$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1149ad7e-9593-332d-a235-c8e1c09c51d6.roa File: 1149ad7e-9593-332d-a235-c8e1c09c51d6.roa (raw, json) Hash identifier: NxlZD11JMdwz+N4XBlBGm2zkElDsnaMZeZRpFleM6kU= Subject key identifier: 83:10:A6:F8:A5:F5:A9:F6:DA:87:1A:F0:23:2E:EE:72:DF:1D:0D:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9B76418F7AD97928D450 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1149ad7e-9593-332d-a235-c8e1c09c51d6.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397201 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9b:76:41:8f:7a:d9:79:28:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=5cf9db09-ae94-4f20-b359-9c7d786f7706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:20:ba:e7:2b:10:45:8a:4c:10:08:ba:72: 0a:f9:e4:9e:ae:5d:75:a1:ab:6e:b9:32:4d:ed:52: 23:55:92:2f:3c:11:c6:c4:4c:0f:3a:35:36:90:f3: 7a:6e:8d:73:0b:0d:45:51:8f:48:01:a0:64:bf:c7: ec:9f:d9:71:7f:71:76:ef:ea:53:2d:43:b0:c6:e7: 8e:f2:82:9a:d4:1f:03:ef:ae:5d:6b:f3:4b:e4:dd: cc:9b:85:aa:59:ba:23:3c:c2:b7:e9:3a:32:4d:31: 5b:cd:6e:39:e5:50:fc:9a:70:69:47:9d:53:b7:39: 55:cf:ff:86:32:28:c9:9a:c9:2b:1b:bf:c3:24:e3: fa:12:09:d4:58:f1:ad:ac:78:c1:a7:85:19:9f:a5: fa:29:12:eb:01:3b:a2:6c:38:42:82:8c:f2:fa:17: 69:f9:6e:2d:8d:88:d0:ec:79:6f:04:8d:f7:3a:ae: 26:f6:a0:51:7e:32:a8:a7:95:ac:bd:46:87:1c:28: ca:84:fd:03:b1:0c:e4:7e:2a:34:9e:47:07:45:53: e9:8c:88:0d:0b:68:2f:69:8f:16:1d:be:cb:33:57: ca:58:7d:f3:b3:72:1e:1a:01:8b:6c:d2:81:ae:ee: 7c:f6:ba:f3:e2:e0:62:00:bd:8a:25:19:39:a6:90: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:A6:F8:A5:F5:A9:F6:DA:87:1A:F0:23:2E:EE:72:DF:1D:0D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1149ad7e-9593-332d-a235-c8e1c09c51d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6f:b5:d1:d4:1e:87:7d:1b:ec:1d:bd:e2:ff:48:31:d7:76: 5d:3f:36:f4:0a:42:a1:6d:c3:59:6c:e9:cf:23:ec:a0:b6:9d: b2:82:70:b8:54:17:3c:3a:c3:9d:ff:5c:7e:7d:e6:08:0d:b3: a1:9e:7d:45:f3:d2:1c:b4:8c:50:8f:39:da:58:13:b4:cd:85: 4d:02:cd:ef:c8:1a:7f:3a:a1:c5:fa:35:a7:61:3f:db:6a:79: 92:22:3a:01:cd:f4:bc:bf:4b:7f:2f:f5:7c:db:b7:57:8d:1e: eb:56:98:2a:79:13:26:c0:f4:85:d4:e9:37:91:c6:55:9c:3e: 21:2c:ec:3b:74:61:32:0f:fa:c7:52:ef:b4:10:f2:35:8b:49: fd:f8:29:75:79:5a:df:62:e2:e8:bf:da:f2:00:9e:fe:91:c4: 3b:ff:ee:4f:be:3c:6d:95:50:34:a9:4d:41:43:4e:a6:ba:cc: 5a:8b:0a:2f:0a:95:21:0a:45:b7:b0:70:06:2b:eb:30:aa:81: 5e:a5:a4:ba:ed:f0:2c:44:9e:24:32:c1:3a:ac:4f:67:b3:99: dd:bd:fc:57:ac:f6:02:28:17:82:e1:9c:bd:71:54:63:c3:af: bc:14:14:ab:33:93:02:f4:66:33:99:c2:06:14:f3:e7:be:10: 6d:4d:c8:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5t2QY962Xko1FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NWNmOWRiMDktYWU5NC00ZjIwLWIzNTktOWM3ZDc4NmY3NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3kguucrEEWKTBAIunIK+eSerl11oatuuTJN 7VIjVZIvPBHGxEwPOjU2kPN6bo1zCw1FUY9IAaBkv8fsn9lxf3F27+pTLUOwxueO 8oKa1B8D765da/NL5N3Mm4WqWbojPMK36ToyTTFbzW455VD8mnBpR51TtzlVz/+G MijJmskrG7/DJOP6EgnUWPGtrHjBp4UZn6X6KRLrATuibDhCgozy+hdp+W4tjYjQ 7HlvBI33Oq4m9qBRfjKop5WsvUaHHCjKhP0DsQzkfio0nkcHRVPpjIgNC2gvaY8W Hb7LM1fKWH3zs3IeGgGLbNKBru589rrz4uBiAL2KJRk5ppBSHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIMQpvil9an22oca8CMu7nLfHQ3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTE0OWFkN2UtOTU5My0z MzJkLWEyMzUtYzhlMWMwOWM1MWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPb7XR1B6HfRvsHb3i/0gx13ZdPzb0CkKhbcNZ bOnPI+ygtp2ygnC4VBc8OsOd/1x+feYIDbOhnn1F89IctIxQjznaWBO0zYVNAs3v yBp/OqHF+jWnYT/banmSIjoBzfS8v0t/L/V827dXjR7rVpgqeRMmwPSF1Ok3kcZV nD4hLOw7dGEyD/rHUu+0EPI1i0n9+Cl1eVrfYuLov9ryAJ7+kcQ7/+5PvjxtlVA0 qU1BQ06musxaiwovCpUhCkW3sHAGK+swqoFepaS67fAsRJ4kMsE6rE9ns5ndvfxX rPYCKBeC4Zy9cVRjw6+8FBSrM5MC9GYzmcIGFPPnvhBtTcgL -----END CERTIFICATE-----Generated at Tue Aug 5 17:17:05 2025 by rpki-client