$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba45a93d-3cb2-329a-8952-ce46821099dd.roa File: ba45a93d-3cb2-329a-8952-ce46821099dd.roa (raw, json) Hash identifier: UsYCOIL5iB1BvRCS3Kn3Zr2ETT9E8QPaeMrJ++ipvCg= Subject key identifier: 73:11:1F:05:46:ED:C3:8C:F4:39:27:76:B1:A5:2A:2A:60:39:1E:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B928C97AF0D7F7BCB7A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba45a93d-3cb2-329a-8952-ce46821099dd.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396571 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:92:8c:97:af:0d:7f:7b:cb:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=9b09cf79-7ce5-4b80-9b24-2eb9e742a313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:02:ab:3b:3b:26:23:8b:59:65:4f:e5:4a: a3:e4:ee:91:54:55:53:05:45:b7:68:ea:34:e0:03: e1:9c:ac:15:ba:33:6d:95:0b:fa:cc:53:ea:bc:a8: 40:8a:63:94:72:17:4c:de:67:2a:c0:e4:d9:df:36: 1e:ce:38:ec:94:98:ab:c2:21:d9:26:07:0b:80:92: 49:69:e0:ec:62:95:e2:c9:ee:4f:3f:ce:d3:78:ca: 81:14:73:5b:ae:b3:1e:e8:42:27:b9:bd:ee:04:7c: b1:59:42:73:df:af:07:f1:38:17:68:3a:54:f2:3c: 71:b2:c6:17:b3:0e:24:7b:28:ad:7d:29:d5:18:cd: c8:63:90:c1:04:f8:85:c7:0d:5c:30:f5:02:76:6b: 8b:5e:ec:26:fa:d9:82:e1:45:d7:94:a1:e4:c1:69: 4e:21:d4:d2:7f:92:ab:94:3a:c3:9e:93:37:ae:e6: 95:11:20:18:4c:dc:ce:59:d3:2d:7f:aa:b9:9b:53: 3e:6d:e3:8f:6c:95:93:a2:50:b6:dd:d0:14:06:f1: 9e:d1:ef:2e:55:f0:17:25:b4:01:77:78:7a:91:59: 3a:6c:05:84:35:c1:fe:92:38:b4:f7:fb:a2:a5:30: 23:e0:2b:ed:72:a2:84:61:58:68:6e:6b:2b:b5:68: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:11:1F:05:46:ED:C3:8C:F4:39:27:76:B1:A5:2A:2A:60:39:1E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba45a93d-3cb2-329a-8952-ce46821099dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:36:65:76:f0:70:56:a3:95:cc:f4:3b:33:de:86:fc:7c:78: c5:bc:78:2b:87:6d:83:80:9d:6c:cd:f8:e7:1e:34:8c:f9:83: 4d:85:e5:51:6b:70:23:ba:64:5a:9b:b2:f7:43:2d:5e:8f:08: e7:e2:b8:ba:a2:ec:65:64:50:61:79:0b:ee:82:de:c8:96:76: 4f:b8:43:0c:26:b1:f4:cb:a2:cf:5c:0f:40:60:d4:9b:9a:a3: bd:69:2d:cb:f4:be:11:12:6f:6d:7c:81:3b:52:e3:44:3e:c3: fc:c7:65:5d:b5:6a:c5:e0:a9:4b:9f:66:cc:8a:1e:fd:4d:49: d4:3b:20:ad:fa:48:98:1e:a4:7e:a0:ee:09:b3:fb:ba:41:0b: cd:60:1e:5a:75:3a:98:50:af:42:9b:3a:03:e8:92:d3:45:42: 2d:fc:db:b1:65:63:6b:3d:64:7e:48:4f:8f:4d:79:15:42:59: 57:f8:50:aa:d5:db:07:3d:bf:d0:06:16:38:73:83:81:58:9e: be:3c:29:e7:bd:ac:1b:56:bd:7b:f8:fa:c4:c3:00:83:1b:3b: 2f:3a:c1:17:9e:2a:67:d4:3f:0a:99:25:22:11:65:6f:71:d9: 4c:98:6a:b3:f5:33:54:8f:c6:0d:58:77:5f:42:7d:48:66:a9: 40:f6:bb:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5KMl68Nf3vLeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk OWIwOWNmNzktN2NlNS00YjgwLTliMjQtMmViOWU3NDJhMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFMCqzs7JiOLWWVP5Uqj5O6RVFVTBUW3aOo0 4APhnKwVujNtlQv6zFPqvKhAimOUchdM3mcqwOTZ3zYezjjslJirwiHZJgcLgJJJ aeDsYpXiye5PP87TeMqBFHNbrrMe6EInub3uBHyxWUJz368H8TgXaDpU8jxxssYX sw4keyitfSnVGM3IY5DBBPiFxw1cMPUCdmuLXuwm+tmC4UXXlKHkwWlOIdTSf5Kr lDrDnpM3ruaVESAYTNzOWdMtf6q5m1M+beOPbJWTolC23dAUBvGe0e8uVfAXJbQB d3h6kVk6bAWENcH+kji09/uipTAj4CvtcqKEYVhobmsrtWiWDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHMRHwVG7cOM9DkndrGlKipgOR5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE0NWE5M2QtM2NiMi0z MjlhLTg5NTItY2U0NjgyMTA5OWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAbNmV28HBWo5XM9Dsz3ob8fHjFvHgrh22DgJ1s zfjnHjSM+YNNheVRa3AjumRam7L3Qy1ejwjn4ri6ouxlZFBheQvugt7IlnZPuEMM JrH0y6LPXA9AYNSbmqO9aS3L9L4REm9tfIE7UuNEPsP8x2VdtWrF4KlLn2bMih79 TUnUOyCt+kiYHqR+oO4Js/u6QQvNYB5adTqYUK9CmzoD6JLTRUIt/NuxZWNrPWR+ SE+PTXkVQllX+FCq1dsHPb/QBhY4c4OBWJ6+PCnnvawbVr17+PrEwwCDGzsvOsEX nipn1D8KmSUiEWVvcdlMmGqz9TNUj8YNWHdfQn1IZqlA9rvA -----END CERTIFICATE-----Generated at Wed Aug 6 13:19:43 2025 by rpki-client