$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa File: c64404b8-c682-3274-8b46-28094b19f77f.roa (raw, json) Hash identifier: ZG0n0SCXx3p+zuuIq08cckbrbxyGb4wJniAlRHv7tdQ= Subject key identifier: EC:E5:82:B2:7C:B9:D5:94:62:7E:82:74:39:A3:DC:2D:67:6F:A0:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A979B7C740B6135DDB7571170 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa Signing time: Mon 21 Jul 2025 13:01:04 +0000 ROA not before: Mon 21 Jul 2025 13:01:04 +0000 ROA not after: Sun 19 Oct 2025 13:01:04 +0000 asID: 0 IP address blocks: 2620:74:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:9b:7c:74:0b:61:35:dd:b7:57:11:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 21 13:01:04 2025 GMT Not After : Oct 19 13:01:04 2025 GMT Subject: CN=7b8ab61a-2bf1-4ca5-9e28-8d616ce737af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:3f:c4:ee:ef:6f:4f:a0:d9:d6:1d:36:33: 48:52:e9:fc:1d:62:14:7d:fd:b1:9b:45:9c:f2:56: 1b:67:36:3d:82:1d:2a:ee:86:89:96:c8:dd:54:bd: e7:16:9c:43:f5:74:5a:0c:f1:4c:83:01:22:12:43: e1:1a:b6:25:93:53:cb:2b:81:aa:c9:88:f4:5a:97: 92:b6:e7:a7:31:1c:75:cc:04:a2:4b:2e:d5:cb:8f: b6:2c:15:ff:7e:a6:14:a1:64:e9:68:e3:af:1a:b4: b1:12:f5:c9:e9:38:1c:e0:ab:a0:0a:88:18:7a:27: ec:ac:82:76:1a:05:24:38:f7:8f:43:39:6c:c1:cb: 41:4e:f3:95:35:32:a2:23:e4:ab:7b:7e:1e:02:47: 66:7a:0f:8a:52:9a:c3:61:4b:1a:d7:8b:bd:88:2c: 50:8f:5d:af:17:8f:cf:06:b3:1a:87:cc:f1:85:fd: 9b:ca:70:b1:2f:b7:0c:00:55:05:bc:23:24:33:b6: 49:a9:10:12:7b:bb:e0:fb:a8:1f:4c:2d:e5:67:be: 84:c7:a0:db:e5:8c:9c:86:bf:f1:36:22:23:4d:66: 69:79:fd:2c:a0:12:cf:26:43:1c:ea:db:8b:15:91: 10:72:8c:00:80:3f:50:74:b8:61:2d:65:34:c3:14: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:82:B2:7C:B9:D5:94:62:7E:82:74:39:A3:DC:2D:67:6F:A0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9a:73:04:14:fa:24:6a:dc:4a:83:6f:9e:a6:2f:0d:c0:15: fd:0d:56:a6:8b:c5:71:4b:54:81:cc:c9:f7:71:a1:59:ce:78: dd:01:0d:9a:3e:a0:0e:ae:07:f4:27:37:4f:50:31:3e:34:7c: c0:08:95:11:ee:31:bd:a6:7c:6d:98:ee:75:89:c2:37:69:90: a5:c2:00:c2:5c:47:d2:6f:50:7e:97:69:8c:50:52:d2:56:a8: a9:69:74:d1:22:21:97:27:c5:f5:f0:eb:fe:31:16:d5:5b:a1: 76:52:ff:96:0f:c8:2a:13:c5:d9:96:69:d4:40:83:d6:2f:84: cd:09:1f:1d:ab:3e:e8:1d:f6:04:23:24:79:0f:ee:b7:32:b5: d7:6f:53:34:72:5d:c9:49:a1:ea:a4:cd:e1:16:8a:9e:8f:df: 68:6e:dd:ab:54:60:38:89:90:d3:21:e7:a9:22:e6:0f:26:d9: 12:f2:6d:c6:0c:53:fc:a8:96:6a:ee:46:09:ba:d7:3b:60:5d: f2:0c:34:45:26:36:d6:8a:03:23:60:3d:af:a7:0c:29:e1:02: b5:c3:7b:49:6a:d6:fe:cf:da:f7:8b:b3:1d:d5:92:5d:44:25: 59:17:64:3c:6a:17:f1:aa:c2:09:91:f0:50:d4:37:9f:91:6a: e3:f3:25:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqXm3x0C2E13bdXEXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyMTEzMDEwNFoXDTI1MTAxOTEzMDEwNFowLzEtMCsGA1UEAxMk N2I4YWI2MWEtMmJmMS00Y2E1LTllMjgtOGQ2MTZjZTczN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2k/xO7vb0+g2dYdNjNIUun8HWIUff2xm0Wc 8lYbZzY9gh0q7oaJlsjdVL3nFpxD9XRaDPFMgwEiEkPhGrYlk1PLK4GqyYj0WpeS tuenMRx1zASiSy7Vy4+2LBX/fqYUoWTpaOOvGrSxEvXJ6Tgc4KugCogYeifsrIJ2 GgUkOPePQzlswctBTvOVNTKiI+Sre34eAkdmeg+KUprDYUsa14u9iCxQj12vF4/P BrMah8zxhf2bynCxL7cMAFUFvCMkM7ZJqRASe7vg+6gfTC3lZ76Ex6Db5Yychr/x NiIjTWZpef0soBLPJkMc6tuLFZEQcowAgD9QdLhhLWU0wxSGBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOzlgrJ8udWUYn6CdDmj3C1nb6CEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY0NDA0YjgtYzY4Mi0z Mjc0LThiNDYtMjgwOTRiMTlmNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSacwQU+iRq3EqDb56mLw3AFf0NVqaLxXFLVIHMyfdxoVnOeN0B DZo+oA6uB/QnN09QMT40fMAIlRHuMb2mfG2Y7nWJwjdpkKXCAMJcR9JvUH6XaYxQ UtJWqKlpdNEiIZcnxfXw6/4xFtVboXZS/5YPyCoTxdmWadRAg9YvhM0JHx2rPugd 9gQjJHkP7rcytddvUzRyXclJoeqkzeEWip6P32hu3atUYDiJkNMh56ki5g8m2RLy bcYMU/yolmruRgm61ztgXfIMNEUmNtaKAyNgPa+nDCnhArXDe0lq1v7P2veLsx3V kl1EJVkXZDxqF/GqwgmR8FDUN5+RauPzJTQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:00 2025 by rpki-client