$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b90f61ab-858f-3e0b-9984-a45a284d5726.roa File: b90f61ab-858f-3e0b-9984-a45a284d5726.roa (raw, json) Hash identifier: w0X8Prl82gW2hv0SlDfcJr6VBvGlMLmECwEtGEiXvrM= Subject key identifier: 9C:09:24:17:D5:5D:20:56:D2:7E:6B:3F:F6:E2:6F:A1:4F:B7:17:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146376FEC1574134F9D1190 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b90f61ab-858f-3e0b-9984-a45a284d5726.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396586 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:37:6f:ec:15:74:13:4f:9d:11:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2c28135e-24e3-436a-a1d4-5d27a8a7c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:cc:4e:df:c5:bf:e0:1e:0d:70:f2:a6:08: 7f:12:bb:ea:0d:19:69:1e:4f:55:05:a1:90:e6:f6: c0:4d:0b:da:e1:96:79:99:67:1c:1f:af:65:42:0f: 05:77:a5:93:1e:87:4f:69:b9:b5:14:5c:0a:e5:65: 12:0c:28:d9:f1:7d:6e:b9:26:c9:10:02:d1:d6:b8: 2b:1d:2f:23:c3:1b:19:e0:e8:c0:7f:e5:46:80:69: b0:15:f8:7b:d9:3a:1e:20:50:17:5f:9c:8b:0f:d3: 1a:40:78:d0:4c:b8:68:43:eb:b3:85:30:03:cc:8a: 08:ed:8b:20:55:53:d8:31:96:56:b3:ae:96:8a:db: 49:8c:6f:2a:61:f0:c6:89:c5:47:c0:a1:00:87:57: 6a:f9:87:1c:9e:d3:5b:e5:7f:6f:55:e3:54:71:51: f9:15:1c:ac:3a:dd:e8:d1:01:15:15:97:68:2c:4a: a5:f6:76:66:92:b0:8a:d2:c0:ed:36:2d:78:80:b2: 7a:c6:6e:ab:c3:86:69:cd:64:c2:56:f0:fc:a7:c2: 88:8d:01:a2:2f:56:a4:e9:d1:bf:3f:51:61:b5:62: 7a:91:67:ae:27:3c:05:a7:53:8f:3c:12:b6:63:7c: e3:d1:7e:b0:49:7c:7b:96:26:d5:4a:78:70:62:28: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:09:24:17:D5:5D:20:56:D2:7E:6B:3F:F6:E2:6F:A1:4F:B7:17:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b90f61ab-858f-3e0b-9984-a45a284d5726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dd:c6:94:00:01:9a:30:6b:b0:69:ce:49:f5:5a:26:57:46: 0a:41:7e:ae:ed:b6:6e:38:81:f9:fd:4a:c8:e8:14:65:1e:1f: 14:0f:32:44:69:41:46:f7:8d:fc:b7:ab:01:a8:fa:e7:ee:ee: f9:cc:aa:c4:5c:00:ee:96:49:08:15:e6:21:0e:eb:b9:34:6f: 0a:e3:70:4f:49:7f:17:dd:cc:97:04:b1:4c:ac:d7:62:30:b1: 37:67:bc:8d:ac:a9:f7:59:7d:fd:59:b0:1e:de:c4:4d:d7:2a: d0:7a:8b:6e:8a:9f:5c:58:be:da:5a:32:2d:c9:2a:53:8b:76: 16:49:45:00:47:86:47:e8:1a:75:67:60:fc:c0:bb:8e:b5:7d: 50:3b:d5:e4:1c:2f:b7:ba:61:42:d0:63:b2:2a:d7:33:0a:8d: 83:ab:c7:da:6e:dd:15:1a:19:77:3a:32:07:0b:54:43:8d:7b: 69:0c:2b:ff:f4:50:e0:db:3a:7d:20:01:80:4c:eb:3e:2b:91: 1f:86:8c:af:02:55:ba:82:15:f6:73:41:f4:40:83:6c:cb:f4: 22:90:54:46:03:a4:41:04:49:b8:d4:0c:e7:94:92:9b:13:ac: a3:2d:61:a3:cb:ca:11:b1:ef:40:8f:3e:22:11:dc:b3:48:f6: 64:3a:ba:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjdv7BV0E0+dEZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmMyODEzNWUtMjRlMy00MzZhLWExZDQtNWQyN2E4YTdjNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPPMTt/Fv+AeDXDypgh/ErvqDRlpHk9VBaGQ 5vbATQva4ZZ5mWccH69lQg8Fd6WTHodPabm1FFwK5WUSDCjZ8X1uuSbJEALR1rgr HS8jwxsZ4OjAf+VGgGmwFfh72ToeIFAXX5yLD9MaQHjQTLhoQ+uzhTADzIoI7Ysg VVPYMZZWs66WittJjG8qYfDGicVHwKEAh1dq+YccntNb5X9vVeNUcVH5FRysOt3o 0QEVFZdoLEql9nZmkrCK0sDtNi14gLJ6xm6rw4ZpzWTCVvD8p8KIjQGiL1ak6dG/ P1FhtWJ6kWeuJzwFp1OPPBK2Y3zj0X6wSXx7libVSnhwYiifZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJwJJBfVXSBW0n5rP/bib6FPtxdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjkwZjYxYWItODU4Zi0z ZTBiLTk5ODQtYTQ1YTI4NGQ1NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvdxpQAAZowa7Bpzkn1WiZXRgpBfq7ttm44gfn9SsjoFGUeHxQP MkRpQUb3jfy3qwGo+ufu7vnMqsRcAO6WSQgV5iEO67k0bwrjcE9JfxfdzJcEsUys 12IwsTdnvI2sqfdZff1ZsB7exE3XKtB6i26Kn1xYvtpaMi3JKlOLdhZJRQBHhkfo GnVnYPzAu461fVA71eQcL7e6YULQY7Iq1zMKjYOrx9pu3RUaGXc6MgcLVEONe2kM K//0UODbOn0gAYBM6z4rkR+GjK8CVbqCFfZzQfRAg2zL9CKQVEYDpEEESbjUDOeU kpsTrKMtYaPLyhGx70CPPiIR3LNI9mQ6ukQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:05 2025 by rpki-client