$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa File: b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa (raw, json) Hash identifier: kQ5xS8N2lPkpuIb+7qa3SV2ulBYvOSFmLmKpCol6h1E= Subject key identifier: C2:41:E8:6D:D3:D7:04:C2:30:F9:8A:64:33:C6:95:8F:69:7F:E9:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E87D85012B27B2D08F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397206 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e8:7d:85:01:2b:27:b2:d0:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=82f46a0b-03f1-49de-af11-757a2a9fbba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:5f:93:22:f7:f1:3b:b1:1f:96:c7:df:8a: 96:32:79:5e:4e:42:6e:bc:a2:ed:0b:e7:01:a4:f0: aa:e1:b9:e6:77:10:cb:ff:5e:67:a3:08:44:a0:81: 99:97:5b:61:f2:7c:76:6f:5c:a4:83:5b:26:65:02: 8d:3e:c8:b4:82:68:c0:e8:3c:23:80:a8:a3:43:7c: e4:8e:12:48:fc:b1:31:43:e9:21:f8:c2:c6:25:35: db:0e:16:24:a5:c9:f8:39:9c:04:dc:66:6e:b2:38: 94:5a:d0:6c:7c:07:5d:ec:f0:93:53:bc:70:35:aa: 3b:54:8a:4f:ab:0f:90:53:4b:ff:fa:30:03:ce:a2: 83:fc:6a:15:21:e1:20:41:8a:08:da:e2:bb:d9:01: 45:bd:a4:68:43:10:d6:2b:c7:0e:61:68:61:87:4a: 7d:a5:01:9e:fd:10:53:b5:13:42:0b:0e:eb:8e:fc: 78:bc:85:a6:28:4c:53:fc:16:f2:ee:ef:ba:9c:73: cd:ec:86:ef:16:f2:18:5e:05:fb:72:8f:a5:7d:7d: 98:d1:59:1c:38:11:6a:8b:83:f7:ab:34:11:d2:6b: 25:d8:00:4d:ee:e1:ec:8d:88:03:9a:6e:08:bb:c2: 8b:45:fe:e5:74:9e:6b:75:83:2d:13:68:bf:f8:71: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:41:E8:6D:D3:D7:04:C2:30:F9:8A:64:33:C6:95:8F:69:7F:E9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:36:f3:dc:a4:83:1c:ec:65:11:7c:5e:8f:8b:ad:e7:ab:32: 2a:27:87:fd:2b:86:3d:9a:b9:eb:92:93:de:c9:07:9e:82:c3: 78:93:7e:bc:06:bb:9a:e0:9f:80:c5:83:65:93:ce:c0:d0:c3: 2c:64:1d:33:5a:86:1b:40:a2:c8:d6:af:5e:78:70:1b:c9:f4: 21:8e:3c:b3:ec:28:fd:33:79:ad:b9:0a:27:5c:99:c7:51:76: 40:dd:aa:27:50:d5:0d:23:b3:87:3a:03:94:f6:50:97:94:67: 6e:e8:d7:65:d6:98:19:10:a6:37:d0:ca:b8:60:f6:ff:3f:cb: fe:ed:2d:36:40:0f:97:1f:e6:f3:5a:10:35:73:08:e7:0d:45: 94:49:50:37:8c:86:22:dd:73:d7:d9:5f:04:ce:90:ce:de:67: ad:86:4d:87:55:85:17:4f:fd:0f:e4:38:18:ab:d2:a6:c9:08: 06:14:6f:8f:ef:11:53:66:fb:db:3c:c5:df:5f:f1:3a:ce:09: e6:67:8b:f7:37:56:9d:1b:27:44:92:40:d8:f9:d3:50:b6:e1: 36:82:2c:1e:1a:8a:c8:08:b7:e2:56:f7:ad:e1:83:99:a3:a2: 5e:1d:17:b3:d7:4b:41:3e:19:a8:35:2c:e6:f9:d2:74:16:2f: bd:23:51:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOh9hQErJ7LQj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODJmNDZhMGItMDNmMS00OWRlLWFmMTEtNzU3YTJhOWZiYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVJfkyL38TuxH5bH34qWMnleTkJuvKLtC+cB pPCq4bnmdxDL/15nowhEoIGZl1th8nx2b1ykg1smZQKNPsi0gmjA6DwjgKijQ3zk jhJI/LExQ+kh+MLGJTXbDhYkpcn4OZwE3GZusjiUWtBsfAdd7PCTU7xwNao7VIpP qw+QU0v/+jADzqKD/GoVIeEgQYoI2uK72QFFvaRoQxDWK8cOYWhhh0p9pQGe/RBT tRNCCw7rjvx4vIWmKExT/Bby7u+6nHPN7IbvFvIYXgX7co+lfX2Y0VkcOBFqi4P3 qzQR0msl2ABN7uHsjYgDmm4Iu8KLRf7ldJ5rdYMtE2i/+HE4cQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMJB6G3T1wTCMPmKZDPGlY9pf+kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjcxYzM2NGEtZGVhZS0z YjJkLThhYzktZjA2YTdjZWNkM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAANvPcpIMc7GURfF6Pi63nqzIqJ4f9K4Y9mrnr kpPeyQeegsN4k368Brua4J+AxYNlk87A0MMsZB0zWoYbQKLI1q9eeHAbyfQhjjyz 7Cj9M3mtuQonXJnHUXZA3aonUNUNI7OHOgOU9lCXlGdu6Ndl1pgZEKY30Mq4YPb/ P8v+7S02QA+XH+bzWhA1cwjnDUWUSVA3jIYi3XPX2V8EzpDO3methk2HVYUXT/0P 5DgYq9KmyQgGFG+P7xFTZvvbPMXfX/E6zgnmZ4v3N1adGydEkkDY+dNQtuE2giwe GorICLfiVvet4YOZo6JeHRez10tBPhmoNSzm+dJ0Fi+9I1EY -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:40 2025 by rpki-client