiJiHY2LiLASfhKY2mCL4Hn Cpc4JEJYY6XfQFapmy1A1iIPMSuFwHyLwi7qcFkzXA+ciWXvLrVXO+Z4FkZHP16D 4OyIe3gd3fosJALMCafrkQWKbTienUJ6ScLarSdEsQOwauHnGEyAKhP/5Ql9d7TD L47HuWAFJpuxOXFw3OO6HMkH9r5XEnJKzMadCUMJ6eG3zh/zu+4DsagKHE6TRGKo JXPHWB3zHDQ5xsaG7wekSImhXExD86KIwUpFtN5ed7Yzlw2eXKBHLm1/C8aUbFnK slfPpJNXqiOekBnlgR3a1JD+NwYAwsFsQT2IUKdVlAYdznLqmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCL7batVRBhaB1zXH9xWyj6GoCqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGExMjhjZTQtMmMwZC0z MGRmLTgxZTItMWU0OGZmYzQ2N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBO/LBvQKoE6z+/2r833y7qxCpF8F2Q5fk24SA8 9cDsxjQ+dPxJUWrboDh3udsImG1p6Z9nr//LkiHObbbpyl+WxBcl5HmzzzyIbuZ7 0WXiez074mmWuzZIXBjSbRW7SC1I0zC/aZRXjgMJnxQqvxX11j7N+H8CdMj98nrV mye1u6xjcu+r2ZGt9xcj1sh2MjW8McRmp74BtUb+RHVJ3Z7DW1ZwkDJZEKCHvx8U kOqrmgJvsEVOiW1bknFyVPH1HB3jtBGBkunH7vBU76V6b6icssFGXF6wHfqRiIpx 6rjW1E4FQCQS3QXVvPONLRAZenLIbMgGUFvMOHI5EIgvmc62 -----END CERTIFICATE-----Generated at Mon Aug 4 15:42:04 2025 by rpki-client