$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa File: 3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa (raw, json) Hash identifier: rWL5kZVyyK/yc8YyzcGAr17gs4gaabF5+fJZEBSeyCE= Subject key identifier: 6F:C0:93:10:83:C8:8F:E7:FB:BF:F2:CE:7D:B0:C5:06:37:F4:4E:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EAF84B827758B7425F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396570 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ea:f8:4b:82:77:58:b7:42:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f78b00a8-2c89-49ff-8d62-22503d83a04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:6d:92:e8:d5:b1:f7:f5:1c:15:43:b1:3a: d4:49:02:45:36:53:11:1e:78:09:7e:de:13:09:90: 2c:b4:ff:77:c4:cd:3f:76:97:09:c4:54:2c:88:b2: d7:bf:8f:89:cd:4e:f6:47:62:86:70:80:b5:fa:c8: a8:d7:e2:77:a4:9b:bb:6c:a9:39:4e:9e:40:00:0c: a0:c2:08:6c:18:73:a4:e9:cc:2c:43:a0:ad:33:86: 82:1e:e1:f3:b3:ac:32:7d:57:ed:ed:eb:f0:53:b0: cd:86:fd:f7:1a:81:ca:6d:48:f1:bb:07:b2:b5:59: cd:26:bc:87:35:47:09:b5:71:9a:21:b4:94:0f:89: 84:1e:e1:d5:9e:72:77:b6:e5:06:76:f4:c9:13:f4: 65:52:53:05:b4:57:b7:8d:f5:2d:55:58:5e:c8:51: 22:f9:34:5e:a1:91:5c:5e:14:12:cf:e6:3b:c5:bc: 7c:10:51:9a:0b:cc:9a:5a:40:c8:ff:27:39:b8:d6: 8a:42:57:fa:dd:1b:8f:fb:8d:86:7b:2c:d7:a0:a6: e1:08:73:f2:9b:4b:69:84:52:17:ca:ea:6b:bd:ef: 5c:ed:81:b6:f2:dd:0f:42:c3:dd:0d:e9:05:ac:e7: 35:41:f1:cd:ce:e0:58:db:6a:1e:92:f5:05:2c:5c: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:93:10:83:C8:8F:E7:FB:BF:F2:CE:7D:B0:C5:06:37:F4:4E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:64:98:7e:2d:4f:28:46:d5:30:38:25:be:3e:b1:8f:f0:07: 88:d2:5c:70:0e:91:d1:bc:dc:13:49:f0:05:7a:8d:d4:c9:7d: ba:2d:a2:db:6d:ea:91:e0:f1:78:fe:c7:79:ca:90:87:6a:1f: d1:42:a3:85:e2:e6:74:62:7b:03:dc:63:ef:1d:1d:33:82:40: 4c:57:ad:18:c4:d3:7b:5c:fc:d6:99:8a:67:52:57:b4:16:03: 96:42:ba:bd:2d:ca:2a:b7:15:e0:73:10:5b:af:44:22:1f:44: fa:97:a3:52:87:1b:13:dc:a7:60:85:e6:ac:f8:03:34:c2:47: ae:7e:2b:66:a7:96:3d:e4:cc:7b:1e:91:e8:42:ca:6c:03:26: 03:78:be:c0:fe:92:b0:f3:3f:ea:a9:69:5d:6c:cf:46:86:d8: 66:4e:7f:7b:ed:d5:1b:42:e8:c8:0e:0f:68:4e:d9:fc:ea:33: 7c:08:7b:85:54:fe:05:86:85:07:16:61:4e:f1:e2:7f:33:07: 5e:3e:5d:53:95:2e:87:cd:2f:ba:dc:06:21:c1:71:2d:24:49: 84:3b:15:fd:7d:ae:87:86:6a:eb:49:b3:c4:35:3d:a5:c4:58: ce:93:b8:57:1a:3c:72:ab:4f:7e:92:be:fd:6a:3e:6b:99:71: 8d:16:2f:2a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOr4S4J3WLdCXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Zjc4YjAwYTgtMmM4OS00OWZmLThkNjItMjI1MDNkODNhMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGJtkujVsff1HBVDsTrUSQJFNlMRHngJft4T CZAstP93xM0/dpcJxFQsiLLXv4+JzU72R2KGcIC1+sio1+J3pJu7bKk5Tp5AAAyg wghsGHOk6cwsQ6CtM4aCHuHzs6wyfVft7evwU7DNhv33GoHKbUjxuweytVnNJryH NUcJtXGaIbSUD4mEHuHVnnJ3tuUGdvTJE/RlUlMFtFe3jfUtVVheyFEi+TReoZFc XhQSz+Y7xbx8EFGaC8yaWkDI/yc5uNaKQlf63RuP+42GeyzXoKbhCHPym0tphFIX yuprve9c7YG28t0PQsPdDekFrOc1QfHNzuBY22oekvUFLFymGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG/AkxCDyI/n+7/yzn2wxQY39E7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y3MjFhNmYtMzMwNi0z MWI4LWI1YjEtY2E5YjZmNDQ0NGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGZJh+LU8oRtUwOCW+PrGP8AeI0lxwDpHRvNwT SfAFeo3UyX26LaLbbeqR4PF4/sd5ypCHah/RQqOF4uZ0YnsD3GPvHR0zgkBMV60Y xNN7XPzWmYpnUle0FgOWQrq9LcoqtxXgcxBbr0QiH0T6l6NShxsT3Kdgheas+AM0 wkeufitmp5Y95Mx7HpHoQspsAyYDeL7A/pKw8z/qqWldbM9GhthmTn977dUbQujI Dg9oTtn86jN8CHuFVP4FhoUHFmFO8eJ/MwdePl1TlS6HzS+63AYhwXEtJEmEOxX9 fa6HhmrrSbPENT2lxFjOk7hXGjxyq09+kr79aj5rmXGNFi8q -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:53 2025 by rpki-client