$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be160f60-62b3-353b-9446-10fa36a4fac5.roa File: be160f60-62b3-353b-9446-10fa36a4fac5.roa (raw, json) Hash identifier: drSZvBs5NIdlzW/KesF41Q9rGiaeldjAPBpOtOC1UB8= Subject key identifier: 2C:A4:28:BD:2F:A7:01:22:3B:47:17:EE:8A:24:DD:1C:04:31:FA:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E8CB09E36DA53C7F3B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be160f60-62b3-353b-9446-10fa36a4fac5.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396581 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e8:cb:09:e3:6d:a5:3c:7f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a4fe1c3d-dbde-4d60-9527-c7c8b7c44994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:90:50:7d:50:9c:77:18:d7:6a:fb:d2:5f:08: c7:90:37:73:f4:f4:f8:0f:f1:9e:53:98:76:41:ed: 03:11:86:46:6f:df:7b:d6:98:bc:41:06:49:7f:50: 71:53:8a:92:00:43:ee:3c:f9:3d:b0:84:74:f1:95: db:76:9d:e0:b0:b8:d4:1c:5f:d0:f3:07:cb:0c:af: 41:b8:20:0b:c4:99:f6:89:bc:b4:a8:af:f5:6d:96: 52:36:90:7f:90:8c:a6:d2:54:8a:31:02:bc:ad:c0: 41:d5:14:56:a0:22:51:13:9d:80:72:79:a6:3a:68: a9:0d:09:08:93:13:19:be:6d:96:69:42:7d:13:0c: 0f:cf:40:02:37:a4:d6:bb:0d:ab:1e:06:07:e4:f4: 70:2f:df:61:04:f8:72:a1:9e:38:27:31:73:bb:df: 6b:76:44:26:d8:36:e6:51:b0:a4:78:ea:9b:27:31: 70:67:db:4c:b8:c5:9f:f6:8d:7d:29:4f:82:86:65: 55:f0:26:67:ce:83:a7:30:6f:b3:f1:9b:d1:aa:f7: 86:03:27:d9:af:5d:c8:6b:c9:7c:49:53:95:11:04: 39:69:0e:6c:16:88:df:8c:98:ed:b4:03:38:50:ca: c3:86:aa:0d:45:80:e6:b2:c0:10:f2:21:e8:64:e6: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:28:BD:2F:A7:01:22:3B:47:17:EE:8A:24:DD:1C:04:31:FA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be160f60-62b3-353b-9446-10fa36a4fac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:82:d4:14:33:84:f6:76:44:c6:d3:b1:65:d8:c6:b2:9e:b2: 4c:02:86:ee:dd:7c:d1:43:1c:c9:1d:4f:d1:37:f2:b3:5c:35: ad:eb:ed:c3:d1:c1:13:79:15:6e:8d:99:d9:2f:91:82:08:df: 21:2d:19:72:af:47:3d:6f:7b:4d:64:ab:8f:ef:5a:57:12:67: 57:41:44:56:04:f8:bd:e1:1f:a4:80:a0:95:f4:05:bd:f8:b4: 20:50:79:b0:c7:a1:79:d0:38:3f:5d:68:ea:b1:d5:a7:b7:ad: 43:cd:7d:0b:2a:96:35:db:c9:83:e5:70:50:22:18:6e:e6:f6: 3a:c4:33:d1:96:fc:18:a2:79:3c:69:49:a5:ef:a2:1a:39:19: f3:0f:ed:03:c7:a1:c9:4f:14:8f:a1:46:14:61:1b:ac:e6:ae: 3d:39:33:43:d8:f0:ff:39:6e:10:fb:6e:b2:84:62:ad:12:dd: f2:ca:0a:be:fb:96:61:d9:8d:86:ec:8f:46:95:bd:85:51:5f: ba:3e:1d:70:0d:db:4e:35:f6:3e:16:4c:fe:c2:db:e3:86:2a: 2d:76:78:50:5f:ea:81:41:06:8c:a3:b0:df:a4:0c:a8:60:84: e8:d0:a8:5b:62:44:08:74:a6:50:38:db:7b:1d:55:df:a6:0d: 1f:52:f0:16 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOjLCeNtpTx/OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTRmZTFjM2QtZGJkZS00ZDYwLTk1MjctYzdjOGI3YzQ0OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZBQfVCcdxjXavvSXwjHkDdz9PT4D/GeU5h2 Qe0DEYZGb9971pi8QQZJf1BxU4qSAEPuPPk9sIR08ZXbdp3gsLjUHF/Q8wfLDK9B uCALxJn2iby0qK/1bZZSNpB/kIym0lSKMQK8rcBB1RRWoCJRE52AcnmmOmipDQkI kxMZvm2WaUJ9EwwPz0ACN6TWuw2rHgYH5PRwL99hBPhyoZ44JzFzu99rdkQm2Dbm UbCkeOqbJzFwZ9tMuMWf9o19KU+ChmVV8CZnzoOnMG+z8ZvRqveGAyfZr13Ia8l8 SVOVEQQ5aQ5sFojfjJjttAM4UMrDhqoNRYDmssAQ8iHoZObmDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCykKL0vpwEiO0cX7ook3RwEMfqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmUxNjBmNjAtNjJiMy0z NTNiLTk0NDYtMTBmYTM2YTRmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsgtQUM4T2dkTG07Fl2MaynrJMAobu3XzRQxzJ HU/RN/KzXDWt6+3D0cETeRVujZnZL5GCCN8hLRlyr0c9b3tNZKuP71pXEmdXQURW BPi94R+kgKCV9AW9+LQgUHmwx6F50Dg/XWjqsdWnt61DzX0LKpY128mD5XBQIhhu 5vY6xDPRlvwYonk8aUml76IaORnzD+0Dx6HJTxSPoUYUYRus5q49OTND2PD/OW4Q +26yhGKtEt3yygq++5Zh2Y2G7I9Glb2FUV+6Ph1wDdtONfY+Fkz+wtvjhiotdnhQ X+qBQQaMo7DfpAyoYITo0KhbYkQIdKZQONt7HVXfpg0fUvAW -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:03 2025 by rpki-client