$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa File: cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa (raw, json) Hash identifier: 4QLzTfPEX5jSZFUompf5D8vuwfidG1qNbgUXCLpBUz4= Subject key identifier: 2C:AF:39:B5:4C:D2:BF:9F:93:2F:B4:70:3C:39:45:B4:81:79:68:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A814633C6AB2633A907A95E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396581 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:33:c6:ab:26:33:a9:07:a9:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=13762999-41d8-4584-b990-04ad2994ab32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:11:34:9d:1f:2b:5f:15:04:ea:4f:64:46: b3:ed:58:a6:d8:eb:4e:16:ba:cf:1c:5e:06:e4:ba: 2f:47:25:0b:1d:94:7f:ad:20:14:0e:b3:5a:2c:4a: 37:1d:7a:98:85:af:2b:ae:ac:77:86:60:74:f1:46: 97:23:35:b6:5c:fe:0f:83:d5:e9:59:74:83:68:17: 8c:28:43:16:a1:d0:b8:08:c8:ad:59:bd:aa:93:2e: 27:7b:6c:38:15:c7:97:06:58:5d:ed:54:3c:a5:50: e2:aa:41:df:ea:f6:4c:ab:1f:c1:cc:d0:63:6b:63: 4d:9a:80:05:ec:bd:51:11:51:8b:95:c6:e1:c5:a0: 30:7e:41:5a:1e:1e:64:16:ea:e3:be:ca:cd:5a:fa: 39:95:de:f8:eb:65:a6:a2:27:2d:60:29:e9:c2:be: 19:40:bc:9b:fc:d3:c2:b5:7a:23:13:e5:2d:84:43: 06:75:69:22:8f:b5:3f:8c:55:0d:33:71:7c:6b:ae: 41:5b:c4:f4:5e:20:66:85:f9:8f:5c:18:85:52:2f: 46:ba:1d:58:23:a7:3b:16:2f:ce:ba:2d:8e:97:37: 5b:ef:d2:48:4b:e1:e5:70:ec:5e:b0:65:b1:fc:05: 0a:3a:a2:20:4d:ba:d9:3a:ab:51:22:c8:f3:69:44: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AF:39:B5:4C:D2:BF:9F:93:2F:B4:70:3C:39:45:B4:81:79:68:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:59:6f:8e:15:a2:af:b1:83:38:4f:50:85:c8:7f:b8:ef:21: 6a:ad:a6:20:57:92:3f:76:ea:d2:97:42:ba:cf:62:8b:42:d1: 0c:c0:ac:99:d6:51:13:43:ee:4f:0f:e1:77:12:1a:9c:85:d2: e1:0d:68:5d:60:9e:aa:b1:f2:77:42:6c:b0:91:34:cf:03:0f: a1:6b:95:2c:ac:a5:e1:32:b4:b6:fd:fb:ab:18:54:b3:3a:2d: 6c:d5:cf:4d:83:45:81:65:a0:08:f3:26:85:44:1c:98:59:15: 5e:b1:50:8a:ef:b7:06:35:68:13:09:eb:04:9d:26:03:f7:66: 42:d9:82:83:fb:4f:9c:48:e8:54:16:4c:cc:60:10:d9:c7:ab: 81:09:38:15:e0:b5:af:fb:a0:a4:08:9f:83:e5:3e:68:34:1c: 68:57:4f:f3:ac:48:f9:fb:b8:fe:6d:1c:37:63:96:41:a3:f8: 61:4d:1c:f7:a8:22:7e:33:eb:1e:54:e9:d3:87:d3:ad:f3:66: 65:f7:8c:e5:0f:42:b1:e5:45:08:15:f2:d8:fb:a5:1d:4a:72: 71:2d:fc:21:cd:3b:a0:42:23:98:ea:37:46:27:f4:3d:59:6b: 3e:11:a4:36:8e:d5:15:1b:d9:da:ae:20:d2:05:b0:47:41:dc: 7f:d0:bc:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjPGqyYzqQepXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MTM3NjI5OTktNDFkOC00NTg0LWI5OTAtMDRhZDI5OTRhYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizwRNJ0fK18VBOpPZEaz7Vim2OtOFrrPHF4G 5LovRyULHZR/rSAUDrNaLEo3HXqYha8rrqx3hmB08UaXIzW2XP4Pg9XpWXSDaBeM KEMWodC4CMitWb2qky4ne2w4FceXBlhd7VQ8pVDiqkHf6vZMqx/BzNBja2NNmoAF 7L1REVGLlcbhxaAwfkFaHh5kFurjvsrNWvo5ld7462WmoictYCnpwr4ZQLyb/NPC tXojE+UthEMGdWkij7U/jFUNM3F8a65BW8T0XiBmhfmPXBiFUi9Guh1YI6c7Fi/O ui2Olzdb79JIS+HlcOxesGWx/AUKOqIgTbrZOqtRIsjzaUTWIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCyvObVM0r+fky+0cDw5RbSBeWivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I2ZGU4NmItM2JjYy0z MjI3LWE0NWUtMmU2MzkxZWIzZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5Zb44Voq+xgzhPUIXIf7jvIWqtpiBXkj926tKXQrrPYotC0QzA rJnWURND7k8P4XcSGpyF0uENaF1gnqqx8ndCbLCRNM8DD6FrlSyspeEytLb9+6sY VLM6LWzVz02DRYFloAjzJoVEHJhZFV6xUIrvtwY1aBMJ6wSdJgP3ZkLZgoP7T5xI 6FQWTMxgENnHq4EJOBXgta/7oKQIn4PlPmg0HGhXT/OsSPn7uP5tHDdjlkGj+GFN HPeoIn4z6x5U6dOH063zZmX3jOUPQrHlRQgV8tj7pR1KcnEt/CHNO6BCI5jqN0Yn 9D1Zaz4RpDaO1RUb2dquINIFsEdB3H/QvG4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:42 2025 by rpki-client