$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa File: b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa (raw, json) Hash identifier: +Y0jX53oQKDqpXP8KtluR7LW8W2g1nJDnoS9cip87PQ= Subject key identifier: D4:2E:47:4B:CD:12:B3:F8:C1:76:24:07:1D:5E:4F:5E:06:2F:D2:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B913B5F9C74F21B3CBD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396605 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:91:3b:5f:9c:74:f2:1b:3c:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=bfd8406e-a01b-440f-8510-b32f81c6f50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:92:c3:2b:39:5f:a5:64:5b:31:8b:55:83: 32:26:b8:5a:d2:c3:d6:e3:47:50:a7:00:b8:55:a9: dd:8b:37:58:54:ab:61:04:84:a8:30:29:50:33:18: 01:0a:75:55:68:69:8c:03:2e:a7:3d:0f:4c:60:a6: 3a:dc:74:f1:37:14:43:b1:a5:63:e9:70:26:cf:ac: d0:9b:b7:0d:b7:8f:d6:25:b9:65:cb:11:77:ff:f2: 2c:19:34:46:33:14:96:a2:85:5b:d7:25:e5:cb:ab: 41:20:8d:de:2e:ee:9d:1e:db:cf:87:40:f9:ec:cb: e6:7f:d3:d6:ee:89:08:1a:c9:d5:15:bb:27:9b:c8: df:cf:59:1f:d9:18:95:88:4a:96:a6:19:64:30:5b: 04:d8:93:63:e8:7f:62:cd:b9:ce:54:e7:32:51:d3: 0f:8c:bd:61:8d:a4:ef:5c:d2:88:be:d7:f3:c1:fd: 12:4e:48:2c:91:7e:aa:ad:c9:75:4a:0d:90:b7:0c: c4:d5:a6:54:2f:86:4e:26:09:1c:46:02:b5:4a:12: c6:0b:fa:b0:2d:04:0e:78:01:bb:e6:7d:f8:e1:48: 40:ae:63:dc:7d:08:e0:58:27:6f:ad:03:dd:ba:61: c9:d8:3e:a2:8d:88:ef:1d:dd:78:ab:ee:55:9c:6e: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2E:47:4B:CD:12:B3:F8:C1:76:24:07:1D:5E:4F:5E:06:2F:D2:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f7:5a:dc:13:d7:d3:d5:02:94:79:a4:49:23:97:6c:81:ad: 89:a2:1f:e4:a1:43:2d:87:86:4a:44:24:bd:f4:23:2f:ed:54: 02:cf:64:1c:4c:73:f0:43:aa:83:0e:21:01:d0:54:7f:2a:df: 6e:cf:51:7f:7f:72:a9:47:c6:14:a5:6f:01:42:3e:43:79:a3: 03:17:44:03:2e:16:71:e4:d2:04:da:bc:14:8a:bc:2f:fe:ad: 07:2b:d9:71:f1:da:42:90:b4:74:3b:b4:5a:72:d9:80:52:f9: 8d:d4:77:ea:77:31:28:a8:88:c2:d7:07:b2:97:08:36:aa:cb: 45:86:c7:0a:42:7f:78:6e:c3:e3:49:2b:45:1e:0f:8b:1e:a2: 18:c6:97:2e:5b:8e:e4:75:b0:92:91:68:ab:91:d8:92:64:96: d9:a8:52:ce:e6:96:83:44:79:7b:6a:18:38:d8:29:0b:dc:4f: 8b:be:ad:66:57:14:cd:03:8c:c0:c1:19:cc:fc:65:81:86:c6: a2:18:ff:a1:4c:44:2e:f8:05:f1:2c:a6:ac:c2:5f:9b:9c:35: 2c:bd:e6:9e:37:25:db:e8:14:b9:66:63:9f:77:8e:d5:6b:66: f5:20:91:5e:76:fb:3f:c7:0c:96:98:21:d5:ef:72:50:14:a0: 33:38:01:c8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5E7X5x08hs8vUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YmZkODQwNmUtYTAxYi00NDBmLTg1MTAtYjMyZjgxYzZmNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArruSwys5X6VkWzGLVYMyJrha0sPW40dQpwC4 VandizdYVKthBISoMClQMxgBCnVVaGmMAy6nPQ9MYKY63HTxNxRDsaVj6XAmz6zQ m7cNt4/WJbllyxF3//IsGTRGMxSWooVb1yXly6tBII3eLu6dHtvPh0D57Mvmf9PW 7okIGsnVFbsnm8jfz1kf2RiViEqWphlkMFsE2JNj6H9izbnOVOcyUdMPjL1hjaTv XNKIvtfzwf0STkgskX6qrcl1Sg2QtwzE1aZUL4ZOJgkcRgK1ShLGC/qwLQQOeAG7 5n344UhArmPcfQjgWCdvrQPdumHJ2D6ijYjvHd14q+5VnG5LiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNQuR0vNErP4wXYkBx1eT14GL9IpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjc3ZTM1NDAtYTVjMi0z MWE4LWE3M2EtZjhjODNlMTk5ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBn91rcE9fT1QKUeaRJI5dsga2Joh/koUMth4ZK RCS99CMv7VQCz2QcTHPwQ6qDDiEB0FR/Kt9uz1F/f3KpR8YUpW8BQj5DeaMDF0QD LhZx5NIE2rwUirwv/q0HK9lx8dpCkLR0O7RactmAUvmN1HfqdzEoqIjC1weylwg2 qstFhscKQn94bsPjSStFHg+LHqIYxpcuW47kdbCSkWirkdiSZJbZqFLO5paDRHl7 ahg42CkL3E+Lvq1mVxTNA4zAwRnM/GWBhsaiGP+hTEQu+AXxLKaswl+bnDUsveae NyXb6BS5ZmOfd47Va2b1IJFedvs/xwyWmCHV73JQFKAzOAHI -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:18 2025 by rpki-client