$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa File: df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa (raw, json) Hash identifier: cYebpd5reYTvLLxAyrLJqw4wWCu/gHlOv1cT/WeXr8U= Subject key identifier: 32:76:56:2D:89:66:CA:8D:E8:25:25:19:8B:B8:E9:AC:3F:43:68:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9E367B2C2C692FBD4480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396606 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9e:36:7b:2c:2c:69:2f:bd:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=10f8a730-a4b4-4057-ab83-ca2da122c0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:a4:2c:8a:36:73:b4:52:11:bb:5f:9d:81: eb:56:01:d8:9d:f3:53:da:aa:5f:86:8a:b2:f4:6c: 1f:3a:1c:09:a4:f0:6c:03:89:e2:5e:b7:e8:27:ad: ff:19:8f:72:55:44:66:99:96:95:dd:a9:93:3d:38: 53:c1:fc:77:82:ed:ae:8d:9a:a3:ae:5f:de:58:da: 0f:42:43:f5:6e:2e:93:4a:c3:0b:e0:71:ae:66:c1: c2:19:e3:88:8a:c5:b9:47:d1:dc:92:63:51:c4:71: d5:ba:93:e1:f4:e0:91:bf:64:ba:51:4f:ad:7d:77: 33:3b:91:bb:25:79:f8:58:58:bd:ec:34:24:31:b5: b8:b8:5a:51:d8:5c:62:35:34:13:0c:dc:4b:d6:31: 47:39:8b:e9:cc:e9:5c:72:f0:ca:02:72:52:11:c3: ce:4f:e5:73:3a:31:bb:bf:b6:94:90:fd:59:65:be: 7b:c8:d7:a5:a2:72:65:87:65:19:df:5f:1d:23:20: bf:ed:d0:64:59:aa:ed:59:de:83:f4:d3:a3:98:fb: 78:e6:2f:e8:af:79:ee:b2:90:f6:15:ff:af:e2:1a: 98:06:00:5c:f9:af:b9:48:f2:04:eb:4c:e6:46:1d: 39:cc:6f:b3:8c:3e:4f:7e:58:f2:dd:0c:df:ce:82: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:76:56:2D:89:66:CA:8D:E8:25:25:19:8B:B8:E9:AC:3F:43:68:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:43:c0:6c:2c:97:a7:04:25:95:dc:58:aa:c8:d8:a0:3f:09: ed:30:b1:d5:cd:bd:09:95:39:1f:33:c1:52:f1:51:ea:6a:c3: 57:7a:cb:fe:47:a7:2a:52:e0:5a:82:2d:e0:2c:6f:d6:7b:2e: f8:13:44:18:15:39:b7:42:33:86:86:fa:dd:7c:4d:b9:b5:47: 50:67:99:dd:da:59:ba:64:bb:2d:d4:7f:b9:bf:97:4d:27:92: 27:6e:c2:f1:c9:a1:fd:ce:29:3c:79:20:55:cd:a6:d6:97:cd: 74:c4:2e:5e:cd:8d:e6:fd:71:ab:d4:43:ed:44:11:43:84:e0: 7d:82:bf:50:d8:8a:c2:ec:b4:13:f7:1c:49:30:57:52:a0:4a: 0d:10:b8:32:76:d9:ff:81:a0:60:df:35:e0:0b:66:43:c6:91: cb:24:21:33:97:ef:9d:ab:7e:ac:10:b6:2a:e8:35:87:66:96: a3:c2:38:d7:2d:31:62:8c:88:27:f3:8e:e3:d6:fd:26:7d:a8: 8c:4a:0c:c5:0e:d6:65:cc:3c:12:62:52:71:1f:15:c8:73:b8: 4b:9a:41:4f:8f:4c:4f:ea:a9:19:ac:ae:1f:75:01:ed:a3:5c: dc:92:48:78:56:58:26:50:b3:c1:15:90:fd:7e:71:e3:c8:ab: 80:23:01:0a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK542eywsaS+9RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MTBmOGE3MzAtYTRiNC00MDU3LWFiODMtY2EyZGExMjJjMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+mkLIo2c7RSEbtfnYHrVgHYnfNT2qpfhoqy 9GwfOhwJpPBsA4niXrfoJ63/GY9yVURmmZaV3amTPThTwfx3gu2ujZqjrl/eWNoP QkP1bi6TSsML4HGuZsHCGeOIisW5R9HckmNRxHHVupPh9OCRv2S6UU+tfXczO5G7 JXn4WFi97DQkMbW4uFpR2FxiNTQTDNxL1jFHOYvpzOlccvDKAnJSEcPOT+VzOjG7 v7aUkP1ZZb57yNelonJlh2UZ318dIyC/7dBkWartWd6D9NOjmPt45i/or3nuspD2 Ff+v4hqYBgBc+a+5SPIE60zmRh05zG+zjD5Pfljy3QzfzoIoFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDJ2Vi2JZsqN6CUlGYu46aw/Q2hYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY3NTI2YTQtM2M4Yy0z NjcxLWI2ZGQtMWI5MzcwMmE1YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBZQ8BsLJenBCWV3FiqyNigPwntMLHVzb0JlTkf M8FS8VHqasNXesv+R6cqUuBagi3gLG/Wey74E0QYFTm3QjOGhvrdfE25tUdQZ5nd 2lm6ZLst1H+5v5dNJ5InbsLxyaH9zik8eSBVzabWl810xC5ezY3m/XGr1EPtRBFD hOB9gr9Q2IrC7LQT9xxJMFdSoEoNELgydtn/gaBg3zXgC2ZDxpHLJCEzl++dq36s ELYq6DWHZpajwjjXLTFijIgn847j1v0mfaiMSgzFDtZlzDwSYlJxHxXIc7hLmkFP j0xP6qkZrK4fdQHto1zckkh4VlgmULPBFZD9fnHjyKuAIwEK -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:11 2025 by rpki-client