$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/600920e0-02f3-308c-bf94-f4c9f23c56e0.roa File: 600920e0-02f3-308c-bf94-f4c9f23c56e0.roa (raw, json) Hash identifier: al1SI7pyP19J0eRMbzSAOiW6r8c7R2B2FyOk09EMkfA= Subject key identifier: FF:AA:4D:E6:EA:D6:AB:E7:6E:A1:62:4E:19:7E:EC:4B:A1:B3:0B:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B99311E5281BE9211BF30 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/600920e0-02f3-308c-bf94-f4c9f23c56e0.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396551 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:99:31:1e:52:81:be:92:11:bf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d6dffbfc-aea2-4853-96a6-283da52e2819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:c6:12:72:7f:f7:b5:1b:1d:29:ce:f6:8f: 0e:09:56:59:9c:71:76:5a:25:0c:35:b7:7c:7b:5e: 6b:56:2f:70:d1:c1:15:75:e7:c2:a4:29:de:ee:c3: 33:2a:13:6a:cc:3f:3e:97:7d:f2:14:62:ad:25:aa: 67:da:10:c5:f4:7d:ec:58:ab:87:e3:c7:82:e6:fe: 72:0c:48:3a:b1:b3:1a:a1:80:aa:e0:ac:d4:bc:21: b5:76:33:66:49:94:30:eb:b4:32:bd:5e:3a:a4:95: c1:93:6f:11:8e:8e:0f:11:9e:b5:a1:52:fc:70:f2: 87:0d:d4:76:9e:a2:c8:32:25:6a:14:6d:db:f3:b8: 0d:cb:fe:d0:56:88:c3:4a:b5:ef:c9:e8:e9:bb:71: 65:d4:89:78:e8:5c:7c:ec:35:8a:e0:08:11:ac:4c: d7:71:a7:87:0c:d4:02:6f:5e:47:c6:ac:11:8c:e7: 1e:91:1b:5e:21:13:77:0c:76:ed:8a:31:93:3b:e6: 66:3b:a0:dd:7e:df:a3:7d:0c:b1:13:ff:b7:15:2a: 53:19:56:47:47:19:61:72:be:00:be:45:ba:f5:cf: 70:ab:c0:2a:30:d2:9d:7d:53:98:ba:f5:da:d0:0b: 87:eb:0d:d7:8c:1c:19:51:c1:92:42:16:66:1f:92: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AA:4D:E6:EA:D6:AB:E7:6E:A1:62:4E:19:7E:EC:4B:A1:B3:0B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/600920e0-02f3-308c-bf94-f4c9f23c56e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:88:3d:eb:12:8d:9b:b4:7d:d1:cb:69:3d:10:ee:c8:22:e8: ad:49:66:cf:00:c6:e9:e3:81:7d:6a:5c:b9:6d:2e:9c:38:e0: 99:36:24:e9:74:ef:bd:54:69:15:55:da:1b:78:4a:3a:fd:fb: 8d:97:be:25:6c:e5:1b:dc:2c:33:e8:a0:d2:ce:86:39:a0:82: e8:06:85:4a:8c:b9:5f:75:ea:fd:8f:7e:43:91:06:0e:48:25: 76:54:4f:df:80:59:a5:69:b3:ce:14:57:f6:7a:a0:75:1b:c5: 23:77:2e:f4:38:52:f4:d2:e9:0c:5f:d4:35:d8:4b:ad:86:90: 7c:52:ed:41:e3:b7:27:43:68:e6:cd:e6:69:d9:c6:ec:ed:bd: 7d:7c:85:30:b4:82:d8:a7:d5:20:9a:1a:71:d3:2c:70:ed:11: b7:50:48:09:6a:65:d5:89:c2:37:73:67:92:09:25:d1:97:e9: c9:25:75:f2:bf:8e:f8:66:9b:06:9d:dd:59:6b:6c:d7:39:e1: 84:d1:ff:cd:80:2e:b0:b4:cc:df:7c:4d:b0:93:db:c8:18:22: fe:1a:20:c9:23:f0:58:53:21:39:22:d5:0b:0e:5a:ec:9b:fc: cf:de:58:14:d5:6b:d0:7a:9f:0a:6d:02:89:e7:f7:e1:4e:3f: 70:11:0b:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5kxHlKBvpIRvzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDZkZmZiZmMtYWVhMi00ODUzLTk2YTYtMjgzZGE1MmUyODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/GEnJ/97UbHSnO9o8OCVZZnHF2WiUMNbd8 e15rVi9w0cEVdefCpCne7sMzKhNqzD8+l33yFGKtJapn2hDF9H3sWKuH48eC5v5y DEg6sbMaoYCq4KzUvCG1djNmSZQw67QyvV46pJXBk28Rjo4PEZ61oVL8cPKHDdR2 nqLIMiVqFG3b87gNy/7QVojDSrXvyejpu3Fl1Il46Fx87DWK4AgRrEzXcaeHDNQC b15HxqwRjOcekRteIRN3DHbtijGTO+ZmO6Ddft+jfQyxE/+3FSpTGVZHRxlhcr4A vkW69c9wq8AqMNKdfVOYuvXa0AuH6w3XjBwZUcGSQhZmH5IsRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP+qTebq1qvnbqFiThl+7EuhswsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjAwOTIwZTAtMDJmMy0z MDhjLWJmOTQtZjRjOWYyM2M1NmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBziD3rEo2btH3Ry2k9EO7IIuitSWbPAMbp44F9 aly5bS6cOOCZNiTpdO+9VGkVVdobeEo6/fuNl74lbOUb3Cwz6KDSzoY5oILoBoVK jLlfder9j35DkQYOSCV2VE/fgFmlabPOFFf2eqB1G8Ujdy70OFL00ukMX9Q12Eut hpB8Uu1B47cnQ2jmzeZp2cbs7b19fIUwtILYp9Ugmhpx0yxw7RG3UEgJamXVicI3 c2eSCSXRl+nJJXXyv474ZpsGnd1Za2zXOeGE0f/NgC6wtMzffE2wk9vIGCL+GiDJ I/BYUyE5ItULDlrsm/zP3lgU1WvQep8KbQKJ5/fhTj9wEQsL -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:49 2025 by rpki-client