$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa File: 2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa (raw, json) Hash identifier: 9RNd65ZIqnPg7SHJMQlWFPs0P8d198p8VETYA+g23wA= Subject key identifier: 43:6D:67:14:76:7F:93:37:4E:96:19:FA:A4:B5:BF:CB:DC:4B:7A:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E595374B5FFA1767FC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396592 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e5:95:37:4b:5f:fa:17:67:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=842a5080-db0c-4718-b229-a9384a97d2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:74:39:0b:c9:97:3b:d6:4d:78:4c:d7:cd: 38:6f:0d:3f:ae:c0:73:62:63:3b:96:8b:45:10:f2: c6:75:e9:ff:96:72:8d:b2:06:fe:79:58:68:73:9c: ff:66:30:56:6d:b7:54:20:d1:1f:83:c1:2b:33:96: 81:34:1b:fc:da:63:8f:6a:b0:bb:7a:da:54:9d:85: be:67:76:5a:c7:6e:59:9d:ec:fa:9f:7b:f5:5f:1d: 1a:5b:11:9b:60:5d:e2:c1:47:30:11:7a:8a:39:93: 3a:a0:51:cf:c9:d1:3c:ea:70:7e:05:71:c0:b3:61: 01:23:5a:53:7a:5e:fb:e8:f8:6d:4f:f1:90:b2:a7: 98:58:ef:ea:57:b4:45:4d:2d:9d:8e:8c:cf:bc:cf: 5f:e1:73:3d:f9:50:c0:b1:8e:0c:99:5b:45:5a:bd: ab:db:dc:19:6d:ff:35:aa:61:5b:d5:29:48:fc:b2: 5e:1f:e5:39:40:d9:db:2b:88:c2:51:61:cb:95:74: 90:42:fc:42:b7:65:48:9e:46:d4:04:e4:59:6e:ca: 29:b8:2e:80:4d:38:23:1c:66:10:0b:51:67:14:d2: 73:9f:c2:50:e5:2c:fb:51:79:16:7d:6b:77:a4:6a: dd:22:b7:4f:15:fc:be:22:13:b5:29:22:1c:57:e0: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6D:67:14:76:7F:93:37:4E:96:19:FA:A4:B5:BF:CB:DC:4B:7A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0b:cb:8a:8d:52:9b:e2:a0:d7:fb:5e:0c:77:87:c3:a7:40: 01:c5:bd:35:26:29:b3:fc:91:fe:94:6e:1e:27:3a:be:1e:a7: 13:c1:b6:16:91:04:e3:73:52:78:e1:68:29:44:fc:8f:d3:83: 9f:ca:9c:06:8c:b2:17:4d:b6:92:8a:73:15:4f:a5:05:a0:cd: cc:8a:29:01:bc:9b:88:1d:93:e8:6d:2a:a9:46:10:37:75:af: 9a:c5:ab:84:df:6e:5c:29:30:7b:5f:f7:df:e0:4d:53:a4:be: 87:8a:e3:64:7a:9d:0c:07:08:af:09:fc:90:82:68:4b:a5:40: 38:b4:65:3d:f3:75:ca:af:e8:d1:cc:b4:fe:20:b9:da:fb:19: a9:cb:46:49:bc:4a:7f:c2:c7:cc:1d:77:2d:2a:c8:e0:1d:5d: a1:10:42:e3:a8:74:0f:45:4a:88:89:40:c6:48:bf:d8:e6:a2: 16:15:8b:33:dc:88:f4:b8:d1:7d:2f:ea:3f:72:db:9e:69:77: 30:f1:b5:45:ba:6c:01:19:28:63:7e:88:46:e5:85:be:05:47: 76:d7:f4:95:52:9e:45:7d:e8:8e:24:70:8d:44:de:a7:70:52: f0:c3:84:ce:8f:a2:89:8a:b0:11:48:75:9d:54:6c:dc:47:36: 5d:8e:9c:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOWVN0tf+hdn/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODQyYTUwODAtZGIwYy00NzE4LWIyMjktYTkzODRhOTdkMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjF0OQvJlzvWTXhM1804bw0/rsBzYmM7lotF EPLGden/lnKNsgb+eVhoc5z/ZjBWbbdUINEfg8ErM5aBNBv82mOParC7etpUnYW+ Z3Zax25Znez6n3v1Xx0aWxGbYF3iwUcwEXqKOZM6oFHPydE86nB+BXHAs2EBI1pT el776PhtT/GQsqeYWO/qV7RFTS2djozPvM9f4XM9+VDAsY4MmVtFWr2r29wZbf81 qmFb1SlI/LJeH+U5QNnbK4jCUWHLlXSQQvxCt2VInkbUBORZbsopuC6ATTgjHGYQ C1FnFNJzn8JQ5Sz7UXkWfWt3pGrdIrdPFfy+IhO1KSIcV+DcqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFENtZxR2f5M3TpYZ+qS1v8vcS3qDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEzZmViMjMtYzlhNy0z N2Y3LWEyNTUtYjczYmU5ZGJkYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASC8uKjVKb4qDX+14Md4fDp0ABxb01Jimz/JH+ lG4eJzq+HqcTwbYWkQTjc1J44WgpRPyP04OfypwGjLIXTbaSinMVT6UFoM3MiikB vJuIHZPobSqpRhA3da+axauE325cKTB7X/ff4E1TpL6HiuNkep0MBwivCfyQgmhL pUA4tGU983XKr+jRzLT+ILna+xmpy0ZJvEp/wsfMHXctKsjgHV2hEELjqHQPRUqI iUDGSL/Y5qIWFYsz3Ij0uNF9L+o/ctueaXcw8bVFumwBGShjfohG5YW+BUd21/SV Up5FfeiOJHCNRN6ncFLww4TOj6KJirARSHWdVGzcRzZdjpxo -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:04 2025 by rpki-client