$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa File: 3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa (raw, json) Hash identifier: wISkvyXpXDZV6BgZD2D3oV/pgVmS9vslzlusFIu/Vok= Subject key identifier: 26:FB:D4:89:8D:E0:EB:B5:6E:51:06:95:28:B1:5A:D6:8F:EC:74:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825ED2728E6E735B5E87300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396545 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ed:27:28:e6:e7:35:b5:e8:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=f08e542a-39ce-4134-9482-e4e68b87900d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:08:78:61:13:2d:e9:60:75:5f:8f:54:2f: 81:de:d9:77:1c:e5:28:24:cf:d5:9d:b9:33:dd:d1: 58:9e:d2:ad:e1:30:07:a7:e7:ef:36:29:d3:9f:4b: 37:8c:e3:59:50:29:21:b5:d7:bb:11:55:89:ab:fa: 9c:4c:18:95:88:f3:1a:7f:47:16:85:0a:29:6c:c6: 1b:92:59:f4:3b:df:06:69:4b:85:e9:5d:3e:79:24: c1:e8:bb:46:a4:a6:85:41:8b:ba:52:8b:79:81:bc: a4:f1:0d:61:14:32:84:08:c8:c2:dc:ee:09:55:cc: 8b:13:0c:4d:89:e2:52:92:96:c2:f1:7f:3a:8f:f0: ed:0b:92:58:8b:52:3d:97:66:87:04:87:dc:9f:78: 9b:6f:05:9a:e1:17:8b:db:87:61:5e:17:ae:35:22: d2:55:1a:fc:6e:5e:e4:36:e6:db:b4:fa:1a:f9:2f: 06:ce:70:32:f0:ac:bb:f4:68:f8:f1:24:98:f6:b7: f0:40:31:41:f7:73:68:3d:1a:5c:f5:8d:41:63:48: c5:84:e8:8f:d6:36:2a:6e:72:07:92:d8:5b:60:57: 24:88:5e:c9:da:30:4f:b8:cf:f5:06:85:ba:06:b3: 1c:82:8e:10:37:4e:ac:93:8b:0b:a1:26:20:d6:16: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FB:D4:89:8D:E0:EB:B5:6E:51:06:95:28:B1:5A:D6:8F:EC:74:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:81:26:86:3c:f8:0e:1d:21:e1:a9:b9:fd:47:a0:e6:bc:a7: 34:eb:b4:52:fe:70:aa:51:49:4c:57:0a:62:a1:72:da:46:ea: 75:43:8e:9f:fd:09:10:8d:f7:4b:b7:41:74:9c:50:e3:6b:ca: a7:da:c6:30:4e:d6:6d:51:85:3e:cb:98:f6:b3:23:d2:b8:94: f1:16:45:2a:4e:d6:ee:a0:ad:3c:32:9e:e4:cc:35:62:83:e5: dc:f9:43:19:52:65:1f:4d:87:9f:64:65:db:04:d6:3c:a7:fa: 06:9e:65:26:33:5b:b5:69:e1:c5:2c:55:d6:75:10:61:ef:4d: 65:97:24:e0:2b:fc:12:99:3f:c5:d8:3e:c8:08:e2:c9:20:06: e3:23:4d:4a:b5:4d:33:77:16:00:99:b9:39:f3:f0:89:95:e6: fe:23:89:fb:90:91:d4:20:94:04:90:11:dc:97:92:19:d5:0f: c0:8e:d2:70:3f:90:b0:bf:55:90:13:ef:78:ab:ff:05:89:da: bc:eb:11:44:2c:c3:14:a8:6c:12:8e:19:bd:30:fc:2e:18:18: f9:50:ca:ee:8b:7e:86:38:57:98:60:c9:28:6f:a2:18:1f:3e: 77:ea:00:2a:09:6f:7e:38:02:80:07:a2:35:74:eb:86:59:ed: 56:a5:8e:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe0nKObnNbXocwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZjA4ZTU0MmEtMzljZS00MTM0LTk0ODItZTRlNjhiODc5MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7MIeGETLelgdV+PVC+B3tl3HOUoJM/Vnbkz 3dFYntKt4TAHp+fvNinTn0s3jONZUCkhtde7EVWJq/qcTBiViPMaf0cWhQopbMYb kln0O98GaUuF6V0+eSTB6LtGpKaFQYu6Uot5gbyk8Q1hFDKECMjC3O4JVcyLEwxN ieJSkpbC8X86j/DtC5JYi1I9l2aHBIfcn3ibbwWa4ReL24dhXheuNSLSVRr8bl7k NubbtPoa+S8GznAy8Ky79Gj48SSY9rfwQDFB93NoPRpc9Y1BY0jFhOiP1jYqbnIH kthbYFckiF7J2jBPuM/1BoW6BrMcgo4QN06sk4sLoSYg1hZl/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCb71ImN4Ou1blEGlSixWtaP7HQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1NWE3NWYtNDQ3OS0z Y2QwLTk4Y2UtOWM4ZDljOTBhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCBJoY8+A4dIeGpuf1HoOa8pzTrtFL+cKpRSUxXCmKhctpG6nVD jp/9CRCN90u3QXScUONryqfaxjBO1m1RhT7LmPazI9K4lPEWRSpO1u6grTwynuTM NWKD5dz5QxlSZR9Nh59kZdsE1jyn+gaeZSYzW7Vp4cUsVdZ1EGHvTWWXJOAr/BKZ P8XYPsgI4skgBuMjTUq1TTN3FgCZuTnz8ImV5v4jifuQkdQglASQEdyXkhnVD8CO 0nA/kLC/VZAT73ir/wWJ2rzrEUQswxSobBKOGb0w/C4YGPlQyu6LfoY4V5hgyShv ohgfPnfqACoJb344AoAHojV064ZZ7Valjto= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:35 2025 by rpki-client