$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa File: e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa (raw, json) Hash identifier: sEGY+1DH3lRME4+YUYKTQNXPLwAGJuRO8a7d9gMJTfE= Subject key identifier: 1C:54:8D:BA:54:C4:EB:75:27:85:51:0C:7D:AC:BB:19:40:78:72:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB91BE548CFB11F95D1437450 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36627 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:e5:48:cf:b1:1f:95:d1:43:74:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=e9b4f3e3-bffc-4a92-ac89-841e5c8bceaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:54:a2:34:44:97:86:78:5e:b4:9b:c4:d8: b7:4b:b9:ef:70:ab:15:7c:01:2b:84:df:8f:1a:78: a7:ca:3d:f1:83:6c:9a:c1:46:ba:bc:18:2d:04:03: 51:ed:87:35:88:69:56:dd:d2:27:a3:8d:25:13:42: e9:ff:08:ed:92:8c:ee:d7:3e:8c:31:12:21:32:00: 40:f2:6c:4c:4f:e2:ce:07:33:e8:2f:94:46:b7:f2: 25:75:ee:73:34:c9:aa:86:cf:97:19:31:66:5f:40: 8e:dd:87:3c:3f:e3:b3:e2:48:ac:22:48:7e:d4:5a: 28:76:b9:94:98:35:23:95:16:e4:4b:1d:5e:97:2d: d6:cb:d9:c2:1b:a7:03:91:73:c4:8a:fd:29:64:d9: a0:f1:25:3d:74:5c:7e:d6:19:95:83:64:0c:66:59: 3a:35:82:a7:bd:81:92:96:1e:09:dd:39:f0:52:e2: a8:e7:e1:26:97:a7:0f:95:31:62:8e:a2:83:fc:7e: c6:51:b5:15:2a:d8:5e:a3:02:a2:ee:26:63:80:91: bb:73:42:a8:d3:81:10:fd:82:ea:38:b8:19:0e:b3: 8c:11:c6:9f:fd:49:ff:47:1e:2d:04:3e:36:9b:24: 44:5a:d2:b3:8e:17:08:e6:ae:99:c0:e7:c6:38:20: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:54:8D:BA:54:C4:EB:75:27:85:51:0C:7D:AC:BB:19:40:78:72:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8d:d3:cf:dc:db:15:ee:80:20:03:2c:fd:2c:4b:f7:18:e2: 54:ed:8c:80:5a:3b:88:90:f8:02:37:91:48:df:4e:a6:06:a2: ab:a4:05:bc:d5:bb:64:08:7a:de:0d:76:bb:cf:34:ef:15:a1: 14:6a:ab:0d:e3:48:c6:30:00:e9:a5:aa:51:7a:5b:de:07:56: 8a:9e:c4:5e:bf:a6:a3:d6:8d:bc:e3:07:02:53:a5:29:ae:9f: d6:01:70:75:72:9d:b6:af:0e:7c:c6:eb:5e:1c:26:11:d5:62: 2a:4b:64:36:4a:39:43:93:b8:54:9e:3a:44:36:ae:03:3b:90: c5:af:73:6f:71:69:6b:65:4f:f6:4a:ef:40:ef:db:aa:ee:e5: 4d:5f:e5:a9:9f:bb:b4:6e:4a:9a:25:d2:b0:2c:c7:94:77:a7: 66:41:09:42:39:ad:17:50:55:73:59:c9:be:77:16:08:fd:25: 98:09:a0:d2:cd:55:ae:c3:9f:31:df:cb:2d:75:42:40:fd:69: cf:6c:4b:cd:df:ec:15:e0:e2:8b:30:ce:d6:2e:a5:f6:a2:ac: 10:de:50:c4:21:a0:8e:28:d8:e6:d1:a9:18:22:e2:68:1a:7d: 7a:18:a9:3f:2f:89:06:29:6c:91:04:42:0d:c6:2f:2a:d1:87: 8f:0b:b6:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+VIz7EfldFDdFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZTliNGYzZTMtYmZmYy00YTkyLWFjODktODQxZTVjOGJjZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr95UojREl4Z4XrSbxNi3S7nvcKsVfAErhN+P Gninyj3xg2yawUa6vBgtBANR7Yc1iGlW3dIno40lE0Lp/wjtkozu1z6MMRIhMgBA 8mxMT+LOBzPoL5RGt/Ilde5zNMmqhs+XGTFmX0CO3Yc8P+Oz4kisIkh+1FoodrmU mDUjlRbkSx1ely3Wy9nCG6cDkXPEiv0pZNmg8SU9dFx+1hmVg2QMZlk6NYKnvYGS lh4J3TnwUuKo5+Eml6cPlTFijqKD/H7GUbUVKtheowKi7iZjgJG7c0Ko04EQ/YLq OLgZDrOMEcaf/Un/Rx4tBD42myREWtKzjhcI5q6ZwOfGOCATswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBxUjbpUxOt1J4VRDH2suxlAeHJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQzZWY5ODgtOGVhZi0z MDNmLThmNWItYzc2MmUyZjEyZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6jdPP3NsV7oAgAyz9LEv3GOJU7YyAWjuIkPgC N5FI306mBqKrpAW81btkCHreDXa7zzTvFaEUaqsN40jGMADppapRelveB1aKnsRe v6aj1o284wcCU6Uprp/WAXB1cp22rw58xuteHCYR1WIqS2Q2SjlDk7hUnjpENq4D O5DFr3NvcWlrZU/2Su9A79uq7uVNX+Wpn7u0bkqaJdKwLMeUd6dmQQlCOa0XUFVz Wcm+dxYI/SWYCaDSzVWuw58x38stdUJA/WnPbEvN3+wV4OKLMM7WLqX2oqwQ3lDE IaCOKNjm0akYIuJoGn16GKk/L4kGKWyRBEINxi8q0YePC7ZU -----END CERTIFICATE-----Generated at Wed Aug 6 05:29:03 2025 by rpki-client