$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa File: 5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa (raw, json) Hash identifier: Ct6GQvJFGrAe19OyR2YhYsxoX45shcDKSxl/NEy0ifU= Subject key identifier: 7D:7C:6A:58:B7:62:8F:FA:89:68:46:63:BC:C1:3F:02:65:D8:60:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9BE199C6FDB502EDDB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396608 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9b:e1:99:c6:fd:b5:02:ed:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=823dd603-46b0-49dc-8075-8cdc2f972d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:13:26:ec:65:44:4b:7a:6f:6e:52:27:03: 05:d8:fb:83:a4:2e:ed:71:f1:9b:ab:e6:a7:67:a6: a2:fe:b3:94:61:b9:c3:d1:d9:db:3a:03:ff:14:50: 8b:f5:c8:c1:94:4d:f4:aa:4c:e4:e7:f3:5d:ec:e9: 00:28:e0:64:7d:40:88:ce:2d:d6:ee:c6:62:51:00: 54:f7:9c:d4:d4:4d:19:33:bf:3b:0f:dc:af:85:4b: 2d:23:2e:e9:67:b1:59:cf:18:83:44:7f:bc:8a:a3: bf:ef:e9:d4:16:35:f5:99:07:77:88:c6:d5:0e:d2: 4e:c1:7f:fb:d9:c7:6c:1b:cb:b3:c7:cd:1c:65:1e: 00:46:6d:b9:51:c7:4f:39:46:f2:4b:95:56:0d:7f: 16:6c:7d:c1:31:d6:24:57:81:6c:25:6b:39:7e:8c: 8c:ba:ff:ab:bd:5a:4d:36:34:e4:a0:17:1a:cd:65: 5f:38:3c:8d:2f:69:16:0e:c5:66:c6:9d:c8:7c:07: aa:1f:05:48:b4:e6:45:e3:60:9f:b7:e9:ec:62:c4: d9:cd:89:de:08:21:d9:a9:0c:64:c5:c2:2b:2d:4e: de:b2:58:00:95:10:dc:29:4c:d8:4e:00:87:57:3f: 3e:94:a0:42:82:0f:52:f8:d0:77:1e:b0:30:79:b2: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:6A:58:B7:62:8F:FA:89:68:46:63:BC:C1:3F:02:65:D8:60:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:28:eb:3e:83:94:6c:23:b0:38:17:3e:2d:ca:16:6e:ae:9f: 68:02:60:04:2b:e8:87:b5:6d:44:99:bf:f9:a2:df:59:37:1f: 5b:e5:d2:1f:07:7c:ef:00:13:a3:92:5e:b7:06:6c:5a:16:08: 42:85:14:c2:3c:6d:30:37:80:96:eb:dc:65:a8:10:80:e7:45: c6:d2:f2:74:88:85:f8:f9:5a:de:35:3d:2e:87:2b:84:e8:ab: f9:31:45:58:a5:af:2e:5d:47:9a:3d:21:14:5d:a1:b0:cf:e1: 6b:b9:6a:d7:86:62:f3:cb:70:ea:7f:af:61:da:bf:e9:8d:d5: de:1b:9c:33:5c:73:76:7a:59:3c:98:5b:93:db:a8:5a:d2:00: 14:2c:81:01:77:1a:3c:1c:57:32:3b:a6:a6:76:32:af:06:94: 2c:ae:33:00:5b:d8:26:d0:61:6e:47:75:96:35:c2:f7:e1:15: 46:9d:d9:cf:15:71:dd:61:96:1a:62:49:65:ab:f1:10:46:73: 4c:c9:cd:ed:a7:ff:69:5a:06:25:38:77:01:6d:73:24:67:e4: d5:24:0c:ef:ae:ba:1f:82:97:68:94:0d:3b:c5:75:44:a0:bf: e9:e0:c3:23:ca:52:d1:86:26:b2:78:23:4b:07:88:23:90:b5: 47:26:62:cf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5vhmcb9tQLt2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ODIzZGQ2MDMtNDZiMC00OWRjLTgwNzUtOGNkYzJmOTcyZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovMTJuxlREt6b25SJwMF2PuDpC7tcfGbq+an Z6ai/rOUYbnD0dnbOgP/FFCL9cjBlE30qkzk5/Nd7OkAKOBkfUCIzi3W7sZiUQBU 95zU1E0ZM787D9yvhUstIy7pZ7FZzxiDRH+8iqO/7+nUFjX1mQd3iMbVDtJOwX/7 2cdsG8uzx80cZR4ARm25UcdPOUbyS5VWDX8WbH3BMdYkV4FsJWs5foyMuv+rvVpN NjTkoBcazWVfODyNL2kWDsVmxp3IfAeqHwVItOZF42Cft+nsYsTZzYneCCHZqQxk xcIrLU7eslgAlRDcKUzYTgCHVz8+lKBCgg9S+NB3HrAwebKZjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH18ali3Yo/6iWhGY7zBPwJl2GDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWEyNmUwYmYtZGZlNC0z NGRmLTkwN2YtMWI0NWE2YjFjYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBWKOs+g5RsI7A4Fz4tyhZurp9oAmAEK+iHtW1E mb/5ot9ZNx9b5dIfB3zvABOjkl63BmxaFghChRTCPG0wN4CW69xlqBCA50XG0vJ0 iIX4+VreNT0uhyuE6Kv5MUVYpa8uXUeaPSEUXaGwz+FruWrXhmLzy3Dqf69h2r/p jdXeG5wzXHN2elk8mFuT26ha0gAULIEBdxo8HFcyO6amdjKvBpQsrjMAW9gm0GFu R3WWNcL34RVGndnPFXHdYZYaYkllq/EQRnNMyc3tp/9pWgYlOHcBbXMkZ+TVJAzv rrofgpdolA07xXVEoL/p4MMjylLRhiayeCNLB4gjkLVHJmLP -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:28 2025 by rpki-client