$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94c85753-60b1-3c62-a562-e438b2c3140c.roa File: 94c85753-60b1-3c62-a562-e438b2c3140c.roa (raw, json) Hash identifier: IhlfTlh0a2jlJk1d6GLwC6n+AWgDz1mlkvuhneaLz+U= Subject key identifier: 2F:A8:C1:2A:13:0A:D8:EC:01:F0:D2:D9:87:93:EA:A7:DA:B1:25:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EA71D6810744ECBC7380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94c85753-60b1-3c62-a562-e438b2c3140c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396609 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ea:71:d6:81:07:44:ec:bc:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=35db93bc-8548-4255-920c-901f350a3221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e6:48:2a:d3:d9:e0:e0:43:30:80:19:fd:94: bf:1e:0f:fc:73:5c:33:8c:48:0e:28:52:c1:ab:ea: d0:5e:d1:6d:7a:ca:71:2f:3f:15:06:c9:44:1d:b7: 15:49:3c:63:9b:8d:89:26:8f:d0:6c:7b:9a:c6:3b: d1:c8:33:92:a0:ac:02:b9:7a:6b:23:de:ab:84:ab: 30:0b:02:9b:94:5f:80:8c:c5:fb:50:ce:80:ae:d8: 52:12:c3:03:ea:e2:e2:a9:75:11:5e:80:b1:81:6e: 75:c0:f9:91:93:f4:cc:3f:cf:01:11:35:b8:2d:e1: 37:bb:b1:a7:a8:06:27:c0:f2:13:a0:fb:7b:97:e4: 9b:39:09:a3:86:0c:89:79:e0:11:24:f6:a6:40:63: 1c:d9:da:0b:da:b2:c5:fb:9c:e6:48:7b:5f:7b:0d: 16:66:e1:2a:04:80:6c:76:5d:f5:6d:25:51:7b:7f: f8:31:13:ca:3e:0e:6b:15:e5:bd:dd:66:f6:ce:49: d6:9e:9f:ca:58:52:cb:68:34:bc:e0:97:ab:4c:6e: 54:78:b1:d6:b6:ed:cb:36:aa:42:6b:19:f1:9b:a4: 02:52:95:97:d7:20:69:53:17:a7:b9:07:b3:3f:69: 37:78:7a:0c:c5:82:fd:f6:8f:2c:c1:51:63:3e:3f: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A8:C1:2A:13:0A:D8:EC:01:F0:D2:D9:87:93:EA:A7:DA:B1:25:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94c85753-60b1-3c62-a562-e438b2c3140c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:cb:ae:58:6d:13:70:3c:7f:d1:18:89:69:6b:c1:86:dc:f1: 47:b7:92:60:28:ea:df:a9:11:51:5b:b1:c3:24:e1:3f:25:c2: 31:50:2c:93:10:60:8b:87:97:27:6e:fe:8b:36:f1:be:62:0e: c8:46:f5:e3:56:b6:14:e3:48:f2:e2:64:1c:99:7f:49:2c:ac: fb:aa:48:1c:5b:29:dd:ff:2f:da:81:56:1f:a0:de:4b:f6:16: a5:18:e9:52:ed:d5:58:6a:21:b3:57:4b:2f:3a:1a:9e:ea:a6: 21:55:43:db:8d:3d:92:05:9b:da:04:c5:8d:c2:f4:21:dd:70: 56:47:3c:7d:d4:bf:00:af:4e:74:55:df:a9:6f:07:51:35:e2: af:03:13:6b:a6:28:13:88:2a:fa:37:09:46:e8:55:db:b9:92: 1b:8c:ab:c6:44:1c:cc:e8:11:41:21:1d:9a:4d:d3:19:a5:fb: 90:16:38:49:42:43:37:d7:31:f0:ca:4e:ae:fb:52:f0:fa:fd: 8d:6d:32:ac:e0:46:b8:b8:b1:5d:90:f4:15:7b:c4:d6:89:d1: f2:06:8d:48:28:0e:73:13:ac:72:45:26:c5:7e:fc:be:c0:f4: 96:c9:b5:b8:79:79:d2:d0:40:20:da:0a:1d:38:e3:41:7b:f0: 47:4f:e1:0c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOpx1oEHROy8c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzVkYjkzYmMtODU0OC00MjU1LTkyMGMtOTAxZjM1MGEzMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOZIKtPZ4OBDMIAZ/ZS/Hg/8c1wzjEgOKFLB q+rQXtFtespxLz8VBslEHbcVSTxjm42JJo/QbHuaxjvRyDOSoKwCuXprI96rhKsw CwKblF+AjMX7UM6ArthSEsMD6uLiqXURXoCxgW51wPmRk/TMP88BETW4LeE3u7Gn qAYnwPIToPt7l+SbOQmjhgyJeeARJPamQGMc2doL2rLF+5zmSHtfew0WZuEqBIBs dl31bSVRe3/4MRPKPg5rFeW93Wb2zknWnp/KWFLLaDS84JerTG5UeLHWtu3LNqpC axnxm6QCUpWX1yBpUxenuQezP2k3eHoMxYL99o8swVFjPj8WLwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC+owSoTCtjsAfDS2YeT6qfasSXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTRjODU3NTMtNjBiMS0z YzYyLWE1NjItZTQzOGIyYzMxNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASy65YbRNwPH/RGIlpa8GG3PFHt5JgKOrfqRFR W7HDJOE/JcIxUCyTEGCLh5cnbv6LNvG+Yg7IRvXjVrYU40jy4mQcmX9JLKz7qkgc Wynd/y/agVYfoN5L9halGOlS7dVYaiGzV0svOhqe6qYhVUPbjT2SBZvaBMWNwvQh 3XBWRzx91L8Ar050Vd+pbwdRNeKvAxNrpigTiCr6NwlG6FXbuZIbjKvGRBzM6BFB IR2aTdMZpfuQFjhJQkM31zHwyk6u+1Lw+v2NbTKs4Ea4uLFdkPQVe8TWidHyBo1I KA5zE6xyRSbFfvy+wPSWybW4eXnS0EAg2godOONBe/BHT+EM -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:12 2025 by rpki-client