$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e8a911f-ace8-37a3-ae6d-9f5c6de2f590.roa File: 1e8a911f-ace8-37a3-ae6d-9f5c6de2f590.roa (raw, json) Hash identifier: Lm23tapzyKZXeDRxqDn7ix9k4e4Jisr0+v4RXb0YXnU= Subject key identifier: C8:40:B3:67:76:87:CE:DA:93:2D:9E:74:A3:4B:A9:4D:76:54:A9:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E3028E995F02C676E580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e8a911f-ace8-37a3-ae6d-9f5c6de2f590.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396564 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e3:02:8e:99:5f:02:c6:76:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=9b50afb4-8f3f-4169-8ad6-a2e69fd2c59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:73:f3:7d:ee:80:6b:32:3a:36:2d:77:61: fa:46:b4:5f:4b:d5:b6:37:c3:5d:a7:0a:63:84:70: d0:4d:50:e8:9a:d0:f2:0a:97:7d:ab:01:ec:e8:37: d7:88:a3:36:7c:dc:41:f1:4f:16:31:03:67:91:8a: 44:b0:c7:4f:10:7b:ac:fb:cc:3b:a4:3a:2f:39:5e: 54:4b:c3:34:11:48:2c:f1:bb:4a:6a:10:3d:ea:33: 63:ef:6e:a6:27:11:9c:35:23:39:3a:7f:6e:6f:e4: 05:f9:ca:28:d1:36:0e:b4:b6:4a:4c:e9:01:26:33: 2c:0e:d4:8f:dc:d1:0d:b4:fc:45:6d:31:92:ff:ba: 6a:ce:93:90:0a:bc:32:1f:f7:59:61:ce:bc:c2:3e: eb:d1:7d:62:8c:d2:51:f8:fa:93:ce:6e:c9:f0:33: 55:60:45:50:8d:b3:09:6c:a9:d1:57:1e:81:f0:26: 96:1e:b4:21:da:a8:57:5b:ca:8d:04:15:d6:b3:1f: a9:33:87:06:25:0d:5e:14:49:2c:15:ab:fd:34:02: fc:02:a7:20:ed:07:34:32:ca:d0:d9:08:62:64:f5: 39:d5:42:5c:98:44:e3:af:7e:1c:59:02:af:96:4b: 90:38:2b:bf:6b:20:a5:f8:7a:14:32:c0:c7:c0:20: c6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:40:B3:67:76:87:CE:DA:93:2D:9E:74:A3:4B:A9:4D:76:54:A9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e8a911f-ace8-37a3-ae6d-9f5c6de2f590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3a:81:90:fc:4d:1f:62:9f:c6:99:4a:f3:c8:64:61:ad:59: 76:2b:50:57:89:99:87:ab:1d:b6:bf:a2:63:c0:3c:ab:e9:a8: 5b:85:7c:86:81:84:67:44:a9:9c:a0:00:2a:21:4f:31:9f:30: 2d:50:96:ad:2d:e3:26:8c:d6:cd:e8:86:54:97:05:5e:2d:99: 2c:39:dc:13:0f:2a:cc:52:2c:83:1e:39:03:65:59:da:1a:5c: 2e:8b:9d:14:fd:90:f7:2b:42:1c:64:c3:d3:57:28:4a:72:60: 7a:e6:46:2d:6e:73:d8:f5:19:2d:c4:21:ad:4a:8e:d5:71:a1: c1:bf:76:06:a3:e0:a7:44:9e:76:9f:a5:19:cb:1c:32:a6:1a: 42:3d:fa:83:d7:cd:50:ca:8a:41:47:d9:55:37:23:7a:21:c0: 61:d2:b0:21:14:6b:9b:f2:b0:cb:48:70:d8:9e:84:39:2a:8d: 21:18:5e:dd:e9:fa:1e:70:4e:f6:3f:f6:e5:07:ae:94:1a:5d: 48:11:71:d1:71:99:1b:56:f2:e4:0a:10:92:b4:56:bd:46:8c: 5f:1f:63:1b:e3:d2:02:b4:ef:b3:87:6c:a2:d4:d2:b7:71:06: 04:23:d8:84:30:03:2c:ce:08:15:9a:07:e7:18:00:53:fc:3a: 54:ad:47:7c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOMCjplfAsZ25YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OWI1MGFmYjQtOGYzZi00MTY5LThhZDYtYTJlNjlmZDJjNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL1z833ugGsyOjYtd2H6RrRfS9W2N8Ndpwpj hHDQTVDomtDyCpd9qwHs6DfXiKM2fNxB8U8WMQNnkYpEsMdPEHus+8w7pDovOV5U S8M0EUgs8btKahA96jNj726mJxGcNSM5On9ub+QF+coo0TYOtLZKTOkBJjMsDtSP 3NENtPxFbTGS/7pqzpOQCrwyH/dZYc68wj7r0X1ijNJR+PqTzm7J8DNVYEVQjbMJ bKnRVx6B8CaWHrQh2qhXW8qNBBXWsx+pM4cGJQ1eFEksFav9NAL8Aqcg7Qc0MsrQ 2QhiZPU51UJcmETjr34cWQKvlkuQOCu/ayCl+HoUMsDHwCDGiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMhAs2d2h87aky2edKNLqU12VKmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWU4YTkxMWYtYWNlOC0z N2EzLWFlNmQtOWY1YzZkZTJmNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBuOoGQ/E0fYp/GmUrzyGRhrVl2K1BXiZmHqx22 v6JjwDyr6ahbhXyGgYRnRKmcoAAqIU8xnzAtUJatLeMmjNbN6IZUlwVeLZksOdwT DyrMUiyDHjkDZVnaGlwui50U/ZD3K0IcZMPTVyhKcmB65kYtbnPY9RktxCGtSo7V caHBv3YGo+CnRJ52n6UZyxwyphpCPfqD181QyopBR9lVNyN6IcBh0rAhFGub8rDL SHDYnoQ5Ko0hGF7d6foecE72P/blB66UGl1IEXHRcZkbVvLkChCStFa9RoxfH2Mb 49ICtO+zh2yi1NK3cQYEI9iEMAMszggVmgfnGABT/DpUrUd8 -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:55 2025 by rpki-client