$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa File: b0c80747-6ca4-38c8-bdba-492465c92714.roa (raw, json) Hash identifier: ue9LDTJ5VBaktVCLu776jjFY6O40nsIUxO92dkhZY7U= Subject key identifier: 02:ED:4C:46:4B:A6:4D:7C:15:FC:06:4A:8A:05:EC:F7:18:93:16:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814637B89008BFFD236F48E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 397198 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:b8:90:08:bf:fd:23:6f:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=455ac511-f266-4073-abc9-26ab93f7e561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:58:dc:9d:3a:b7:c7:f2:34:73:10:53:4c: 52:61:74:87:e4:73:50:d2:10:93:44:ce:b8:28:63: 0d:ff:41:fe:32:43:be:10:8f:c3:80:ca:f7:7a:06: c8:8e:ec:cd:89:e6:12:45:19:7a:e6:46:f2:0c:af: 7c:a6:88:d0:be:92:2c:79:ec:55:f8:c0:48:71:fb: a9:1e:fd:ba:df:c9:a0:78:86:a5:40:92:40:20:d6: fa:1b:e6:44:e8:74:20:9f:9a:fe:7b:de:66:6d:b7: cf:42:cc:54:a6:08:b2:e3:9d:25:e6:c7:34:39:0a: 10:ec:eb:c2:f4:6c:f9:4b:72:c7:a1:17:54:69:be: 4e:aa:45:1f:1e:f9:42:0d:73:24:f2:7b:d5:79:cf: b1:a7:de:ff:b2:ba:83:42:13:4b:da:07:78:d1:99: b1:2d:f2:cd:cc:c0:1d:6f:86:bf:85:7b:4a:58:75: 6a:5d:4d:7c:56:5f:57:68:ad:97:66:6a:8b:de:0b: 71:a9:17:40:6b:b8:e4:e5:8f:57:cd:72:e3:7a:cd: 73:f5:37:7e:ef:7f:f5:97:ae:1f:6c:fb:14:a5:fb: 79:89:51:85:ec:a2:47:04:67:fb:e4:9f:8a:d5:8e: 7d:a5:2d:f6:61:16:16:2a:09:40:1f:a4:5c:63:7c: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:ED:4C:46:4B:A6:4D:7C:15:FC:06:4A:8A:05:EC:F7:18:93:16:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fd:77:75:c6:26:c0:87:08:35:31:b3:4f:47:31:fd:06:51: bc:24:e6:9c:59:01:08:fb:57:3f:33:59:be:e3:10:fc:d6:84: 56:ba:97:4e:ec:c9:29:92:c3:df:a4:a0:69:e3:1e:1b:64:91: c7:a9:8c:9c:03:cc:9c:bc:ad:29:d5:c6:19:c8:53:8f:26:06: 16:94:df:2d:2e:64:24:16:74:c6:39:4a:86:92:fb:58:07:2a: a4:21:52:d2:36:25:89:a4:97:15:0c:ef:f5:48:41:80:fd:01: f0:d3:27:ea:49:68:89:51:00:6e:48:f5:c9:fc:93:8f:2e:b2: 85:36:bd:9d:c5:76:5c:1f:18:37:e1:88:1a:8b:d0:eb:03:4a: b3:96:51:57:e0:8d:66:44:f4:93:8e:67:7a:73:b0:bb:70:23: 6d:1d:02:f1:1e:79:61:92:ef:7a:5b:12:20:7b:03:99:df:93: 79:c0:3c:b0:f4:67:80:a8:50:f1:fb:56:fa:cf:0e:93:0e:ed: f1:46:bb:9f:dd:02:fe:09:8e:a7:de:79:3b:a7:05:96:14:3e: 89:30:ec:2a:b1:b9:b0:2f:39:ed:90:29:4e:14:80:9a:27:b6: 4f:fb:c9:5a:0b:d6:83:32:59:55:37:da:4a:3b:a2:6c:73:db: c4:aa:00:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRje4kAi//SNvSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NDU1YWM1MTEtZjI2Ni00MDczLWFiYzktMjZhYjkzZjdlNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAFY3J06t8fyNHMQU0xSYXSH5HNQ0hCTRM64 KGMN/0H+MkO+EI/DgMr3egbIjuzNieYSRRl65kbyDK98pojQvpIseexV+MBIcfup Hv2638mgeIalQJJAINb6G+ZE6HQgn5r+e95mbbfPQsxUpgiy450l5sc0OQoQ7OvC 9Gz5S3LHoRdUab5OqkUfHvlCDXMk8nvVec+xp97/srqDQhNL2gd40ZmxLfLNzMAd b4a/hXtKWHVqXU18Vl9XaK2XZmqL3gtxqRdAa7jk5Y9XzXLjes1z9Td+73/1l64f bPsUpft5iVGF7KJHBGf75J+K1Y59pS32YRYWKglAH6RcY3zhBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFALtTEZLpk18FfwGSooF7PcYkxbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBjODA3NDctNmNhNC0z OGM4LWJkYmEtNDkyNDY1YzkyNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABr9d3XGJsCHCDUxs09HMf0GUbwk5pxZAQj7Vz8zWb7jEPzWhFa6 l07sySmSw9+koGnjHhtkkcepjJwDzJy8rSnVxhnIU48mBhaU3y0uZCQWdMY5SoaS +1gHKqQhUtI2JYmklxUM7/VIQYD9AfDTJ+pJaIlRAG5I9cn8k48usoU2vZ3Fdlwf GDfhiBqL0OsDSrOWUVfgjWZE9JOOZ3pzsLtwI20dAvEeeWGS73pbEiB7A5nfk3nA PLD0Z4CoUPH7VvrPDpMO7fFGu5/dAv4JjqfeeTunBZYUPokw7CqxubAvOe2QKU4U gJontk/7yVoL1oMyWVU32ko7omxz28SqAFU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:48:25 2025 by rpki-client