$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa File: 433e3b39-3064-39d7-b7a6-05e755cd825a.roa (raw, json) Hash identifier: eaX5Fcm1iBkS7vw2D/WkvQXCSf1vsoUMauNh18yDYxo= Subject key identifier: 28:BE:10:36:65:7C:F2:78:11:D7:A4:B9:C2:31:40:A9:9D:0C:0C:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E414DDBD704DFC018700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397210 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e4:14:dd:bd:70:4d:fc:01:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a635cc08-28e8-400c-a033-67d09a7e07ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ef:7f:43:8e:34:44:42:10:4a:52:c1:0f:41: 00:f1:8c:dc:55:be:50:fc:4d:cd:2a:34:40:85:e5: 49:f9:eb:02:2b:7b:c4:48:bb:20:b7:58:f2:e5:79: f3:03:09:8e:67:56:12:82:d8:78:10:63:e3:a8:0a: c4:7b:9c:3e:17:24:91:b5:2c:47:bd:cf:45:09:05: 8a:f3:c5:4f:2b:92:81:7e:3d:b2:87:6e:0d:00:4b: 43:bf:49:23:44:0d:1b:f3:b2:bd:21:b9:08:3d:64: 79:4a:3e:d5:29:cc:4b:24:d4:9c:8d:cc:95:40:a2: 5b:fd:e1:7c:49:15:80:a0:16:95:63:8a:8e:71:86: fc:84:c4:4f:dd:18:bd:4c:9c:88:99:9a:db:69:7e: 46:09:76:05:92:0f:e4:6e:09:ff:8a:5c:1b:52:76: ca:a9:77:f0:58:09:55:8e:6c:9d:27:7a:18:e8:d8: b6:36:07:2e:18:91:d9:51:28:4f:11:8e:0d:3e:75: af:60:8b:40:be:51:cf:3f:5d:d7:db:c5:09:72:4c: 89:23:43:79:79:90:dd:0e:7e:0d:62:4a:14:cf:78: ab:42:90:3f:aa:1d:2f:53:03:ed:85:34:ba:88:26: de:c7:02:f4:25:cf:ec:a2:3c:ac:8c:5e:1f:92:c0: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BE:10:36:65:7C:F2:78:11:D7:A4:B9:C2:31:40:A9:9D:0C:0C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5e:e7:3f:da:15:3d:df:51:5e:88:a1:ed:4b:1a:33:80:d7: aa:83:1d:c2:16:5c:fa:0d:a2:06:37:17:2c:92:9f:2c:f6:3d: 4d:db:f1:45:22:35:04:bc:9e:75:2d:75:de:95:ad:4c:c2:73: 67:47:56:3c:b1:21:51:e7:24:90:c4:f2:e0:9d:d0:6b:a2:cf: 7e:74:97:64:04:43:45:e9:15:f4:de:18:70:79:7b:e0:4b:f5: f8:22:6b:5c:20:5b:6c:74:72:11:b8:17:70:e7:df:4d:ff:27: 64:6a:c0:b5:7b:67:25:78:86:17:65:7c:39:aa:5e:a1:a8:0f: 08:f2:eb:9c:4f:c1:0c:0c:af:8e:b7:de:a9:cb:43:5f:b1:e2: a6:cc:79:b8:6a:38:16:50:35:50:e0:a8:29:13:76:02:17:d4: ef:8a:50:df:bd:83:ab:79:85:59:56:95:0a:bd:35:03:6b:15: 66:1b:d6:b9:c4:99:68:c4:ca:fb:2e:94:0b:5e:82:d5:be:e2: ed:1b:25:66:14:37:b8:a5:47:e9:6b:5b:a7:10:e9:20:89:37: 58:ee:f5:e7:7a:46:45:ba:9e:35:95:95:b1:91:0a:c7:68:16: 9d:f3:2c:af:13:ad:1d:ab:17:f0:94:5a:be:1b:13:06:83:76: 7f:16:0f:92 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOQU3b1wTfwBhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTYzNWNjMDgtMjhlOC00MDBjLWEwMzMtNjdkMDlhN2UwN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O9/Q440REIQSlLBD0EA8YzcVb5Q/E3NKjRA heVJ+esCK3vESLsgt1jy5XnzAwmOZ1YSgth4EGPjqArEe5w+FySRtSxHvc9FCQWK 88VPK5KBfj2yh24NAEtDv0kjRA0b87K9IbkIPWR5Sj7VKcxLJNScjcyVQKJb/eF8 SRWAoBaVY4qOcYb8hMRP3Ri9TJyImZrbaX5GCXYFkg/kbgn/ilwbUnbKqXfwWAlV jmydJ3oY6Ni2NgcuGJHZUShPEY4NPnWvYItAvlHPP13X28UJckyJI0N5eZDdDn4N YkoUz3irQpA/qh0vUwPthTS6iCbexwL0Jc/sojysjF4fksCEmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCi+EDZlfPJ4EdekucIxQKmdDAxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzZTNiMzktMzA2NC0z OWQ3LWI3YTYtMDVlNzU1Y2Q4MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBOXuc/2hU931FeiKHtSxozgNeqgx3CFlz6DaIG Nxcskp8s9j1N2/FFIjUEvJ51LXXela1MwnNnR1Y8sSFR5ySQxPLgndBros9+dJdk BENF6RX03hhweXvgS/X4ImtcIFtsdHIRuBdw599N/ydkasC1e2cleIYXZXw5ql6h qA8I8uucT8EMDK+Ot96py0NfseKmzHm4ajgWUDVQ4KgpE3YCF9TvilDfvYOreYVZ VpUKvTUDaxVmG9a5xJloxMr7LpQLXoLVvuLtGyVmFDe4pUfpa1unEOkgiTdY7vXn ekZFup41lZWxkQrHaBad8yyvE60dqxfwlFq+GxMGg3Z/Fg+S -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:40 2025 by rpki-client