$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa File: b33653a3-e943-3203-996f-6057a0402e41.roa (raw, json) Hash identifier: gqZi+QfLH0eTQcxufUtkk4a1+rdDW0Xjjxaw37m38UU= Subject key identifier: 38:BF:FE:FB:91:23:A1:D3:94:DE:C8:64:9A:CC:58:E6:1B:41:77:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE17DEA174E422E3AC5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396584 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e1:7d:ea:17:4e:42:2e:3a:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=9affb902-4ccc-4c79-b4db-fdae93e98985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:d8:be:63:e4:b3:f7:3b:d1:5b:ef:65:02: 4f:af:4d:a2:8f:ef:5b:6f:73:5f:f7:16:a9:97:f9: 36:19:5e:0d:d4:af:ae:bb:2c:55:c8:38:03:e4:e6: 3d:7d:f1:5d:cf:74:88:a7:6c:96:5b:62:04:2d:ce: 96:6f:7b:86:14:01:60:a9:89:9c:34:42:41:76:5a: a8:95:4c:a2:58:03:2f:6b:c8:46:ab:d1:97:6b:e9: 25:24:e4:f8:5b:3f:9c:da:2b:97:7c:1b:71:0b:7a: ad:82:e1:8d:0e:81:78:49:b5:d4:e0:4f:fe:cf:69: f6:98:19:7c:b3:f8:dc:4d:36:47:d4:cd:28:48:dc: 2c:c5:28:88:b8:57:51:f7:9a:ae:96:5a:81:02:40: 8b:02:32:d1:6c:76:87:15:57:ab:76:22:0f:b4:4d: 27:71:ab:a6:a7:fd:42:9f:8e:47:69:42:db:0f:ad: f1:6b:b5:e7:c1:fa:94:04:d8:f5:04:8b:ac:92:fb: e5:64:e9:a8:1c:c0:c4:cc:27:8d:c3:85:57:0c:1a: 11:28:46:58:04:da:82:7c:df:d1:1f:ce:79:50:a9: b7:f3:0a:8f:c9:90:1d:b7:ee:c3:b8:a7:24:c5:ef: 39:db:01:2c:40:eb:52:52:f8:b0:3c:7e:68:5d:b1: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BF:FE:FB:91:23:A1:D3:94:DE:C8:64:9A:CC:58:E6:1B:41:77:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2f:ca:6d:6a:9e:50:f4:f0:b8:ae:bc:de:f6:51:cc:e0:e2: b0:10:7a:c9:42:f2:14:07:4a:7b:d7:19:5e:b0:2b:42:3b:34: c0:f6:47:14:c1:54:52:d7:45:e1:2e:82:77:26:eb:a7:d6:04: 45:03:6e:aa:bd:0f:78:d5:1a:21:68:fe:45:9e:48:73:c7:7c: 0c:b7:fc:22:10:09:9a:c8:30:3f:cd:23:1d:28:2c:22:b1:a8: 2b:d0:a6:40:b5:51:a6:86:52:71:bd:d8:58:b6:50:6d:47:72: 7a:39:10:c8:1c:5c:1d:f9:8f:81:12:f4:52:83:b5:12:20:88: aa:23:4d:c5:7c:03:17:1a:f8:c6:c1:42:36:78:bf:90:d5:da: 0e:2f:b0:cc:6b:49:60:06:e5:6b:46:37:57:a1:27:92:72:2f: e6:8d:4e:d0:49:72:f5:0f:86:79:5a:25:5d:92:fc:59:26:d1: 0f:a3:89:68:15:a4:75:43:bb:0c:20:10:34:55:af:a4:53:5e: 89:ee:c0:8d:f5:ae:ad:fe:43:6c:53:86:67:ae:18:b8:df:8a: bf:bd:16:ad:1e:38:91:92:bc:96:83:c5:71:c7:73:4d:b5:22: 47:dc:b2:a4:06:b8:d7:47:91:80:2d:1d:ac:87:b1:52:65:76: 60:24:cc:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+F96hdOQi46xcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OWFmZmI5MDItNGNjYy00Yzc5LWI0ZGItZmRhZTkzZTk4OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMvYvmPks/c70VvvZQJPr02ij+9bb3Nf9xap l/k2GV4N1K+uuyxVyDgD5OY9ffFdz3SIp2yWW2IELc6Wb3uGFAFgqYmcNEJBdlqo lUyiWAMva8hGq9GXa+klJOT4Wz+c2iuXfBtxC3qtguGNDoF4SbXU4E/+z2n2mBl8 s/jcTTZH1M0oSNwsxSiIuFdR95qullqBAkCLAjLRbHaHFVerdiIPtE0ncaump/1C n45HaULbD63xa7XnwfqUBNj1BIuskvvlZOmoHMDEzCeNw4VXDBoRKEZYBNqCfN/R H855UKm38wqPyZAdt+7DuKckxe852wEsQOtSUviwPH5oXbEWmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDi//vuRI6HTlN7IZJrMWOYbQXcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjMzNjUzYTMtZTk0My0z MjAzLTk5NmYtNjA1N2EwNDAyZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApL8ptap5Q9PC4rrze9lHM4OKwEHrJQvIUB0p7 1xlesCtCOzTA9kcUwVRS10XhLoJ3Juun1gRFA26qvQ941RohaP5Fnkhzx3wMt/wi EAmayDA/zSMdKCwisagr0KZAtVGmhlJxvdhYtlBtR3J6ORDIHFwd+Y+BEvRSg7US IIiqI03FfAMXGvjGwUI2eL+Q1doOL7DMa0lgBuVrRjdXoSeSci/mjU7QSXL1D4Z5 WiVdkvxZJtEPo4loFaR1Q7sMIBA0Va+kU16J7sCN9a6t/kNsU4Znrhi434q/vRat HjiRkryWg8Vxx3NNtSJH3LKkBrjXR5GALR2sh7FSZXZgJMy2 -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:31 2025 by rpki-client