$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa File: 87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa (raw, json) Hash identifier: yrCDUjstwSWz3zB8yoD5EgJHFnGX2HId52HuvqQ8f0w= Subject key identifier: AC:FB:6E:B4:B7:2F:0B:62:13:3E:80:37:77:2D:D2:B5:40:F5:2E:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9C0D8B53248A918D3480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 36624 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9c:0d:8b:53:24:8a:91:8d:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d338cf4c-3d80-4d58-91ff-2f2e04a0cc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:49:a4:43:5f:f8:6b:7c:9f:ac:7e:a2:af: 97:c1:da:b8:72:89:b7:c8:c4:74:81:bd:7d:f9:7f: 74:2f:a2:72:a4:42:9b:9f:4a:02:ff:cb:97:ec:ea: f3:da:65:c7:a1:57:75:60:32:7f:ef:a3:c4:8c:ab: 5f:d6:19:21:54:60:0b:fc:b0:8c:24:55:b9:78:dc: 44:df:4c:66:fd:72:86:9b:60:d0:a7:5d:c4:a2:e6: c5:36:bc:90:e0:26:15:58:05:70:f6:8a:4a:28:60: 57:e7:75:d9:6a:51:fb:17:f1:71:c4:b1:00:1e:e9: 8d:6a:52:1a:89:1a:ea:df:4c:ac:7b:cc:be:d9:6f: 88:c4:14:9a:64:f3:af:68:28:be:53:0e:01:a2:fc: d7:8a:e9:20:15:27:d0:69:c0:45:37:46:26:98:ad: 29:57:fd:8a:ff:59:54:f6:21:e4:da:a1:f6:aa:24: 5d:08:c6:cb:86:e0:ef:34:97:e3:31:d2:a3:20:7f: a2:db:de:5b:22:67:c3:33:2f:be:12:09:ad:2c:b3: 51:ca:1f:ba:37:f4:4f:d3:a0:5f:6e:86:78:44:95: a1:04:5d:64:bb:20:b2:12:5a:7e:f2:63:ca:f0:66: bc:65:a8:5f:f5:9d:07:09:b0:10:a7:e9:ce:b5:b8: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FB:6E:B4:B7:2F:0B:62:13:3E:80:37:77:2D:D2:B5:40:F5:2E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:76:a3:b7:fa:a6:d1:17:54:e6:db:ad:44:30:25:57:a3:39: 50:70:14:da:68:13:0d:55:a4:8e:cc:24:15:b8:95:91:70:ed: 03:cf:ef:ee:d9:58:4d:25:3b:64:81:c8:79:61:51:b5:d1:38: 25:45:56:e1:10:15:09:79:d3:df:06:04:06:86:81:03:f3:ef: ef:9f:0a:1b:5c:ab:0b:a1:94:b8:f9:0d:b6:6e:1c:4d:40:e0: 2d:06:59:1e:18:5e:ef:a7:f5:7f:d5:eb:5d:4b:35:bf:81:62: bc:d0:8d:46:bf:ee:9a:cb:64:97:e8:03:47:06:08:54:62:04: bf:48:64:27:e7:45:b7:01:92:df:82:c3:19:64:f3:3a:9f:20: a8:5d:6d:c4:48:7f:f0:8f:b9:ae:5d:dd:cb:0e:74:1f:23:2b: cb:c8:2a:f1:2e:a0:0f:cc:2b:12:8d:dc:d5:40:53:38:9e:65: f5:6f:11:e7:03:1c:88:bc:4a:1a:92:63:79:b9:9b:5a:6a:b0: da:89:82:05:b8:1d:1c:32:cf:f2:13:dd:04:4e:4b:cf:67:6a: c7:c7:8e:38:52:5a:c0:45:3f:fd:b3:1a:bd:4d:39:ea:7e:ee: f8:21:ff:db:15:ae:19:9d:61:9d:44:25:e3:41:a8:32:e7:a2: d9:fe:41:08 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5wNi1MkipGNNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDMzOGNmNGMtM2Q4MC00ZDU4LTkxZmYtMmYyZTA0YTBjYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvJJpENf+Gt8n6x+oq+Xwdq4com3yMR0gb19 +X90L6JypEKbn0oC/8uX7Orz2mXHoVd1YDJ/76PEjKtf1hkhVGAL/LCMJFW5eNxE 30xm/XKGm2DQp13EoubFNryQ4CYVWAVw9opKKGBX53XZalH7F/FxxLEAHumNalIa iRrq30yse8y+2W+IxBSaZPOvaCi+Uw4BovzXiukgFSfQacBFN0YmmK0pV/2K/1lU 9iHk2qH2qiRdCMbLhuDvNJfjMdKjIH+i295bImfDMy++EgmtLLNRyh+6N/RP06Bf boZ4RJWhBF1kuyCyElp+8mPK8Ga8Zahf9Z0HCbAQp+nOtbjdkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKz7brS3LwtiEz6AN3ct0rVA9S4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdjYmM5ZGEtMmY4ZS0z YWY5LTg3NTktOGYyZmYxYWEyNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAldqO3+qbRF1Tm261EMCVXozlQcBTaaBMNVaSO zCQVuJWRcO0Dz+/u2VhNJTtkgch5YVG10TglRVbhEBUJedPfBgQGhoED8+/vnwob XKsLoZS4+Q22bhxNQOAtBlkeGF7vp/V/1etdSzW/gWK80I1Gv+6ay2SX6ANHBghU YgS/SGQn50W3AZLfgsMZZPM6nyCoXW3ESH/wj7muXd3LDnQfIyvLyCrxLqAPzCsS jdzVQFM4nmX1bxHnAxyIvEoakmN5uZtaarDaiYIFuB0cMs/yE90ETkvPZ2rHx444 UlrART/9sxq9TTnqfu74If/bFa4ZnWGdRCXjQagy56LZ/kEI -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:24 2025 by rpki-client