$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa File: 40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa (raw, json) Hash identifier: NajTB5A+eBxTDRLRm761VFJ/3/elB/zIW8ItFlwRIn4= Subject key identifier: E1:B9:D2:57:C6:37:AA:7A:4C:B1:95:2E:EF:4E:9A:B4:EF:A2:89:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6825EF8E6CCC6A3FF9B94B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 396606 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:ef:8e:6c:cc:6a:3f:f9:b9:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=323624c3-202c-474c-8a8f-6b4283bc5a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4c:cf:ca:49:95:c3:78:73:e4:99:ba:8c:89: aa:30:cd:2e:7e:89:7d:6d:c5:ed:49:dc:6f:3f:4e: 66:61:a8:8a:64:92:bf:32:7a:3c:bb:5a:e4:08:d3: f9:81:ce:78:30:da:2a:49:54:33:23:81:54:56:87: af:fa:89:4d:58:ed:19:fa:e6:c5:9d:24:40:a1:10: 06:9d:5c:36:5c:7d:09:89:94:41:a7:97:7f:0a:32: f4:2a:c5:6b:9f:65:51:eb:3a:4f:33:50:ef:fb:44: 61:43:8a:32:c7:b3:ab:b2:1a:23:a1:79:26:b6:8a: 7b:99:0d:91:10:08:6f:93:48:95:4c:e5:b4:33:27: 6d:f4:2d:d0:72:07:7f:5a:15:45:96:9d:39:ad:cd: 28:76:c2:54:90:34:ef:07:67:9a:88:e1:67:1a:b5: 9c:e1:42:59:92:b9:b7:5a:e1:63:92:cc:3f:1b:01: 7a:ec:89:62:62:a3:51:16:66:8e:4c:83:b0:29:71: f4:ce:8d:f8:cf:80:f6:4f:fe:00:55:8a:fb:70:d5: de:1d:f5:45:87:66:e8:81:48:f5:79:6f:31:09:83: 6f:9e:38:57:95:9b:21:56:d4:77:c6:59:54:de:19: 23:e9:65:be:e8:82:a2:99:c1:39:e7:f5:c0:a2:ab: 14:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B9:D2:57:C6:37:AA:7A:4C:B1:95:2E:EF:4E:9A:B4:EF:A2:89:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:91:07:46:7a:5a:a5:eb:12:ee:04:c8:89:67:e1:73:ab:8a: 5b:72:68:bc:76:f5:44:0d:7b:d5:09:52:9c:16:d8:61:8e:28: a0:98:1c:07:6f:e2:64:85:52:36:ce:fd:f9:c5:0e:06:da:f0: 4c:f1:76:ef:49:c4:c7:0f:80:49:8a:85:e7:34:44:9f:17:f9: 90:8a:71:49:83:68:31:6a:c8:00:8e:24:8f:e5:5a:3e:14:7a: 23:73:af:52:0a:70:5c:ba:3c:45:8b:99:29:e0:e4:f9:60:a5: 26:5a:5b:91:54:55:77:91:08:43:24:b1:62:83:a5:e3:15:28: d7:45:a4:86:fc:e6:d1:0d:31:c9:a9:50:92:91:66:8b:fc:27: 2c:fd:3a:66:75:30:c7:33:15:63:9e:0e:d2:32:91:45:be:52: 95:ea:ce:ba:c8:d9:18:7c:21:34:a2:42:e6:c7:79:ac:19:d0: 7d:3e:b1:07:c4:0a:06:22:6d:05:dd:ae:f6:e3:9d:2e:10:13: 01:e4:34:9a:62:e9:10:9c:98:da:62:53:b3:c4:60:17:2c:5a: 1b:4b:00:91:d7:87:6a:4b:6f:9e:89:83:5c:ad:06:60:d3:bd: 3b:3e:ce:56:7f:ce:90:98:f5:f4:63:99:e5:ae:e8:fa:ac:f8: 78:19:e5:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJe+ObMxqP/m5S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MzIzNjI0YzMtMjAyYy00NzRjLThhOGYtNmI0MjgzYmM1YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEzPykmVw3hz5Jm6jImqMM0ufol9bcXtSdxv P05mYaiKZJK/Mno8u1rkCNP5gc54MNoqSVQzI4FUVoev+olNWO0Z+ubFnSRAoRAG nVw2XH0JiZRBp5d/CjL0KsVrn2VR6zpPM1Dv+0RhQ4oyx7OrshojoXkmtop7mQ2R EAhvk0iVTOW0Mydt9C3Qcgd/WhVFlp05rc0odsJUkDTvB2eaiOFnGrWc4UJZkrm3 WuFjksw/GwF67IliYqNRFmaOTIOwKXH0zo34z4D2T/4AVYr7cNXeHfVFh2bogUj1 eW8xCYNvnjhXlZshVtR3xllU3hkj6WW+6IKimcE55/XAoqsUzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOG50lfGN6p6TLGVLu9OmrTvoomeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlOWVkNWMtZTUzZi0z NjI0LWIwNGMtMjNkYjE0Y2I1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADmRB0Z6WqXrEu4EyIln4XOriltyaLx29UQNe9UJUpwW2GGOKKCY HAdv4mSFUjbO/fnFDgba8Ezxdu9JxMcPgEmKhec0RJ8X+ZCKcUmDaDFqyACOJI/l Wj4UeiNzr1IKcFy6PEWLmSng5PlgpSZaW5FUVXeRCEMksWKDpeMVKNdFpIb85tEN McmpUJKRZov8Jyz9OmZ1MMczFWOeDtIykUW+UpXqzrrI2Rh8ITSiQubHeawZ0H0+ sQfECgYibQXdrvbjnS4QEwHkNJpi6RCcmNpiU7PEYBcsWhtLAJHXh2pLb56Jg1yt BmDTvTs+zlZ/zpCY9fRjmeWu6Pqs+HgZ5UU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:46 2025 by rpki-client