$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa File: 343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa (raw, json) Hash identifier: S9UtP52svDRIuQztbNaSZlEeawCnQ40yaEu2GPpiJRU= Subject key identifier: E4:3E:CF:94:C4:37:E9:7D:A7:B3:72:41:BD:FE:4A:93:07:F7:1B:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE4ACB2F7D1F8D61F6040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36623 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e4:ac:b2:f7:d1:f8:d6:1f:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=7bab38ac-022f-4134-b1bf-7bb6ac3eb931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:d3:93:a4:31:7e:cf:4e:ff:93:e4:e8:d0: 90:27:2b:25:df:a8:4b:6f:a6:ee:cd:ef:91:ce:c7: 77:f4:98:f0:91:ba:33:98:2b:b1:7e:7c:c1:d0:6b: a8:74:a7:47:09:f8:21:e5:7b:8e:7a:ad:ea:7c:4e: 6d:53:93:18:83:a0:d1:8a:99:1c:af:e1:8a:32:59: 99:28:99:7e:43:96:cc:0e:0d:83:b8:16:6f:3e:52: e1:4e:81:18:83:5b:4f:0c:cc:71:61:86:d1:e8:6f: c3:ce:e6:fd:71:b3:0a:93:00:27:20:e5:b0:e5:0f: ed:39:3d:6b:ac:8f:45:97:eb:48:37:62:15:6b:d6: bd:98:5f:78:1f:c5:37:12:48:0a:b5:a7:57:2d:e4: c5:32:c1:8e:52:5c:56:1e:51:77:cc:22:b0:f6:ec: f8:f7:dd:58:8c:c6:a4:49:a3:f6:14:fa:45:32:69: 1d:52:f9:68:93:ed:cb:5e:61:a1:85:9b:74:91:96: 91:12:d8:92:a5:73:3f:49:8e:81:28:34:78:62:e1: a7:af:e9:7a:ab:ac:23:82:11:f0:37:8f:24:b4:88: 74:4d:fa:67:d5:c5:3c:2f:aa:fc:9f:e6:5f:25:48: 0a:8c:a4:bf:e7:07:eb:bf:6c:91:0b:aa:bd:2f:1e: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3E:CF:94:C4:37:E9:7D:A7:B3:72:41:BD:FE:4A:93:07:F7:1B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ac:0a:cb:15:14:9b:47:7a:8a:8c:18:6f:0a:af:01:47:d2: 40:98:d7:ae:a8:9f:90:47:15:d1:66:d3:99:23:94:91:fe:03: e0:28:5d:aa:e7:d5:05:62:53:6c:1d:a6:35:79:6f:0f:79:b9: 89:28:94:e2:19:d2:bd:9e:16:4d:dc:0a:33:c2:85:71:ae:b3: fa:00:92:3c:c5:61:84:64:a1:49:d7:ca:c7:72:47:b9:32:3d: 29:30:56:f5:5f:e1:76:a4:ce:dd:37:85:29:15:11:2f:e2:a5: 09:e5:51:21:8d:b4:3e:10:40:fe:f9:de:8b:c4:fc:00:3d:fe: 4b:68:1f:e5:28:eb:39:78:7c:90:e5:09:ac:16:16:17:80:7a: 24:c1:80:a9:62:42:a0:4f:f2:18:5c:a2:76:7e:80:d1:de:2e: 8b:1d:a7:75:d1:4e:6a:44:e6:ec:62:11:12:3f:98:c2:08:fb: 04:5e:13:27:6d:d9:9b:c0:3c:27:d8:c9:73:32:60:fb:9e:01: 77:5f:e7:df:83:c4:94:7e:cc:49:1c:ce:df:41:5c:d3:07:c1: f5:d1:6c:bd:1c:05:d4:9e:82:53:31:94:3d:34:99:70:2b:3f: 39:45:c8:e3:66:10:de:5f:c6:b7:b6:a0:60:d9:13:bb:5b:54: 1d:e9:42:aa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+SssvfR+NYfYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk N2JhYjM4YWMtMDIyZi00MTM0LWIxYmYtN2JiNmFjM2ViOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEXTk6Qxfs9O/5Pk6NCQJysl36hLb6buze+R zsd39JjwkbozmCuxfnzB0GuodKdHCfgh5XuOeq3qfE5tU5MYg6DRipkcr+GKMlmZ KJl+Q5bMDg2DuBZvPlLhToEYg1tPDMxxYYbR6G/Dzub9cbMKkwAnIOWw5Q/tOT1r rI9Fl+tIN2IVa9a9mF94H8U3EkgKtadXLeTFMsGOUlxWHlF3zCKw9uz4991YjMak SaP2FPpFMmkdUvlok+3LXmGhhZt0kZaREtiSpXM/SY6BKDR4YuGnr+l6q6wjghHw N48ktIh0Tfpn1cU8L6r8n+ZfJUgKjKS/5wfrv2yRC6q9Lx51YwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOQ+z5TEN+l9p7NyQb3+SpMH9xs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQzYmY0ZGItYTEwMy0z YmMwLWIxZDMtZTQzZjAwZDVlNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4rArLFRSbR3qKjBhvCq8BR9JAmNeuqJ+QRxXR ZtOZI5SR/gPgKF2q59UFYlNsHaY1eW8PebmJKJTiGdK9nhZN3AozwoVxrrP6AJI8 xWGEZKFJ18rHcke5Mj0pMFb1X+F2pM7dN4UpFREv4qUJ5VEhjbQ+EED++d6LxPwA Pf5LaB/lKOs5eHyQ5QmsFhYXgHokwYCpYkKgT/IYXKJ2foDR3i6LHad10U5qRObs YhESP5jCCPsEXhMnbdmbwDwn2MlzMmD7ngF3X+ffg8SUfsxJHM7fQVzTB8H10Wy9 HAXUnoJTMZQ9NJlwKz85RcjjZhDeX8a3tqBg2RO7W1Qd6UKq -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:56 2025 by rpki-client