$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa File: 2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa (raw, json) Hash identifier: e/b4OXYrMrRHenj4qYUC1+7RYwT9AFuLlxCraRMPll8= Subject key identifier: 6B:D6:80:C7:9F:FE:0A:47:EB:4F:54:6E:5E:21:8B:1B:61:4C:02:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463817764C538572673180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36630 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:38:17:76:4c:53:85:72:67:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=7f6595e5-a4d3-4e99-9511-dd959ede9d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:cc:7e:c9:dc:9e:c1:f7:d1:4f:7b:c8:7a: 1d:f2:4b:36:74:fa:50:64:f7:45:7e:04:63:3d:6f: 05:d9:ef:ba:af:dc:4e:d5:53:4b:7d:50:25:d6:17: e0:0a:60:83:e6:89:1e:00:fe:b0:16:a0:57:3a:88: 55:da:c8:51:bf:4b:6b:82:85:9e:93:c3:79:13:45: 8b:f3:67:0c:3f:80:84:61:94:2a:4a:54:31:29:0b: 6a:58:43:c3:3e:b4:0c:5c:8f:0f:35:9b:15:d3:61: 0a:51:a3:6d:f0:11:e3:c9:96:d0:1e:4e:ca:3d:75: 5d:a7:5f:69:e3:81:3c:86:8f:a3:6c:01:77:ea:07: 43:b0:7e:ea:cb:50:ed:bd:f3:6b:24:1c:4c:8d:08: 73:6c:f9:46:0d:0f:8a:c3:98:cf:f9:68:f2:3d:3b: 2f:80:c3:50:1c:25:37:e7:3f:f9:d0:3a:14:09:11: d1:5d:b6:5b:a5:98:3b:fe:9f:53:1b:25:95:41:0d: 40:dd:06:1c:05:25:3c:ca:ad:30:d6:4b:10:03:8e: 1a:64:ed:2f:b1:a6:32:37:2c:05:ec:89:06:36:a6: 4d:3a:62:6c:6a:86:cb:4e:46:23:52:22:b6:9d:bb: 38:ad:12:2d:d8:0a:eb:e2:f2:db:bb:83:0f:45:3c: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:80:C7:9F:FE:0A:47:EB:4F:54:6E:5E:21:8B:1B:61:4C:02:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b7:9d:12:7e:a9:b8:2f:3b:2d:37:7d:98:c8:b3:64:f7:40: 73:f2:6a:8f:6d:b0:1c:ef:92:cd:92:55:3b:ae:82:9b:86:31: 1b:43:c6:36:a1:86:08:27:e4:7c:fa:6d:73:73:82:35:7f:ab: ba:c0:dc:1a:00:af:aa:20:94:43:59:1b:47:bb:fa:b1:e5:62: 22:13:86:1c:42:56:ad:ed:3c:32:dd:61:49:b4:1a:c8:80:ae: 7e:15:63:8d:73:79:bf:96:98:fa:45:63:59:62:d5:b6:1a:99: 9b:8b:f6:33:17:71:d6:0b:19:fd:d5:0a:5f:68:31:b1:01:70: 66:54:34:55:e3:de:b4:0e:3a:41:5b:b1:79:ab:68:19:1d:6c: f7:12:d3:5f:61:f1:e8:f7:0e:39:77:ca:be:50:04:13:14:32: 0e:6b:a7:8f:f2:19:3b:44:87:83:a5:b5:c5:4e:d4:f8:63:39: 74:ac:a0:bb:81:7f:b1:33:ca:d0:1a:1b:fb:2b:ad:fd:02:61: 53:91:1e:2a:4f:bf:4a:83:46:20:8f:18:86:2c:eb:df:b6:ea: 18:10:97:82:a0:53:96:6c:26:92:49:15:09:c9:cc:c4:02:85: 87:ab:96:0e:be:74:36:87:58:c5:8b:f6:99:0d:55:55:b3:d7: 5d:3a:5c:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjgXdkxThXJnMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk N2Y2NTk1ZTUtYTRkMy00ZTk5LTk1MTEtZGQ5NTllZGU5ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxerMfsncnsH30U97yHod8ks2dPpQZPdFfgRj PW8F2e+6r9xO1VNLfVAl1hfgCmCD5okeAP6wFqBXOohV2shRv0trgoWek8N5E0WL 82cMP4CEYZQqSlQxKQtqWEPDPrQMXI8PNZsV02EKUaNt8BHjyZbQHk7KPXVdp19p 44E8ho+jbAF36gdDsH7qy1DtvfNrJBxMjQhzbPlGDQ+Kw5jP+WjyPTsvgMNQHCU3 5z/50DoUCRHRXbZbpZg7/p9TGyWVQQ1A3QYcBSU8yq0w1ksQA44aZO0vsaYyNywF 7IkGNqZNOmJsaobLTkYjUiK2nbs4rRIt2Arr4vLbu4MPRTwKnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGvWgMef/gpH609Ubl4hixthTALEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRjZjgyNmMtZDdkZS0z MWJiLTgwZDQtMTA4OGE2ZjBjMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI23nRJ+qbgvOy03fZjIs2T3QHPyao9tsBzvks2SVTuugpuGMRtD xjahhggn5Hz6bXNzgjV/q7rA3BoAr6oglENZG0e7+rHlYiIThhxCVq3tPDLdYUm0 GsiArn4VY41zeb+WmPpFY1li1bYamZuL9jMXcdYLGf3VCl9oMbEBcGZUNFXj3rQO OkFbsXmraBkdbPcS019h8ej3Djl3yr5QBBMUMg5rp4/yGTtEh4OltcVO1PhjOXSs oLuBf7EzytAaG/srrf0CYVORHipPv0qDRiCPGIYs69+26hgQl4KgU5ZsJpJJFQnJ zMQChYerlg6+dDaHWMWL9pkNVVWz1106XO4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:38 2025 by rpki-client