$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/786864f7-606f-30b2-8523-8ae6dd7af425.roa File: 786864f7-606f-30b2-8523-8ae6dd7af425.roa (raw, json) Hash identifier: gwyPcCouTc0/sb/AuZWTe2+SE3XRHHk9vOK0WMfpN2w= Subject key identifier: B1:F9:12:82:50:F5:37:C7:A7:16:D0:1E:73:ED:0E:8B:4A:0A:4D:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9B51663F9821B0AC3A20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/786864f7-606f-30b2-8523-8ae6dd7af425.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396612 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9b:51:66:3f:98:21:b0:ac:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=6bf20de3-944b-41c3-8265-fba243b56526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5b:f7:75:37:f3:3e:8a:3e:61:21:f2:9e:79: 71:18:75:9d:85:68:03:d4:81:95:5b:9f:59:2f:16: b9:fb:30:a7:dd:88:15:68:1f:bd:07:7d:09:59:35: fd:dd:52:90:05:5a:54:70:23:ff:b7:32:c0:e5:9d: c7:eb:3a:2f:78:a4:38:a9:f0:43:ec:be:d8:d7:08: 8f:41:d6:a8:bc:b6:22:64:76:cf:99:7d:10:7d:d9: 4c:af:db:34:13:dc:11:ae:9d:08:d9:1c:c9:5e:8c: e6:60:3d:28:63:47:d3:38:f5:aa:54:80:2d:85:b9: b8:f3:dc:6e:13:62:0a:a7:1a:54:04:4d:8e:ca:5b: 5c:46:da:c1:47:f8:80:84:db:64:f8:2d:75:a4:0b: 32:63:8a:37:4d:70:be:00:51:3d:1c:17:7f:2b:1d: db:a4:d9:13:d8:96:1d:a1:1e:8e:98:44:ee:59:d9: d2:b6:a5:75:09:2b:e3:69:da:c1:d6:9e:ac:62:90: 13:2b:d0:9b:25:87:02:09:66:0a:fa:c2:59:2c:e7: c0:e3:05:20:2b:c8:78:b7:49:6e:ed:d8:22:7c:32: f5:c4:63:ed:81:c8:6d:07:4e:26:45:d3:30:4c:0c: 10:69:d4:35:6c:00:fe:2f:d3:13:6e:3f:9b:6e:4c: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F9:12:82:50:F5:37:C7:A7:16:D0:1E:73:ED:0E:8B:4A:0A:4D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/786864f7-606f-30b2-8523-8ae6dd7af425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:72:2c:2f:d1:dd:79:d6:82:80:f6:e5:b9:4b:06:2e:ec:5f: 8e:cf:20:de:ae:74:f1:6e:47:53:35:66:78:26:ac:c7:ea:14: 84:8d:b7:8b:0d:a1:f1:80:f5:2b:a4:db:65:3a:15:f9:bb:e8: b2:41:69:97:f9:4c:1b:07:0b:02:f0:0d:e3:25:d6:68:cd:e1: a5:7d:5a:11:61:40:e8:4d:29:59:05:cc:5e:80:75:ef:71:8b: ef:41:fa:3a:dd:00:03:d2:d6:aa:59:4c:c5:41:d9:4b:34:ca: f4:bf:b6:c8:bd:60:72:80:6c:d4:81:9d:e7:ea:fc:b4:02:ed: 42:4c:a6:b1:aa:12:64:4d:02:aa:d9:b5:f1:63:6c:3b:03:17: fa:38:04:ac:55:a5:83:9b:c8:ab:10:c4:1f:ac:d7:af:e0:19: 0e:cf:a9:55:6a:c6:2f:59:5a:dc:04:8a:cb:f6:d4:c6:32:fc: 0f:88:df:2b:6d:d0:5a:01:fa:22:58:ad:ae:06:bc:ab:3d:9b: ec:9d:71:b6:f1:80:a5:ef:37:7c:35:d7:3b:a6:4a:c2:10:a4: c9:8c:d3:de:68:dc:41:33:42:40:f9:1e:2b:77:97:34:7c:6f: e2:ec:02:b5:cc:06:37:93:2b:45:c5:f3:d9:a6:06:85:f6:21: 16:f1:9e:e8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5tRZj+YIbCsOiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NmJmMjBkZTMtOTQ0Yi00MWMzLTgyNjUtZmJhMjQzYjU2NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vv3dTfzPoo+YSHynnlxGHWdhWgD1IGVW59Z Lxa5+zCn3YgVaB+9B30JWTX93VKQBVpUcCP/tzLA5Z3H6zoveKQ4qfBD7L7Y1wiP QdaovLYiZHbPmX0QfdlMr9s0E9wRrp0I2RzJXozmYD0oY0fTOPWqVIAthbm489xu E2IKpxpUBE2OyltcRtrBR/iAhNtk+C11pAsyY4o3TXC+AFE9HBd/Kx3bpNkT2JYd oR6OmETuWdnStqV1CSvjadrB1p6sYpATK9CbJYcCCWYK+sJZLOfA4wUgK8h4t0lu 7dgifDL1xGPtgchtB04mRdMwTAwQadQ1bAD+L9MTbj+bbkxjDQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLH5EoJQ9TfHpxbQHnPtDotKCk23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzg2ODY0ZjctNjA2Zi0z MGIyLTg1MjMtOGFlNmRkN2FmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASciwv0d151oKA9uW5SwYu7F+OzyDernTxbkdT NWZ4JqzH6hSEjbeLDaHxgPUrpNtlOhX5u+iyQWmX+UwbBwsC8A3jJdZozeGlfVoR YUDoTSlZBcxegHXvcYvvQfo63QAD0taqWUzFQdlLNMr0v7bIvWBygGzUgZ3n6vy0 Au1CTKaxqhJkTQKq2bXxY2w7Axf6OASsVaWDm8irEMQfrNev4BkOz6lVasYvWVrc BIrL9tTGMvwPiN8rbdBaAfoiWK2uBryrPZvsnXG28YCl7zd8Ndc7pkrCEKTJjNPe aNxBM0JA+R4rd5c0fG/i7AK1zAY3kytFxfPZpgaF9iEW8Z7o -----END CERTIFICATE-----Generated at Wed Aug 6 13:02:34 2025 by rpki-client