$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa File: 0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa (raw, json) Hash identifier: GnapWw+hXB+erVYQguVBvdv1MQTSW7qp56GFE67aWV4= Subject key identifier: EA:E9:CA:98:35:E4:71:54:80:15:F8:C8:A5:DF:54:89:5A:0D:23:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA85BBD93093430DCFBB87FD0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 0 IP address blocks: 2620:74:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:bd:93:09:34:30:dc:fb:b8:7f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=e84bbf31-3ffe-49a5-8079-6c4c9f3d6153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:01:c9:96:4d:5a:29:ea:7a:6d:a3:d0:6c: d2:26:ba:72:3a:a0:08:00:0e:aa:3d:26:5a:b9:8f: a4:cc:96:99:88:00:aa:c1:9f:49:40:61:14:a7:36: 1d:18:df:30:44:14:d4:6d:03:3f:08:08:72:a3:cd: 83:c9:98:4a:1c:0e:d1:5a:87:c2:41:b6:b4:85:c8: 80:42:96:1b:44:c2:aa:07:b2:b7:ee:5c:f1:d9:88: 30:4f:30:76:81:13:4f:be:db:a5:2c:f7:e7:77:c0: 1a:bd:31:e7:3e:f9:e4:88:b9:8a:71:e0:f1:80:6d: 76:90:04:fb:f7:45:06:38:7b:09:0e:8a:89:33:ea: 9e:1f:c7:74:02:ae:c8:dd:fc:89:ec:cf:0b:97:0b: 48:d3:12:0e:f3:31:16:21:44:52:00:25:42:03:07: 88:28:b1:f2:3b:7a:fd:fc:de:58:9c:c4:3d:10:59: 5d:cd:48:0a:e7:b1:2f:fc:36:e8:07:c8:b5:e3:f6: 8a:9e:2f:a2:c7:b0:27:25:4d:e8:0f:1d:82:15:c8: 16:96:60:d0:e1:0f:11:e1:eb:17:b4:5b:39:b2:47: 45:5d:b4:bd:03:11:39:20:6b:a6:e0:ab:d3:a6:70: 7d:a1:46:33:5c:0a:a4:dc:f1:1e:59:78:10:46:84: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:CA:98:35:E4:71:54:80:15:F8:C8:A5:DF:54:89:5A:0D:23:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ee:46:54:7d:9f:67:43:f3:dc:84:31:e2:95:d0:45:50:08: 2c:ec:9c:9e:e7:de:7b:75:19:b8:ea:2a:29:43:6a:92:06:97: b8:80:7a:d2:56:ec:85:5c:1f:9b:b0:78:97:d8:f8:f5:11:9f: b0:5c:2a:6b:81:b4:e0:c3:91:b5:11:78:f1:c4:e8:d1:61:77: bf:c2:3e:6c:c5:c5:0f:0c:66:36:d0:67:0b:2e:da:11:e2:66: b5:e5:0f:cc:3d:ac:47:45:d4:5b:2b:f4:95:93:d4:78:41:f4: 5f:91:9b:2b:4f:c8:9f:9d:5c:63:35:67:59:0c:33:f2:ef:c3: eb:13:ed:db:a7:b6:7d:cb:0d:1a:4c:24:74:d3:83:03:42:86: 6e:5b:dd:cc:29:ad:2d:de:fc:5c:ce:41:fb:a8:3f:61:a7:9a: 1d:de:e2:ec:fa:e9:85:48:d5:e2:3f:9b:aa:66:7a:7d:90:90: cf:c4:ed:32:55:01:4f:ab:10:97:1a:80:df:24:0b:94:84:94: b4:74:ee:9e:3d:7d:c7:3b:d9:37:c7:c8:83:93:42:e8:53:bf: 8f:e8:0b:58:06:f7:39:22:b3:77:c3:8f:1c:2a:80:9c:b0:3d: 83:29:9f:8d:6c:09:4a:44:d6:c3:d1:09:16:90:9a:8f:0f:2e: aa:d6:76:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqoW72TCTQw3Pu4f9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZTg0YmJmMzEtM2ZmZS00OWE1LTgwNzktNmM0YzlmM2Q2MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+UByZZNWinqem2j0GzSJrpyOqAIAA6qPSZa uY+kzJaZiACqwZ9JQGEUpzYdGN8wRBTUbQM/CAhyo82DyZhKHA7RWofCQba0hciA QpYbRMKqB7K37lzx2YgwTzB2gRNPvtulLPfnd8AavTHnPvnkiLmKceDxgG12kAT7 90UGOHsJDoqJM+qeH8d0Aq7I3fyJ7M8LlwtI0xIO8zEWIURSACVCAweIKLHyO3r9 /N5YnMQ9EFldzUgK57Ev/DboB8i14/aKni+ix7AnJU3oDx2CFcgWlmDQ4Q8R4esX tFs5skdFXbS9AxE5IGum4KvTpnB9oUYzXAqk3PEeWXgQRoS3RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOrpypg15HFUgBX4yKXfVIlaDSPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNhZDJkOTktNGI1ZC0z ZjNkLTg3M2UtOTY5NGE2ZjViZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHuRlR9n2dD89yEMeKV0EVQCCzsnJ7n3nt1GbjqKilDapIGl7iA etJW7IVcH5uweJfY+PURn7BcKmuBtODDkbURePHE6NFhd7/CPmzFxQ8MZjbQZwsu 2hHiZrXlD8w9rEdF1Fsr9JWT1HhB9F+RmytPyJ+dXGM1Z1kMM/Lvw+sT7duntn3L DRpMJHTTgwNChm5b3cwprS3e/FzOQfuoP2Gnmh3e4uz66YVI1eI/m6pmen2QkM/E 7TJVAU+rEJcagN8kC5SElLR07p49fcc72TfHyIOTQuhTv4/oC1gG9zkis3fDjxwq gJywPYMpn41sCUpE1sPRCRaQmo8PLqrWdn8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:34 2025 by rpki-client