$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa File: 2e554928-7feb-3557-86a2-4b827d5925ae.roa (raw, json) Hash identifier: EUbtpzLu6Dzr3ywfhzTnJfix7kNBN7reBznSanJSSuA= Subject key identifier: 5A:39:43:B7:4C:E2:00:42:7E:1E:78:5A:63:2D:B3:75:89:A8:95:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EF7AE7FC622173C835C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396608 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ef:7a:e7:fc:62:21:73:c8:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=64c4f279-affc-4f85-9e51-67ebfbafd214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:04:cf:5e:95:21:73:2e:84:39:b5:81:ad: 3d:a3:7e:5c:d3:b5:49:e6:b7:35:12:14:5e:0a:30: 40:27:d9:d5:8d:68:fb:15:b4:77:34:56:98:33:78: 4d:fd:f5:63:3a:f3:52:78:82:ff:35:07:f3:76:15: 47:c2:8f:26:e8:8a:24:fe:92:b8:50:ef:2e:2b:ca: 1b:b3:63:8b:cd:a6:d4:e8:85:3a:ca:3a:eb:8c:e8: 0d:f0:ec:c7:95:04:56:41:23:6d:29:ef:b5:f0:ef: 76:0c:17:e7:27:37:38:56:07:10:1e:99:bb:0f:07: ed:5f:79:6f:75:90:78:25:de:9d:86:d7:44:0e:9e: d0:5c:21:2a:28:61:39:27:95:16:1f:5b:fd:2a:fb: da:ad:2c:d9:85:e5:f0:66:2c:19:2d:a5:77:e7:8c: c5:3b:89:39:2f:db:02:11:12:af:e6:db:b7:d0:a4: 2e:d3:d5:a5:01:ec:a3:7c:53:23:e4:5f:51:d4:63: 7c:e1:e2:61:b7:4b:6d:0f:83:6b:c4:4c:e6:57:68: d9:ba:9b:98:32:c9:95:e7:66:77:8a:cf:bb:85:19: 58:f7:33:c0:4b:45:3d:f8:aa:48:c4:88:f7:c6:23: 01:a1:d2:24:09:b9:20:90:29:dc:06:06:3b:ec:30: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:43:B7:4C:E2:00:42:7E:1E:78:5A:63:2D:B3:75:89:A8:95:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:de:66:fb:24:37:4f:63:4c:46:e4:13:ff:7b:eb:d5:bb:cc: 06:82:55:87:15:7c:ea:07:27:64:ba:75:ec:95:36:db:33:fa: 67:b4:62:fb:2a:2d:19:e0:05:ee:7d:fb:35:6a:fe:ae:14:e8: f0:12:97:4e:68:a1:bf:c7:9b:2f:fa:1f:09:15:a1:27:6a:42: c1:10:d7:63:d8:9c:2c:ad:b7:81:11:5f:44:ef:26:cc:fe:d5: ea:5f:12:b2:ae:08:1f:44:c7:e4:22:f1:8b:df:af:f3:ea:43: 9f:1a:99:a2:88:1f:9b:cf:2c:dc:23:27:6f:83:a8:14:f2:8e: db:69:fd:d7:b5:79:fe:57:f0:2f:3c:c1:86:10:31:63:48:60: 24:0a:e9:3c:93:4e:bb:68:12:37:5c:8d:de:86:f2:90:4c:62: 06:3a:d8:b4:b6:a4:f3:fc:6c:c3:cf:66:30:ec:c4:71:82:de: 93:b9:84:ac:a0:08:c2:b0:8d:59:75:0b:68:71:65:dc:cc:4a: e4:2f:c7:11:ae:67:df:b2:ff:58:00:c1:96:c9:8e:c4:f0:95: 6f:d3:f4:31:ab:9c:12:44:ff:1e:1f:29:22:a2:7b:76:aa:33: c9:ae:26:81:f1:99:e8:6b:92:77:c9:2e:ec:71:ea:08:3f:91: 19:b5:3c:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe965/xiIXPINcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NjRjNGYyNzktYWZmYy00Zjg1LTllNTEtNjdlYmZiYWZkMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkEEz16VIXMuhDm1ga09o35c07VJ5rc1EhRe CjBAJ9nVjWj7FbR3NFaYM3hN/fVjOvNSeIL/NQfzdhVHwo8m6Iok/pK4UO8uK8ob s2OLzabU6IU6yjrrjOgN8OzHlQRWQSNtKe+18O92DBfnJzc4VgcQHpm7DwftX3lv dZB4Jd6dhtdEDp7QXCEqKGE5J5UWH1v9KvvarSzZheXwZiwZLaV354zFO4k5L9sC ERKv5tu30KQu09WlAeyjfFMj5F9R1GN84eJht0ttD4NrxEzmV2jZupuYMsmV52Z3 is+7hRlY9zPAS0U9+KpIxIj3xiMBodIkCbkgkCncBgY77DBkIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFo5Q7dM4gBCfh54WmMts3WJqJVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU1NTQ5MjgtN2ZlYi0z NTU3LTg2YTItNGI4MjdkNTkyNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjeZvskN09jTEbkE/9769W7zAaCVYcVfOoHJ2S6deyVNtsz+me0 YvsqLRngBe59+zVq/q4U6PASl05oob/Hmy/6HwkVoSdqQsEQ12PYnCytt4ERX0Tv Jsz+1epfErKuCB9Ex+Qi8Yvfr/PqQ58amaKIH5vPLNwjJ2+DqBTyjttp/de1ef5X 8C88wYYQMWNIYCQK6TyTTrtoEjdcjd6G8pBMYgY62LS2pPP8bMPPZjDsxHGC3pO5 hKygCMKwjVl1C2hxZdzMSuQvxxGuZ9+y/1gAwZbJjsTwlW/T9DGrnBJE/x4fKSKi e3aqM8muJoHxmehrknfJLuxx6gg/kRm1PCE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:45 2025 by rpki-client