$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa File: 33c16753-9fad-30c2-845c-db1a7dc64694.roa (raw, json) Hash identifier: 2/dC2IMGEcuBE5TwEjzxYpKUOFso6ZPWKJcutz8qY/o= Subject key identifier: 1E:20:90:4E:F9:D1:B8:21:EC:43:23:18:87:92:7C:F1:01:0A:58:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146363581899547A1992C10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396579 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:36:35:81:89:95:47:a1:99:2c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=c6f91b03-24b9-4949-bc78-d8b51d9af4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:49:af:5b:9a:7e:61:d4:65:84:94:e7:40: a3:83:22:ea:4d:2b:de:a4:3f:9d:81:36:a1:51:63: 59:59:49:78:96:9e:52:d8:52:b5:1a:d1:5a:9d:2a: 74:e3:32:62:c2:f0:b1:46:c7:90:45:75:5d:bb:e4: 0a:dd:57:fd:66:57:fa:44:a5:72:89:a1:06:8a:6e: ff:2d:dd:44:02:35:38:67:d2:10:14:49:27:63:d5: e6:10:00:d0:79:6a:8c:38:4f:27:56:16:f6:a7:6e: 6b:b4:a8:24:fb:0d:66:44:a8:82:88:b4:91:29:57: da:7b:c6:fc:75:18:83:68:15:a3:11:a3:2a:07:11: a4:15:74:06:92:ca:ef:d5:0d:2f:67:33:61:90:a1: 9b:03:c2:a0:52:f1:d5:13:66:5f:e4:ea:b6:8c:b6: b4:22:42:93:97:22:0c:ad:27:32:e1:b7:7c:cf:4a: 85:48:c8:90:e1:12:73:93:a2:e0:1e:da:b5:66:6e: 3c:4b:dd:29:e2:19:52:91:b6:cf:0f:08:f5:46:54: a3:7e:3f:c7:77:1c:ff:c4:09:27:bc:e5:ca:7e:ac: dd:6b:6e:1d:71:f5:d8:5c:e3:ec:68:b9:80:a4:4e: ad:2c:69:ae:5a:e1:7e:ae:ed:35:6d:b3:04:4a:d8: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:20:90:4E:F9:D1:B8:21:EC:43:23:18:87:92:7C:F1:01:0A:58:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bd:78:46:4c:43:7a:ad:33:a5:eb:61:1f:59:d6:18:f3:f1: 51:38:e9:33:aa:b3:98:1b:6e:57:99:e3:e4:e7:b2:20:c7:f3: 03:50:9e:76:4e:09:94:8a:94:e4:8b:64:c1:fb:9b:9e:cd:11: eb:72:81:73:7e:b6:85:44:0b:35:61:4b:98:fe:3b:f4:27:15: aa:fd:25:24:82:e3:21:45:f7:50:d8:82:c6:0f:75:99:f2:cc: 4e:14:7c:7e:be:d2:6d:91:14:55:b3:c0:04:64:1e:c7:0a:94: db:01:52:32:fd:34:14:0b:8b:3d:13:4e:6c:8f:54:3b:6a:66: fe:76:bb:16:15:27:d7:6d:27:c1:da:a5:9d:ee:ab:ae:5e:5a: 69:16:0c:d0:d3:92:fb:c6:28:d8:f8:b4:9a:3b:03:9f:0d:a6: e7:83:8d:a7:ef:df:88:50:f9:9f:72:1e:22:62:1c:95:52:70: 1b:97:0f:d8:ac:f9:18:9b:1c:24:f8:fb:88:88:ec:c1:21:ab: 95:e8:56:40:dc:fb:5c:10:4b:5b:23:b9:8b:f7:0d:ff:b9:f3: 61:81:9f:8f:0a:d2:ff:0a:06:de:de:44:5b:96:de:42:7d:be: b8:77:dd:4a:ae:e2:26:6d:54:b0:d7:54:f6:ef:2d:ef:74:ca: 49:1f:a9:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjY1gYmVR6GZLBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YzZmOTFiMDMtMjRiOS00OTQ5LWJjNzgtZDhiNTFkOWFmNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRpJr1uafmHUZYSU50CjgyLqTSvepD+dgTah UWNZWUl4lp5S2FK1GtFanSp04zJiwvCxRseQRXVdu+QK3Vf9Zlf6RKVyiaEGim7/ Ld1EAjU4Z9IQFEknY9XmEADQeWqMOE8nVhb2p25rtKgk+w1mRKiCiLSRKVfae8b8 dRiDaBWjEaMqBxGkFXQGksrv1Q0vZzNhkKGbA8KgUvHVE2Zf5Oq2jLa0IkKTlyIM rScy4bd8z0qFSMiQ4RJzk6LgHtq1Zm48S90p4hlSkbbPDwj1RlSjfj/Hdxz/xAkn vOXKfqzda24dcfXYXOPsaLmApE6tLGmuWuF+ru01bbMEStgIWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB4gkE750bgh7EMjGIeSfPEBClhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzNjMTY3NTMtOWZhZC0z MGMyLTg0NWMtZGIxYTdkYzY0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIG9eEZMQ3qtM6XrYR9Z1hjz8VE46TOqs5gbbleZ4+TnsiDH8wNQ nnZOCZSKlOSLZMH7m57NEetygXN+toVECzVhS5j+O/QnFar9JSSC4yFF91DYgsYP dZnyzE4UfH6+0m2RFFWzwARkHscKlNsBUjL9NBQLiz0TTmyPVDtqZv52uxYVJ9dt J8HapZ3uq65eWmkWDNDTkvvGKNj4tJo7A58NpueDjafv34hQ+Z9yHiJiHJVScBuX D9is+RibHCT4+4iI7MEhq5XoVkDc+1wQS1sjuYv3Df+582GBn48K0v8KBt7eRFuW 3kJ9vrh33Uqu4iZtVLDXVPbvLe90ykkfqc4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:42 2025 by rpki-client