$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa File: f30990ec-db44-3f17-ad47-6a3df43a0baa.roa (raw, json) Hash identifier: cxkSXee9S3X1u9zC5C93EzeJ5m5YvScF3cgns8y1gTg= Subject key identifier: EE:63:35:A2:C8:FA:E6:D1:B8:41:83:37:F9:78:6C:D3:F1:24:5E:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AADF12D10E0C1E80C2B18F900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:2d:10:e0:c1:e8:0c:2b:18:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=4beb5928-c813-4e86-906d-84cfd42dd3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:84:af:3f:81:27:5b:ad:4d:62:70:c3:79: cb:2c:a0:2c:59:dd:c6:b3:8d:07:70:24:66:39:64: 7c:7a:35:80:11:41:30:f6:f7:a1:2c:f1:f2:aa:cb: 29:2d:8a:1d:6a:fa:90:90:ad:4e:f4:b7:64:9d:3c: 67:dd:f5:8f:58:cf:0e:2f:d4:2e:e6:43:a3:9f:6d: 90:1e:72:30:d8:b7:b1:33:c8:b9:33:2f:d2:27:8a: 6c:b8:16:01:6c:81:47:fc:1b:88:ae:87:56:55:c5: c5:06:9c:40:2f:7f:b9:e9:fe:25:9d:14:1c:f3:d3: 56:f3:bf:cf:a4:45:70:4c:89:6f:e2:66:48:10:fe: 7b:45:c7:22:29:21:7f:67:49:59:c0:f8:b0:4d:fc: 4e:7a:b4:0d:3d:10:e6:ef:a4:aa:b2:e3:56:14:48: 6d:a9:f5:48:36:f5:14:7b:71:93:f6:82:18:9e:b0: fe:a1:2a:ac:f3:4d:6d:81:b9:06:ea:f3:7a:37:db: 71:78:d5:c5:12:e2:c0:ae:77:0b:82:93:14:f9:07: f5:a5:dc:b3:da:44:58:e7:76:fb:9c:dc:f2:de:d7: 7b:92:87:f2:f8:99:aa:2e:9e:e5:3a:7e:6b:38:e2: 86:13:44:d6:0a:c5:93:ef:64:0b:e3:3c:55:be:5b: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:63:35:A2:C8:FA:E6:D1:B8:41:83:37:F9:78:6C:D3:F1:24:5E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0d:de:c4:fe:ae:77:52:65:b4:2c:60:34:13:d8:43:59:7b: 9a:78:91:e7:d3:e0:8f:50:57:92:4b:26:26:b8:53:4f:00:43: a0:bf:dc:b6:1a:48:81:cd:af:b2:0d:61:96:db:d9:d4:2c:9e: 27:92:01:cc:9e:df:88:97:0c:de:98:7e:5b:3f:bf:3b:9e:c9: 59:64:38:34:6b:7d:5e:e4:18:85:bb:a4:8b:05:cb:ac:6d:43: 2e:fe:5a:10:e6:f4:54:be:cb:35:8e:c6:79:73:3f:c1:8b:23: 74:ef:82:92:24:c4:f9:2d:7b:b1:d4:f6:79:97:05:84:c8:43: c2:3d:3f:b4:05:d6:91:0e:76:76:94:7f:f7:ca:42:8d:1f:c3: b2:2c:75:c1:41:fd:0c:c5:67:03:06:e1:77:82:cb:a4:a3:25: b9:d0:a0:00:e0:95:a3:5d:ed:84:f9:ff:c7:58:f7:f5:9c:44: 76:9c:98:94:f1:fe:69:cb:2c:85:59:01:85:b9:c1:bb:2c:98: fe:49:c6:95:5a:24:f7:69:78:3e:c7:f7:f8:ee:15:01:b2:e9: 07:6a:e6:e2:00:19:fd:da:c2:26:5b:b9:ac:09:0e:a8:b2:57: 7d:7b:62:f0:a5:70:59:6b:32:a8:87:46:f1:dd:32:ad:f1:6d: e8:5a:11:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8S0Q4MHoDCsY+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NGJlYjU5MjgtYzgxMy00ZTg2LTkwNmQtODRjZmQ0MmRkM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXCErz+BJ1utTWJww3nLLKAsWd3Gs40HcCRm OWR8ejWAEUEw9vehLPHyqsspLYodavqQkK1O9LdknTxn3fWPWM8OL9Qu5kOjn22Q HnIw2LexM8i5My/SJ4psuBYBbIFH/BuIrodWVcXFBpxAL3+56f4lnRQc89NW87/P pEVwTIlv4mZIEP57RcciKSF/Z0lZwPiwTfxOerQNPRDm76SqsuNWFEhtqfVINvUU e3GT9oIYnrD+oSqs801tgbkG6vN6N9txeNXFEuLArncLgpMU+Qf1pdyz2kRY53b7 nNzy3td7kofy+JmqLp7lOn5rOOKGE0TWCsWT72QL4zxVvlsVDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO5jNaLI+ubRuEGDN/l4bNPxJF4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjMwOTkwZWMtZGI0NC0z ZjE3LWFkNDctNmEzZGY0M2EwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAAN3sT+rndSZbQsYDQT2ENZe5p4kefT4I9QV5JLJia4U08AQ6C/ 3LYaSIHNr7INYZbb2dQsnieSAcye34iXDN6Yfls/vzueyVlkODRrfV7kGIW7pIsF y6xtQy7+WhDm9FS+yzWOxnlzP8GLI3TvgpIkxPkte7HU9nmXBYTIQ8I9P7QF1pEO dnaUf/fKQo0fw7IsdcFB/QzFZwMG4XeCy6SjJbnQoADglaNd7YT5/8dY9/WcRHac mJTx/mnLLIVZAYW5wbssmP5JxpVaJPdpeD7H9/juFQGy6Qdq5uIAGf3awiZbuawJ DqiyV317YvClcFlrMqiHRvHdMq3xbehaEcc= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:01 2025 by rpki-client