$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa File: 8e31ec23-a710-3224-8cde-ff28da3fd155.roa (raw, json) Hash identifier: /cn/pJQj8VuO9v4pTdkaYPxQvDUNlzJVZ+XMCPw1+XQ= Subject key identifier: CB:1D:3E:21:32:53:2D:1A:FC:00:0E:7F:D9:FD:B7:0E:5B:28:C5:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E860BF353A011BF82F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396543 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e8:60:bf:35:3a:01:1b:f8:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=457bef41-9a57-4045-949e-cc9fd3016c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f4:b4:91:7c:79:45:9e:29:e4:63:96:a0:34: 07:58:93:65:f7:d1:09:bc:f3:ad:a6:d8:b1:51:68: 03:c3:e2:86:74:02:ea:3a:f0:10:b6:04:2a:5f:1f: b4:2c:dd:25:a5:7c:e5:fc:e3:27:bc:28:ca:65:3c: ab:15:32:12:a1:fb:43:3b:b5:87:ae:01:35:ba:43: 1f:7b:b0:7d:6a:4b:a5:b4:2f:af:09:00:1f:ca:37: c4:3d:06:50:41:91:be:88:2b:62:a4:8e:d7:32:f9: 64:d1:43:ca:04:1c:29:c6:bf:f8:0f:11:d5:ea:a3: 5b:30:5f:5c:77:00:36:04:74:50:25:dc:74:ce:65: d6:62:0b:2b:34:94:37:59:21:f4:14:48:d0:25:78: 21:c2:b0:a8:cc:3b:6c:f0:00:5a:9f:e5:d4:2e:51: 64:8e:c4:00:e1:3a:0e:c4:7d:4c:01:4b:9a:43:b6: 68:e9:e7:f0:4b:4d:6e:fd:37:80:f9:35:6e:48:14: 4a:29:06:0d:48:0b:b2:d9:7e:05:3f:cd:d8:19:93: d0:88:e2:1b:59:7b:46:7e:7d:b5:a9:74:e3:c0:8f: 20:c0:b4:53:bb:01:20:2b:dc:cf:68:b7:3b:e4:39: 7d:b8:f7:1a:f9:d9:11:5e:6d:4c:65:91:c6:e2:59: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:3E:21:32:53:2D:1A:FC:00:0E:7F:D9:FD:B7:0E:5B:28:C5:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:62:ed:2b:58:80:13:bd:7c:0a:cf:35:d2:1c:f0:c3:e9:b0: aa:e4:f1:65:c2:53:46:ee:6a:10:9b:6b:dc:7b:4a:9e:8b:30: 10:3b:78:0c:92:47:22:f1:2b:70:f5:d1:06:b7:6f:92:7f:30: 7a:64:f5:32:4b:25:67:cc:80:65:4a:2f:8d:4f:05:56:52:85: d9:15:f1:50:c2:5a:48:a7:f1:65:48:f7:ba:40:07:23:4e:42: 1a:1c:61:84:89:b2:7f:6c:6c:c7:f4:29:a4:40:98:2f:54:44: ca:1f:d0:81:c4:fb:69:24:b1:ea:de:3b:01:20:4d:8d:05:91: 9e:81:9d:23:5b:43:68:34:45:11:d2:94:23:e4:b0:45:a6:a7: c0:9c:6d:05:72:ac:83:7c:37:e1:fe:53:30:90:b2:19:2a:9a: 4e:52:a4:66:2f:00:0f:f8:42:4b:0d:75:cb:36:25:ac:ab:fe: de:29:f3:69:20:fc:5b:fd:34:47:1b:e9:3e:d8:d1:56:d7:c9: f0:20:7e:8c:a3:0d:73:e1:20:60:4f:e3:e3:ac:10:a4:8f:09: 54:07:41:15:e0:e1:29:10:6f:63:9b:ed:ec:47:2d:ed:45:9c: fe:2d:07:a3:3c:43:73:bb:0b:01:cb:e8:1f:39:2f:db:26:a1: a9:e0:4d:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOhgvzU6ARv4L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDU3YmVmNDEtOWE1Ny00MDQ1LTk0OWUtY2M5ZmQzMDE2YzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvS0kXx5RZ4p5GOWoDQHWJNl99EJvPOtptix UWgDw+KGdALqOvAQtgQqXx+0LN0lpXzl/OMnvCjKZTyrFTISoftDO7WHrgE1ukMf e7B9akultC+vCQAfyjfEPQZQQZG+iCtipI7XMvlk0UPKBBwpxr/4DxHV6qNbMF9c dwA2BHRQJdx0zmXWYgsrNJQ3WSH0FEjQJXghwrCozDts8ABan+XULlFkjsQA4ToO xH1MAUuaQ7Zo6efwS01u/TeA+TVuSBRKKQYNSAuy2X4FP83YGZPQiOIbWXtGfn21 qXTjwI8gwLRTuwEgK9zPaLc75Dl9uPca+dkRXm1MZZHG4lnStwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMsdPiEyUy0a/AAOf9n9tw5bKMV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGUzMWVjMjMtYTcxMC0z MjI0LThjZGUtZmYyOGRhM2ZkMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4Yu0rWIATvXwKzzXSHPDD6bCq5PFlwlNG7moQ m2vce0qeizAQO3gMkkci8Stw9dEGt2+SfzB6ZPUySyVnzIBlSi+NTwVWUoXZFfFQ wlpIp/FlSPe6QAcjTkIaHGGEibJ/bGzH9CmkQJgvVETKH9CBxPtpJLHq3jsBIE2N BZGegZ0jW0NoNEUR0pQj5LBFpqfAnG0FcqyDfDfh/lMwkLIZKppOUqRmLwAP+EJL DXXLNiWsq/7eKfNpIPxb/TRHG+k+2NFW18nwIH6Mow1z4SBgT+PjrBCkjwlUB0EV 4OEpEG9jm+3sRy3tRZz+LQejPENzuwsBy+gfOS/bJqGp4E3z -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:46 2025 by rpki-client