$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa File: 2e2c8594-7a4c-3d65-a503-33adbe29a328.roa (raw, json) Hash identifier: dqff+axeAng1ZNI9kYNMirlf492Kln2Ava7hq01rob4= Subject key identifier: 15:44:E7:A1:2B:13:DD:15:DC:42:CE:AC:F9:E9:56:79:BD:92:8A:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BDFD71C03E7F2BA0CD580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396545 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:df:d7:1c:03:e7:f2:ba:0c:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=c22a760f-9ac8-4fb8-be27-70d201ea2f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:e5:4a:5a:e3:c1:25:8e:c6:c3:ed:a1:3e: 74:49:83:7b:c0:dd:6b:4a:df:e4:94:76:9a:0c:cc: db:a5:dc:4d:bc:9d:0a:6a:47:cb:af:aa:e2:9e:69: f4:98:b8:41:d8:c6:ed:d8:d4:f3:a0:8e:3a:cd:87: fa:dd:e4:76:6e:bd:a7:53:32:ef:df:23:51:bb:15: 79:cb:36:14:50:87:41:3f:17:f8:21:ff:84:39:70: 08:02:de:d7:d9:7c:c7:29:7b:c8:a7:92:fe:ed:fa: 44:0b:1e:73:2b:94:a3:91:18:e3:fd:91:5c:44:0f: 90:61:9f:7f:d6:f0:0c:fd:46:75:2c:1b:fb:42:3a: ae:26:df:4e:53:2e:c3:31:79:69:a7:f5:d0:87:99: 93:29:e9:54:f6:f6:50:39:24:0f:7f:71:cf:aa:e9: ec:bf:39:26:bb:3d:49:85:0b:f0:b3:9c:15:6d:59: fd:0d:1e:9c:0e:f1:6a:57:e4:d6:de:e4:41:19:d2: 7e:13:1a:c1:bd:84:1e:31:8a:a8:e6:bf:ab:97:e8: de:44:a1:60:e5:d1:9d:1a:99:f4:92:8c:bb:6c:80: 9c:db:d5:d3:d1:0b:04:f6:ea:eb:fe:13:a3:a7:e8: 5e:65:1d:47:49:1f:d4:d7:78:8f:eb:f1:78:57:e9: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:44:E7:A1:2B:13:DD:15:DC:42:CE:AC:F9:E9:56:79:BD:92:8A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:15:8b:32:63:e3:25:17:ed:f4:ca:99:81:d8:20:88:4c:f2: d6:44:d2:1d:21:15:01:ea:41:19:7d:cf:6f:4b:f0:25:ef:20: a9:1b:7c:e2:46:c1:c7:00:cf:09:31:47:a6:ab:17:13:6d:bd: 45:81:ba:7b:1e:a5:1a:b4:3e:b1:7d:fb:0c:b8:0f:3d:03:43: 7f:d9:42:bd:4d:18:e4:73:65:93:f8:56:b1:34:da:62:00:6c: bb:f0:c4:4d:96:f1:24:1b:d1:99:ab:11:5a:7f:74:09:c1:02: b7:3f:9d:68:f5:d0:b7:3c:a3:b0:d2:d3:f3:4a:44:40:eb:ca: be:77:ad:2f:a7:36:d0:06:50:56:c3:34:e7:bd:44:71:24:fe: b3:22:65:3b:5b:f3:85:49:b3:e8:9c:37:86:49:06:ee:a0:93: f1:87:25:e0:44:bd:5c:1a:15:0c:2b:36:26:26:c4:3f:4e:79: 16:4f:4c:9b:13:ff:dc:4a:67:e1:ad:e3:2c:c8:95:fc:cf:83: b2:8d:c3:83:cd:a6:73:c4:43:55:97:96:f8:c5:4f:1c:61:2f: b0:eb:f3:5f:56:dd:d8:01:60:9e:61:b1:2b:92:31:80:d5:e0: bb:9f:d1:39:16:a1:48:41:67:0a:c3:45:41:75:1c:48:90:b9: a5:c2:c0:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G9/XHAPn8roM1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzIyYTc2MGYtOWFjOC00ZmI4LWJlMjctNzBkMjAxZWEyZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFflSlrjwSWOxsPtoT50SYN7wN1rSt/klHaa DMzbpdxNvJ0KakfLr6rinmn0mLhB2Mbt2NTzoI46zYf63eR2br2nUzLv3yNRuxV5 yzYUUIdBPxf4If+EOXAIAt7X2XzHKXvIp5L+7fpECx5zK5SjkRjj/ZFcRA+QYZ9/ 1vAM/UZ1LBv7QjquJt9OUy7DMXlpp/XQh5mTKelU9vZQOSQPf3HPqunsvzkmuz1J hQvws5wVbVn9DR6cDvFqV+TW3uRBGdJ+ExrBvYQeMYqo5r+rl+jeRKFg5dGdGpn0 koy7bICc29XT0QsE9urr/hOjp+heZR1HSR/U13iP6/F4V+nLUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBVE56ErE90V3ELOrPnpVnm9kopOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmUyYzg1OTQtN2E0Yy0z ZDY1LWE1MDMtMzNhZGJlMjlhMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBeFYsyY+MlF+30ypmB2CCITPLWRNIdIRUB6kEZ fc9vS/Al7yCpG3ziRsHHAM8JMUemqxcTbb1Fgbp7HqUatD6xffsMuA89A0N/2UK9 TRjkc2WT+FaxNNpiAGy78MRNlvEkG9GZqxFaf3QJwQK3P51o9dC3PKOw0tPzSkRA 68q+d60vpzbQBlBWwzTnvURxJP6zImU7W/OFSbPonDeGSQbuoJPxhyXgRL1cGhUM KzYmJsQ/TnkWT0ybE//cSmfhreMsyJX8z4OyjcODzaZzxENVl5b4xU8cYS+w6/Nf Vt3YAWCeYbErkjGA1eC7n9E5FqFIQWcKw0VBdRxIkLmlwsDj -----END CERTIFICATE-----Generated at Mon Aug 4 19:10:34 2025 by rpki-client