$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa File: a29e971c-3fed-3379-ad50-027a14d1589b.roa (raw, json) Hash identifier: xBxeQ8TrdA3SkxayqgMUmbmIN38z0UaqSw0D9AIWEKM= Subject key identifier: CE:CA:95:09:B6:7E:2A:69:FC:7E:17:57:70:9C:5D:B9:A4:87:68:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB220C976AFB458C8692EA740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 0 IP address blocks: 2620:74:28::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c9:76:af:b4:58:c8:69:2e:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=7af323dd-1491-4dc6-ab26-5947269cac9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:f7:09:63:86:52:11:bb:81:b2:06:e7:cc: 1e:89:39:df:c0:5b:fc:37:5c:f5:1f:75:33:ea:85: fb:ce:5a:05:7c:db:28:16:1b:04:93:df:bd:1b:6b: c4:84:7f:e4:97:96:0b:ae:bf:4f:c6:59:81:2f:8f: 4e:46:95:1e:d5:61:2d:9b:76:4d:1a:cd:e6:4c:32: 7c:aa:b9:3a:86:5d:2d:a3:a2:c9:4c:94:3b:bd:d5: e4:cc:f4:4c:75:63:71:fc:ef:44:82:b9:9c:56:3e: cd:0c:a0:96:f3:fa:a1:78:43:f3:cb:7d:d3:e4:16: cb:de:a0:16:ae:97:60:c1:a2:7f:ac:19:d4:4b:1f: 8f:fe:f5:94:f2:01:ae:70:e1:27:64:66:94:95:10: b6:0a:da:d6:2e:e1:04:da:57:65:48:0f:d6:08:12: 6d:d6:cc:6f:51:5f:f4:b9:48:76:fe:36:ec:aa:de: 58:34:5d:b8:d3:92:d7:58:e8:b1:2a:65:2c:f4:c1: 8d:21:1a:6d:97:44:7f:e5:88:44:80:fd:7a:2e:e4: 1f:94:7e:52:ed:e4:24:50:c2:08:66:7b:37:f7:59: 91:bf:59:74:d2:57:cc:3d:84:1b:4d:99:08:94:c6: 89:92:76:73:48:a4:5d:5a:ec:d1:36:a8:88:b8:be: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:95:09:B6:7E:2A:69:FC:7E:17:57:70:9C:5D:B9:A4:87:68:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:28::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:eb:f3:e4:64:25:d7:8b:e4:aa:15:23:0b:68:d0:60:43:cc: 95:8e:f4:2f:3d:85:a3:ee:22:36:d9:de:6b:d1:07:10:45:b0: 72:40:e7:32:57:f0:85:ec:02:ef:79:26:51:b3:55:df:b4:22: cf:ea:77:fa:34:63:ba:d5:0a:e7:f0:ec:35:d0:45:15:e8:1a: 76:7d:62:d9:4d:21:e8:76:5d:f5:09:58:25:5d:ae:bd:e2:20: 56:33:66:eb:ae:47:b1:de:20:77:6d:58:cb:26:f5:43:21:fe: 1c:46:c4:b1:bc:1f:e7:a9:73:2b:ee:bd:77:f5:1d:55:f2:d9: 81:51:f4:98:9e:af:76:0b:da:f3:02:97:aa:00:97:d6:06:26: 2c:60:d9:1b:fc:df:09:da:bb:7a:21:e3:6c:c8:a9:c9:a2:26: a4:38:a6:2a:cc:30:c5:7d:38:7a:2a:15:81:c1:74:08:02:ab: 15:43:55:50:d0:14:79:f7:a4:14:8e:eb:b8:15:36:3b:b8:5f: e2:9c:45:cd:d8:7d:ab:0f:84:dd:16:13:52:ae:e6:cd:c0:b0: 6d:17:87:bf:38:20:14:66:7e:12:17:65:de:0c:9c:3a:64:12: 67:c0:af:68:5e:ef:99:80:82:96:05:af:03:81:00:83:89:94: 3e:dd:6b:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqyIMl2r7RYyGkup0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2FmMzIzZGQtMTQ5MS00ZGM2LWFiMjYtNTk0NzI2OWNhYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMf3CWOGUhG7gbIG58weiTnfwFv8N1z1H3Uz 6oX7zloFfNsoFhsEk9+9G2vEhH/kl5YLrr9PxlmBL49ORpUe1WEtm3ZNGs3mTDJ8 qrk6hl0to6LJTJQ7vdXkzPRMdWNx/O9EgrmcVj7NDKCW8/qheEPzy33T5BbL3qAW rpdgwaJ/rBnUSx+P/vWU8gGucOEnZGaUlRC2CtrWLuEE2ldlSA/WCBJt1sxvUV/0 uUh2/jbsqt5YNF2405LXWOixKmUs9MGNIRptl0R/5YhEgP16LuQflH5S7eQkUMII Zns391mRv1l00lfMPYQbTZkIlMaJknZzSKRdWuzRNqiIuL4YwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM7KlQm2fipp/H4XV3CcXbmkh2jJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI5ZTk3MWMtM2ZlZC0z Mzc5LWFkNTAtMDI3YTE0ZDE1ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELr8+RkJdeL5KoVIwto0GBDzJWO9C89haPuIjbZ3mvRBxBFsHJA 5zJX8IXsAu95JlGzVd+0Is/qd/o0Y7rVCufw7DXQRRXoGnZ9YtlNIeh2XfUJWCVd rr3iIFYzZuuuR7HeIHdtWMsm9UMh/hxGxLG8H+epcyvuvXf1HVXy2YFR9Jier3YL 2vMCl6oAl9YGJixg2Rv83wnau3oh42zIqcmiJqQ4pirMMMV9OHoqFYHBdAgCqxVD VVDQFHn3pBSO67gVNju4X+KcRc3YfasPhN0WE1Ku5s3AsG0Xh784IBRmfhIXZd4M nDpkEmfAr2he75mAgpYFrwOBAIOJlD7dawA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:42 2025 by rpki-client