$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa File: f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa (raw, json) Hash identifier: zGIbCKHzOphBrFCZvbfmCrjmDx8l3WF77UWJzZLr+34= Subject key identifier: 59:C4:69:AF:AA:59:3D:EA:52:D4:C7:B5:9C:D2:DF:C5:5F:FD:F5:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9910974A3779D246BEBC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396577 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:99:10:97:4a:37:79:d2:46:be:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=a10bb7cf-4005-473f-837e-dbb9093816fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:22:ec:6a:be:34:8b:06:da:05:f2:7c:ab: fe:b4:92:14:70:80:ce:a8:be:bc:7d:b2:2c:1b:55: ef:e9:78:17:3e:c8:24:6a:86:1c:66:8c:c1:ba:26: 49:fe:0b:cb:4b:27:a6:6d:37:18:0f:a2:43:73:81: 33:14:03:43:3c:7f:44:f4:8a:7d:2f:56:93:89:97: f4:82:84:7d:57:67:84:93:9b:61:5f:ca:f1:b7:93: ec:ec:20:2e:21:c7:76:c0:96:97:57:49:a9:94:32: 6b:2c:7f:04:a6:7a:c6:cd:a2:0e:39:bf:b9:78:df: a4:41:b1:68:d3:89:14:01:91:c6:31:46:76:b2:3f: 26:f2:a0:f7:fd:ea:ef:23:24:69:1d:51:e3:dc:05: 01:a9:ad:1a:c2:7d:44:3c:b8:01:49:ca:0a:39:4c: f4:9d:53:31:03:8f:3a:f4:25:da:44:37:d6:16:ee: a9:e7:54:90:b4:c6:c3:fb:98:54:f6:04:14:5e:8c: bd:6c:c6:c8:0d:91:b7:b5:85:40:5e:80:22:5d:94: 0e:32:7e:ff:9b:af:d9:b0:7b:0c:9a:35:aa:6a:1d: 13:08:ac:b1:4f:8c:53:f9:26:55:72:c9:23:bd:3a: 4c:ed:ce:d8:51:59:47:83:20:6f:9a:8a:ab:94:ed: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C4:69:AF:AA:59:3D:EA:52:D4:C7:B5:9C:D2:DF:C5:5F:FD:F5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b9:cd:f3:2f:42:84:6a:38:92:02:60:7b:57:7e:09:d8:6b: c1:6b:a4:5a:01:43:e1:34:2b:21:bd:b0:50:13:b5:26:80:84: 5c:1e:b1:28:7e:85:f7:49:10:7d:8b:0a:f6:d0:76:39:53:aa: 77:12:51:98:1a:7e:70:07:ec:d6:43:9a:86:08:b0:06:81:dd: 98:92:9e:ea:e1:03:8a:e1:46:ea:80:31:e5:40:15:19:f5:9c: b0:3c:7b:7c:7d:58:fc:35:d1:d9:90:ce:bb:c8:7e:09:07:77: 44:1d:2c:58:94:dc:c6:ac:9c:70:58:60:87:a2:a6:07:8c:10: 50:39:c8:d2:40:86:58:43:f9:3d:1d:c8:d4:07:9e:e7:c3:a2: e6:80:3a:81:6d:d4:f6:79:b4:8d:10:7b:f2:e2:60:cf:83:b1: 0e:e4:81:c5:36:dd:87:92:53:8a:6f:74:54:d9:11:c9:68:ae: 59:68:0f:07:ed:e9:65:10:5d:b5:ca:61:76:b2:e7:88:e6:44: 65:33:1b:20:cf:cf:6f:f0:7d:19:a6:d4:33:61:f3:24:90:fc: d2:d9:f8:21:60:e6:78:f1:29:94:fb:69:a7:39:ae:34:44:3a: 4e:65:f4:67:a2:b6:6e:83:8a:bd:eb:27:f6:66:13:83:c7:79: 38:8b:67:b3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5kQl0o3edJGvrwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YTEwYmI3Y2YtNDAwNS00NzNmLTgzN2UtZGJiOTA5MzgxNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9wi7Gq+NIsG2gXyfKv+tJIUcIDOqL68fbIs G1Xv6XgXPsgkaoYcZozBuiZJ/gvLSyembTcYD6JDc4EzFANDPH9E9Ip9L1aTiZf0 goR9V2eEk5thX8rxt5Ps7CAuIcd2wJaXV0mplDJrLH8EpnrGzaIOOb+5eN+kQbFo 04kUAZHGMUZ2sj8m8qD3/ervIyRpHVHj3AUBqa0awn1EPLgBScoKOUz0nVMxA486 9CXaRDfWFu6p51SQtMbD+5hU9gQUXoy9bMbIDZG3tYVAXoAiXZQOMn7/m6/ZsHsM mjWqah0TCKyxT4xT+SZVcskjvTpM7c7YUVlHgyBvmoqrlO1BBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFnEaa+qWT3qUtTHtZzS38Vf/fXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjllNjY4NTctYWVhYS0z ZDQ2LTlmMDItM2Q3YTkzZjFiODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCHuc3zL0KEajiSAmB7V34J2GvBa6RaAUPhNCsh vbBQE7UmgIRcHrEofoX3SRB9iwr20HY5U6p3ElGYGn5wB+zWQ5qGCLAGgd2Ykp7q 4QOK4UbqgDHlQBUZ9ZywPHt8fVj8NdHZkM67yH4JB3dEHSxYlNzGrJxwWGCHoqYH jBBQOcjSQIZYQ/k9HcjUB57nw6LmgDqBbdT2ebSNEHvy4mDPg7EO5IHFNt2HklOK b3RU2RHJaK5ZaA8H7ellEF21ymF2sueI5kRlMxsgz89v8H0ZptQzYfMkkPzS2fgh YOZ48SmU+2mnOa40RDpOZfRnorZug4q96yf2ZhODx3k4i2ez -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:33 2025 by rpki-client