$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25620cfd-ec18-3afd-af09-1eae5b83cbee.roa File: 25620cfd-ec18-3afd-af09-1eae5b83cbee.roa (raw, json) Hash identifier: g1K23XzKByoaMKsyf1DuYOx/1FAiaj4cAgJveuM9HLs= Subject key identifier: 12:F3:EF:3B:BC:F0:4D:9E:B2:67:9A:94:4D:FE:D2:E4:17:42:07:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B94A28820FAFF1995AE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25620cfd-ec18-3afd-af09-1eae5b83cbee.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 397210 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:94:a2:88:20:fa:ff:19:95:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=cb0825d7-315d-467c-afd8-27faa8e61916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:19:62:f3:0c:26:3d:58:e5:cd:1e:5d:f1: 68:b2:a3:c0:ea:7d:f7:bd:4c:b8:0c:01:d4:78:dc: 8b:80:67:c7:dd:89:80:c5:ea:52:a0:92:c9:f1:94: ab:8a:a1:0b:af:2b:dd:9e:91:f7:95:fd:1d:ba:ff: 6a:ff:16:33:1a:ea:25:99:24:70:0c:4a:1f:0e:8e: f3:7b:28:a3:15:3f:2a:14:f9:3d:be:1f:b5:07:63: 43:45:14:6a:87:df:68:d8:23:04:3f:74:b2:93:df: 36:b0:71:64:d4:f7:26:2f:0a:bc:44:fa:78:3e:f2: d8:34:ab:a1:e4:7a:87:55:05:51:10:fb:44:12:f6: fa:f1:2b:1d:5d:8d:7a:7c:eb:ed:06:06:29:37:00: 21:cb:fb:3a:cc:d8:76:07:2d:21:98:18:6f:25:46: 16:79:53:ec:53:b8:65:a0:dd:3d:95:a0:c8:64:30: 67:e0:71:98:f8:88:f4:f6:42:24:4e:45:ba:11:ca: e1:ec:60:a3:cc:67:3f:b7:65:c1:cf:0c:c1:f5:6b: ab:2e:9b:1f:da:12:a5:1a:32:20:c1:09:5f:cf:c6: 00:a4:34:8e:b3:90:5c:90:03:e0:f4:da:e0:ab:65: 7d:79:fd:73:63:7b:98:23:e2:2b:fc:01:96:cc:52: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:EF:3B:BC:F0:4D:9E:B2:67:9A:94:4D:FE:D2:E4:17:42:07:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25620cfd-ec18-3afd-af09-1eae5b83cbee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3d:e8:4e:cb:48:e1:c8:2d:2a:c5:1b:08:8c:d4:44:be:58: 74:fb:e0:76:e7:f6:fe:08:3a:8e:d4:c9:2b:8e:48:55:ef:6b: 48:2b:af:1e:1b:4a:8a:1e:ef:8d:7d:a8:5a:2c:16:c0:3e:04: 36:6c:8e:83:82:f1:22:d2:b3:7f:92:0d:23:1b:b5:24:cb:a2: e2:fb:10:49:a4:aa:d4:f5:04:3b:74:8a:89:73:2c:7e:53:1a: 62:81:78:aa:69:f5:eb:eb:f5:b9:93:87:cf:99:95:7a:ea:8b: 0a:d8:db:aa:e1:39:c0:dd:ee:01:9d:01:58:79:be:90:57:d9: 21:dd:75:47:e7:42:4f:1f:06:44:5d:31:80:64:0e:a9:01:99: 27:eb:a8:ab:bb:8c:5c:01:a4:52:68:21:39:de:3b:13:f2:d3: 47:6b:15:21:d7:8c:dd:59:6c:1a:5a:89:eb:35:ed:fb:e2:8f: 91:e5:5b:ae:e4:01:2e:98:e0:cc:bf:06:07:1e:0d:06:3f:fc: 7a:e6:25:61:b3:5e:2f:ec:a6:a0:de:32:51:3a:6b:31:40:54: ed:fd:df:0c:4c:6a:de:d8:ae:ba:45:30:80:e7:e0:03:88:88: 34:c4:7f:2b:6e:24:66:07:9e:76:21:ad:d2:7f:a7:e4:ed:62: b6:e8:ab:75 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5SiiCD6/xmVroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2IwODI1ZDctMzE1ZC00NjdjLWFmZDgtMjdmYWE4ZTYxOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMcZYvMMJj1Y5c0eXfFosqPA6n33vUy4DAHU eNyLgGfH3YmAxepSoJLJ8ZSriqELryvdnpH3lf0duv9q/xYzGuolmSRwDEofDo7z eyijFT8qFPk9vh+1B2NDRRRqh99o2CMEP3Syk982sHFk1PcmLwq8RPp4PvLYNKuh 5HqHVQVREPtEEvb68SsdXY16fOvtBgYpNwAhy/s6zNh2By0hmBhvJUYWeVPsU7hl oN09laDIZDBn4HGY+Ij09kIkTkW6Ecrh7GCjzGc/t2XBzwzB9WurLpsf2hKlGjIg wQlfz8YApDSOs5BckAPg9Nrgq2V9ef1zY3uYI+Ir/AGWzFLOWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBLz7zu88E2esmealE3+0uQXQgd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjU2MjBjZmQtZWMxOC0z YWZkLWFmMDktMWVhZTViODNjYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyPehOy0jhyC0qxRsIjNREvlh0++B25/b+CDqO 1MkrjkhV72tIK68eG0qKHu+NfahaLBbAPgQ2bI6DgvEi0rN/kg0jG7Uky6Li+xBJ pKrU9QQ7dIqJcyx+UxpigXiqafXr6/W5k4fPmZV66osK2Nuq4TnA3e4BnQFYeb6Q V9kh3XVH50JPHwZEXTGAZA6pAZkn66iru4xcAaRSaCE53jsT8tNHaxUh14zdWWwa WonrNe374o+R5Vuu5AEumODMvwYHHg0GP/x65iVhs14v7Kag3jJROmsxQFTt/d8M TGre2K66RTCA5+ADiIg0xH8rbiRmB552Ia3Sf6fk7WK26Kt1 -----END CERTIFICATE-----Generated at Mon Aug 4 14:18:37 2025 by rpki-client