$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa File: cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa (raw, json) Hash identifier: o4Y5OR4ZG24PGUz5KtjH6Yovu7sxN2S67zn4a7oHpc0= Subject key identifier: E6:D7:70:B7:AE:E8:0E:F6:30:21:11:EE:92:A9:39:67:0A:7C:80:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE0ACB3FB1ABCA2DFB880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396579 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e0:ac:b3:fb:1a:bc:a2:df:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=229563ae-a876-4fcc-bcd1-d7522794330e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:f1:5b:19:61:87:19:8b:27:e2:1b:ec:99: f4:b1:d2:90:16:5f:d1:ca:f2:21:f8:18:a7:98:82: 25:94:3b:cb:8d:03:1f:24:45:d2:d0:b1:c2:91:33: 43:a1:c6:47:a1:98:82:6c:c7:e7:d9:93:57:ee:93: 6c:cc:1b:b4:0f:3d:41:f8:b0:b7:87:30:d9:0b:ec: 5e:64:3f:d0:78:6e:cd:c4:fd:d9:5c:94:51:6c:68: cc:ff:10:94:d8:ad:a2:e9:39:0b:2a:53:df:ea:00: 11:04:5d:6c:be:95:1e:88:5c:c1:59:b6:9f:6f:8f: c7:a7:87:1f:75:0b:e6:f1:05:de:00:59:d9:58:63: c0:5a:70:da:f2:1d:3f:92:e4:46:55:ab:16:e3:ef: c8:f2:a5:68:9b:68:f2:13:03:55:a2:6d:10:82:a4: b6:5e:97:51:c8:7b:9c:bc:1c:dd:2b:56:2c:c2:b5: 93:29:f8:a3:e2:61:2a:d4:fa:02:b9:a5:33:e7:5d: d9:07:83:3c:80:25:af:21:d5:d0:32:92:bf:db:d8: f2:e4:f2:8c:b8:0f:9d:42:8e:cb:b6:d1:b8:64:57: d7:8c:7e:83:5f:b2:08:ad:ad:b5:67:2f:37:23:9c: f6:49:2b:70:ab:5a:1c:5b:28:42:8d:71:95:87:a0: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D7:70:B7:AE:E8:0E:F6:30:21:11:EE:92:A9:39:67:0A:7C:80:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:75:9e:86:61:f0:9e:74:21:f7:f7:45:b9:e3:5c:1c:df:2f: 97:ea:b1:50:af:ef:d0:e6:18:97:8a:c3:f8:a1:93:58:82:65: ec:78:d5:4b:aa:06:47:c3:89:3a:6e:bd:a8:02:89:4d:26:85: a8:2a:c4:e8:f6:31:7a:51:b7:5b:fe:3d:b0:48:2f:dd:ec:a9: 26:af:49:b0:ec:c7:48:a2:6c:b6:15:2b:d9:2a:51:f3:2c:ad: 34:4c:de:8c:ee:ab:c5:26:52:d3:80:0e:33:05:40:3d:bd:16: d9:43:38:92:a4:d4:46:3f:27:b5:09:7f:b8:05:3f:fe:00:17: 76:39:01:b3:ff:ab:e6:7a:11:0c:6d:6f:f4:7f:0c:f3:94:0f: 54:08:26:15:05:72:d2:ef:02:4f:fd:6f:e5:37:ae:e2:c2:10: cc:63:05:73:9d:c1:4d:58:91:26:ec:0e:49:c8:f0:d1:7c:90: 4e:2e:11:f0:bd:a9:d9:db:9d:6d:5d:ca:21:b4:51:7c:86:df: 4c:48:55:7e:9e:fc:a3:25:e8:89:ab:79:98:6b:36:24:1e:f4: a1:bb:7d:5e:17:40:e9:71:3a:23:ac:4e:da:c6:0a:92:60:61: 71:27:7e:f9:93:24:6b:a7:23:f0:cf:3d:09:c5:7e:77:ca:30: b0:7a:fd:1f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+Css/savKLfuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjI5NTYzYWUtYTg3Ni00ZmNjLWJjZDEtZDc1MjI3OTQzMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcPxWxlhhxmLJ+Ib7Jn0sdKQFl/RyvIh+Bin mIIllDvLjQMfJEXS0LHCkTNDocZHoZiCbMfn2ZNX7pNszBu0Dz1B+LC3hzDZC+xe ZD/QeG7NxP3ZXJRRbGjM/xCU2K2i6TkLKlPf6gARBF1svpUeiFzBWbafb4/Hp4cf dQvm8QXeAFnZWGPAWnDa8h0/kuRGVasW4+/I8qVom2jyEwNVom0QgqS2XpdRyHuc vBzdK1YswrWTKfij4mEq1PoCuaUz513ZB4M8gCWvIdXQMpK/29jy5PKMuA+dQo7L ttG4ZFfXjH6DX7IIra21Zy83I5z2SStwq1ocWyhCjXGVh6BnbQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFObXcLeu6A72MCER7pKpOWcKfIDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxZTY0ZWQtZjhmOC0z NDE4LTkxMmYtZmFmZGQwNWYyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAHdZ6GYfCedCH390W541wc3y+X6rFQr+/Q5hiX isP4oZNYgmXseNVLqgZHw4k6br2oAolNJoWoKsTo9jF6Ubdb/j2wSC/d7Kkmr0mw 7MdIomy2FSvZKlHzLK00TN6M7qvFJlLTgA4zBUA9vRbZQziSpNRGPye1CX+4BT/+ ABd2OQGz/6vmehEMbW/0fwzzlA9UCCYVBXLS7wJP/W/lN67iwhDMYwVzncFNWJEm 7A5JyPDRfJBOLhHwvanZ251tXcohtFF8ht9MSFV+nvyjJeiJq3mYazYkHvShu31e F0DpcTojrE7axgqSYGFxJ375kyRrpyPwzz0JxX53yjCwev0f -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:35 2025 by rpki-client