$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa File: 99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa (raw, json) Hash identifier: PukGNFl0y0a/efZ2c6eRucbj1w1FU4jFBp8zvVXaCnw= Subject key identifier: A1:29:70:89:C5:C5:E5:51:79:B9:97:8C:BB:C5:6B:7E:BE:AD:3B:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A81463367384552F60B84FA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 36629 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:33:67:38:45:52:f6:0b:84:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=ec7481da-4a9d-4601-a378-47ef1657367a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5e:3c:a4:ef:d9:5a:0c:ef:0f:18:a2:a0:e5: 11:2e:1a:e6:76:3b:46:3c:96:8c:57:cb:f4:b4:56: 7e:eb:a6:6d:89:42:a8:65:f8:e4:d4:c4:88:e8:3b: 0d:78:02:1e:6d:11:d9:64:97:93:70:ad:aa:d2:e4: 16:70:04:9b:6b:dc:78:44:6f:aa:8e:c4:df:e8:76: 87:23:b7:95:be:5c:e1:51:c9:8a:ad:23:0d:94:08: 68:60:ef:89:71:ec:97:1c:1f:87:bc:d2:63:96:72: 6b:dc:d6:f7:62:35:1f:38:f6:fc:e8:42:85:c8:4d: 46:b9:8c:36:6d:6f:d5:e1:22:28:65:38:40:a0:a5: ee:1a:ec:f0:d3:ff:37:99:37:64:30:f4:d6:3d:0f: 7d:89:9d:48:c2:a7:2a:cd:d6:1f:ec:25:00:7e:fd: 09:d2:7a:41:a4:df:14:24:58:54:03:8f:0c:f6:6a: 7b:3b:92:5d:0b:b9:4d:5d:e2:08:44:cf:d6:31:6a: 70:6c:3f:5a:b0:e6:8e:da:a7:af:b0:66:b1:9a:22: a6:f1:9b:62:22:7c:72:0f:cb:ce:2c:23:99:97:8e: db:cb:cf:10:dd:ae:91:d7:89:56:fb:a3:20:0c:7d: bf:51:4f:b9:3f:13:6b:42:73:c8:d9:34:ca:bf:b5: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:29:70:89:C5:C5:E5:51:79:B9:97:8C:BB:C5:6B:7E:BE:AD:3B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a4:9e:57:af:a5:f7:ae:7f:5c:ec:59:67:0f:07:01:3b:f2: ad:53:5f:11:4f:72:2f:87:21:8f:fb:8c:46:d0:9f:7f:6d:af: 64:fb:da:2b:72:d5:7a:e1:f5:bc:67:ce:28:65:92:0b:cf:b1: 95:2a:16:8a:d6:81:83:7c:a8:ab:37:ac:b2:88:b0:50:37:5d: e1:fb:8c:8c:7d:46:de:68:8e:09:d1:20:14:3d:76:40:6b:c0: fb:77:79:df:bd:76:5a:fc:e9:70:50:6f:05:c4:aa:8e:fc:d9: d6:91:8e:1d:6b:9c:49:aa:ac:3c:35:f7:c2:e5:cc:c2:ce:43: 23:2d:83:80:80:74:61:79:10:81:23:67:cf:35:eb:df:0e:59: ed:ef:e1:90:8f:01:ae:f8:47:f6:bb:d6:6c:8f:0b:d8:b7:1d: fd:14:eb:f0:9d:74:cc:23:f2:4c:25:9c:c9:20:07:8c:4a:42: 5a:27:20:0e:f7:01:2e:35:ab:01:9e:a7:99:2d:0b:b9:b0:18: 36:e3:f1:12:46:04:dc:ce:51:ff:e6:59:ad:df:e8:24:16:8d: fd:45:6a:dd:40:8a:1d:9c:61:99:a8:e9:e0:86:06:dc:93:e6: 58:5d:24:8c:4a:04:d9:7f:7c:95:dc:bf:15:06:51:b4:8e:c7: 51:e9:f0:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjNnOEVS9guE+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZWM3NDgxZGEtNGE5ZC00NjAxLWEzNzgtNDdlZjE2NTczNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF48pO/ZWgzvDxiioOURLhrmdjtGPJaMV8v0 tFZ+66ZtiUKoZfjk1MSI6DsNeAIebRHZZJeTcK2q0uQWcASba9x4RG+qjsTf6HaH I7eVvlzhUcmKrSMNlAhoYO+JceyXHB+HvNJjlnJr3Nb3YjUfOPb86EKFyE1GuYw2 bW/V4SIoZThAoKXuGuzw0/83mTdkMPTWPQ99iZ1IwqcqzdYf7CUAfv0J0npBpN8U JFhUA48M9mp7O5JdC7lNXeIIRM/WMWpwbD9asOaO2qevsGaxmiKm8ZtiInxyD8vO LCOZl47by88Q3a6R14lW+6MgDH2/UU+5PxNrQnPI2TTKv7W+pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEpcInFxeVRebmXjLvFa36+rTuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTlhYTNkYjktODY1ZS0z NmY5LWIxZjItY2Y2Y2VmY2FlZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAuknlevpfeuf1zsWWcPBwE78q1TXxFPci+HIY/7jEbQn39tr2T7 2ity1Xrh9bxnzihlkgvPsZUqForWgYN8qKs3rLKIsFA3XeH7jIx9Rt5ojgnRIBQ9 dkBrwPt3ed+9dlr86XBQbwXEqo782daRjh1rnEmqrDw198LlzMLOQyMtg4CAdGF5 EIEjZ881698OWe3v4ZCPAa74R/a71myPC9i3Hf0U6/CddMwj8kwlnMkgB4xKQlon IA73AS41qwGep5ktC7mwGDbj8RJGBNzOUf/mWa3f6CQWjf1Fat1Aih2cYZmo6eCG BtyT5lhdJIxKBNl/fJXcvxUGUbSOx1Hp8Iw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:10 2025 by rpki-client