$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d715a9fd-e4c9-3752-b8e5-8013d95e431d.roa File: d715a9fd-e4c9-3752-b8e5-8013d95e431d.roa (raw, json) Hash identifier: bTapMrVa7I4IuLOoW2b7gO0FhrRdU/UGynPXcuI+gsk= Subject key identifier: E8:E7:89:FC:00:46:54:FD:4F:7C:E2:2E:C5:C7:94:5E:5B:FB:CA:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9AF5CB5D893D701A6480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d715a9fd-e4c9-3752-b8e5-8013d95e431d.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396604 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9a:f5:cb:5d:89:3d:70:1a:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=024af7e3-011b-4fc2-baf5-3086969b8a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:3e:1b:c8:ed:d6:e8:54:d8:9c:97:72:97: b6:a9:64:51:f6:73:63:f8:fa:15:73:5a:19:41:b5: 32:09:e6:f3:43:b7:f5:bd:32:97:be:fc:21:0f:b2: 3b:c2:c5:28:99:10:c8:c3:3a:36:e1:48:29:e9:40: 97:03:93:9e:a1:bb:ec:c4:17:b0:79:73:5c:77:75: 36:85:50:31:0b:3d:96:22:17:ab:1c:78:b8:ce:7f: 02:30:a1:d7:21:eb:c6:cf:c6:91:2d:7f:c3:3c:6b: 5b:d1:c5:1e:19:d8:c7:15:9f:f4:b5:68:96:c7:45: 03:0d:31:87:d8:85:17:d7:bb:0b:63:00:0f:dd:f2: 51:d7:68:22:da:24:56:35:08:0a:65:4f:e2:f0:d8: 2a:f1:23:b1:5d:3d:e2:cb:cd:8a:5d:ff:88:34:a7: 0e:68:24:be:b4:ea:fe:43:a9:86:e0:c6:5b:a2:75: 9c:e9:ff:65:7c:e0:f8:fd:67:db:94:db:50:ce:f0: 92:23:1e:58:da:dc:40:67:63:09:11:fe:02:c8:79: 7d:03:4b:fc:80:17:1a:01:61:2b:23:a0:f0:a4:79: 40:c0:02:7f:42:18:2c:f2:60:a1:c3:af:5d:19:a1: af:b3:70:ac:b1:af:f6:5d:49:eb:cb:d2:e4:25:18: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E7:89:FC:00:46:54:FD:4F:7C:E2:2E:C5:C7:94:5E:5B:FB:CA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d715a9fd-e4c9-3752-b8e5-8013d95e431d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:aa:f0:b5:5e:e6:e1:93:19:9c:64:00:14:ba:a6:14:74:c4: 39:ab:28:5c:46:a3:0f:2f:80:29:b3:14:12:c4:71:e8:79:70: 2d:8b:49:fc:07:a5:dd:d6:e1:23:12:97:cf:c2:59:67:0c:99: c0:50:5b:48:21:f5:33:af:e2:bd:7e:80:8f:e0:9a:51:49:0a: 6a:44:47:91:9c:70:b6:95:39:1f:23:99:43:f8:9f:be:4b:f9: 88:e0:46:0e:22:37:cd:66:72:9c:90:45:41:41:db:1c:93:5c: 0b:99:d6:d8:05:e2:cf:3e:a1:6a:6b:26:5b:be:b2:66:46:7a: bc:d3:fa:79:87:ed:39:6c:ed:77:1d:e1:e4:cb:7e:25:d4:f4: 0a:28:d6:a4:d0:6b:22:92:6e:c0:4e:32:f3:33:44:1f:f9:c3: 02:c2:40:b3:8a:99:e5:51:9c:e8:d1:78:13:2c:93:03:0e:e9: 2a:e3:0f:1d:da:25:e3:8f:8b:8e:11:25:5b:46:2d:f8:f1:a9: 54:29:43:48:12:a7:41:5e:38:87:a1:fd:a0:78:28:15:35:9e: 53:ba:8c:c8:dd:bb:2b:e8:8a:11:4b:1b:b1:d6:10:7b:84:40: e4:02:7c:6a:73:0b:d8:f8:f1:a6:9d:eb:9a:b4:59:b9:90:44: bd:b1:d1:19 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5r1y12JPXAaZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MDI0YWY3ZTMtMDExYi00ZmMyLWJhZjUtMzA4Njk2OWI4YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnas+G8jt1uhU2JyXcpe2qWRR9nNj+PoVc1oZ QbUyCebzQ7f1vTKXvvwhD7I7wsUomRDIwzo24Ugp6UCXA5OeobvsxBeweXNcd3U2 hVAxCz2WIherHHi4zn8CMKHXIevGz8aRLX/DPGtb0cUeGdjHFZ/0tWiWx0UDDTGH 2IUX17sLYwAP3fJR12gi2iRWNQgKZU/i8Ngq8SOxXT3iy82KXf+INKcOaCS+tOr+ Q6mG4MZbonWc6f9lfOD4/WfblNtQzvCSIx5Y2txAZ2MJEf4CyHl9A0v8gBcaAWEr I6DwpHlAwAJ/Qhgs8mChw69dGaGvs3Cssa/2XUnry9LkJRiwKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOjnifwARlT9T3ziLsXHlF5b+8qgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDcxNWE5ZmQtZTRjOS0z NzUyLWI4ZTUtODAxM2Q5NWU0MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjqvC1XubhkxmcZAAUuqYUdMQ5qyhcRqMPL4Ap sxQSxHHoeXAti0n8B6Xd1uEjEpfPwllnDJnAUFtIIfUzr+K9foCP4JpRSQpqREeR nHC2lTkfI5lD+J++S/mI4EYOIjfNZnKckEVBQdsck1wLmdbYBeLPPqFqayZbvrJm Rnq80/p5h+05bO13HeHky34l1PQKKNak0Gsikm7ATjLzM0Qf+cMCwkCzipnlUZzo 0XgTLJMDDukq4w8d2iXjj4uOESVbRi348alUKUNIEqdBXjiHof2geCgVNZ5TuozI 3bsr6IoRSxux1hB7hEDkAnxqcwvY+PGmneuatFm5kES9sdEZ -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:26 2025 by rpki-client