$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa File: 0697b4b5-f608-31ea-86a4-9f99a6da708b.roa (raw, json) Hash identifier: 8rrJD6pQvFB5aA1pQ32QsPwwbBy+eOQ71VAKTwc2Qgo= Subject key identifier: 80:5D:E7:E5:04:18:F2:75:F1:70:E2:EA:B8:DF:80:F3:74:7C:7E:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825F2FB8B4CB1D9D3487280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397201 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f2:fb:8b:4c:b1:d9:d3:48:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=9b070b25-ffec-44ac-98e2-5863e02aede7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:59:8f:b2:e7:e7:bc:d9:69:d2:b8:f7:c1: 93:76:81:d5:03:38:04:0f:71:22:4b:53:a0:39:d4: ad:26:d9:3e:d3:96:8e:77:29:bc:a1:81:86:54:be: d4:1c:6f:da:30:c4:3a:a4:73:5d:34:3e:18:a8:29: 7e:cb:1b:7c:a2:9c:2a:55:f1:67:b8:37:0c:85:f8: 38:f9:7d:86:f1:46:25:62:ba:3f:e6:e3:6b:23:ff: d6:2c:63:e0:d6:4c:e0:b8:c3:f2:91:48:1e:f8:d8: bf:52:30:4c:6c:49:f4:38:df:f7:88:de:57:03:18: 35:70:ec:83:dc:da:8e:94:55:15:d7:ea:a1:4e:a5: a3:b5:54:9b:eb:95:5e:66:10:b9:e1:2a:1b:bb:12: cf:69:ee:f2:d9:20:b8:1f:3b:10:ef:4f:4a:3b:b1: 7f:96:d7:6e:4c:cf:45:be:b4:04:d5:24:fc:90:b7: 98:50:3c:78:a1:2b:d7:3f:10:0b:75:d3:50:02:2c: 9a:4d:18:d2:1e:88:d6:05:24:6a:67:f2:a3:42:45: cb:58:4b:6b:f7:bb:41:3d:41:18:02:42:b5:87:6a: 03:ee:ab:89:1c:68:f3:6a:3c:a1:ef:70:5e:d6:5d: b3:90:99:a9:9e:27:27:8d:77:df:1b:86:c1:0b:51: c4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:E7:E5:04:18:F2:75:F1:70:E2:EA:B8:DF:80:F3:74:7C:7E:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:11:85:f8:de:cd:85:7a:2e:08:36:04:dd:d2:3d:4d:28:92: 1e:81:b5:62:40:ff:b5:84:c0:f4:48:b9:0a:34:a0:03:b0:92: bb:b7:cb:32:68:4b:4b:fb:0a:c8:f8:ab:45:58:83:8c:cb:ae: 52:80:ba:0a:00:24:84:43:a1:80:ac:f7:df:75:1b:b6:fa:b3: cb:30:14:eb:33:28:cc:37:73:a4:93:e5:e1:5d:8a:4c:13:2c: 25:03:39:8b:fd:88:d4:6d:7c:18:44:54:e1:e8:be:6c:a4:12: 91:78:6a:91:f1:e2:57:4e:c0:39:c5:c7:00:5c:8c:60:a9:19: 5a:b9:5a:15:96:6b:cb:3b:de:ce:e0:97:4b:1c:78:8b:8f:3e: 44:f7:50:3f:cc:47:8a:f3:80:8b:67:73:bf:09:13:29:3a:98: 62:12:57:43:c9:56:e2:c7:87:f9:65:68:9b:df:6e:4c:78:3e: 2b:e0:b2:d6:7e:17:65:24:05:24:e3:8c:75:a1:35:47:32:eb: 9c:eb:2d:de:7a:34:54:da:68:4b:63:7e:89:88:e4:bf:ad:9e: d5:0a:80:21:42:97:f9:93:c2:cf:0e:9c:b5:58:24:78:58:9a: 44:3d:55:f6:5c:53:c4:42:e0:62:a9:97:16:42:d1:45:53:e3: 90:78:1b:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfL7i0yx2dNIcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OWIwNzBiMjUtZmZlYy00NGFjLTk4ZTItNTg2M2UwMmFlZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3dZj7Ln57zZadK498GTdoHVAzgED3EiS1Og OdStJtk+05aOdym8oYGGVL7UHG/aMMQ6pHNdND4YqCl+yxt8opwqVfFnuDcMhfg4 +X2G8UYlYro/5uNrI//WLGPg1kzguMPykUge+Ni/UjBMbEn0ON/3iN5XAxg1cOyD 3NqOlFUV1+qhTqWjtVSb65VeZhC54SobuxLPae7y2SC4HzsQ709KO7F/ltduTM9F vrQE1ST8kLeYUDx4oSvXPxALddNQAiyaTRjSHojWBSRqZ/KjQkXLWEtr97tBPUEY AkK1h2oD7quJHGjzajyh73Be1l2zkJmpnicnjXffG4bBC1HEGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBd5+UEGPJ18XDi6rjfgPN0fH6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDY5N2I0YjUtZjYwOC0z MWVhLTg2YTQtOWY5OWE2ZGE3MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEERhfjezYV6Lgg2BN3SPU0okh6BtWJA/7WEwPRIuQo0oAOwkru3 yzJoS0v7Csj4q0VYg4zLrlKAugoAJIRDoYCs9991G7b6s8swFOszKMw3c6ST5eFd ikwTLCUDOYv9iNRtfBhEVOHovmykEpF4apHx4ldOwDnFxwBcjGCpGVq5WhWWa8s7 3s7gl0sceIuPPkT3UD/MR4rzgItnc78JEyk6mGISV0PJVuLHh/llaJvfbkx4Pivg stZ+F2UkBSTjjHWhNUcy65zrLd56NFTaaEtjfomI5L+tntUKgCFCl/mTws8OnLVY JHhYmkQ9VfZcU8RC4GKplxZC0UVT45B4G+A= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:19 2025 by rpki-client