$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1235d0a-0d40-3bbd-a5ec-5f17971d311c.roa File: d1235d0a-0d40-3bbd-a5ec-5f17971d311c.roa (raw, json) Hash identifier: GBibZIXiOP/RNCroOF8YjKH9Ib0yWxLaeoZTrg0SHjI= Subject key identifier: CE:55:71:01:94:F0:17:E4:16:BE:18:FC:3F:37:BC:77:80:A1:A6:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2D030E19B57D15144480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1235d0a-0d40-3bbd-a5ec-5f17971d311c.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20431 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2d:03:0e:19:b5:7d:15:14:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=d95c9a23-6f01-4baa-ac03-0cbe86b67470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:10:66:3b:cf:45:c2:ea:d7:4c:3f:e2:60: 56:39:e0:0e:8d:24:7f:be:15:c8:77:c4:7c:28:57: 0a:d6:48:9d:58:8f:d5:a3:bd:fa:af:f1:b8:71:32: 1c:3b:52:10:44:fd:d8:b1:90:10:51:9f:f2:1e:f1: 3d:03:19:88:84:cf:71:19:a4:85:07:1f:4c:a1:38: 79:a4:eb:2f:90:bf:b8:21:61:3d:ec:a8:fa:88:98: a5:e6:d9:5d:20:b1:c1:db:a5:23:80:39:2d:99:83: ae:1d:35:30:5e:7e:77:6c:d0:8c:1a:53:ac:2b:5a: 27:b2:88:08:81:ac:ef:d4:c4:da:13:a5:45:0e:75: 5e:1f:96:ff:f6:e8:90:8a:15:20:0c:26:ae:b0:0c: bc:1d:8f:18:e4:3f:23:f1:e1:9d:0b:72:8b:7f:dc: c2:bc:39:ab:db:46:5f:a6:81:27:4b:21:08:8f:1f: 98:07:dc:37:08:da:dd:69:49:5f:5b:65:ab:4f:d4: 49:78:07:57:67:3a:d8:f1:77:cb:91:73:87:f4:e1: 0d:70:bb:81:e6:88:fc:f1:49:e6:31:4b:67:b3:bb: e4:f9:19:11:56:db:33:96:0a:dd:dd:89:8a:67:92: 6b:55:36:4a:6f:c8:c7:7c:02:f7:4c:1e:55:ba:db: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:55:71:01:94:F0:17:E4:16:BE:18:FC:3F:37:BC:77:80:A1:A6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1235d0a-0d40-3bbd-a5ec-5f17971d311c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6f:4e:aa:8f:4b:de:33:4d:04:9b:21:93:7f:f6:21:30:7d: a0:00:0f:f0:53:e9:7b:07:9a:22:de:a1:0b:13:d6:e3:0b:2e: f5:17:db:8d:07:66:ce:b3:bf:0b:86:9c:15:0d:1d:33:07:b0: 38:3b:aa:58:1b:b9:b4:6b:63:b9:de:95:ce:a6:18:80:e2:5d: 55:34:0a:a8:8e:b1:11:69:24:c3:05:2b:27:46:c2:4f:30:ac: 2c:19:27:22:52:50:f2:8a:05:ba:86:e6:8b:8c:97:23:32:cd: ff:c9:3c:50:69:1a:99:17:68:82:e0:e7:49:7d:c0:c4:fb:52: 90:4b:24:af:22:bc:6f:cd:00:c1:a5:a2:7b:e7:b5:2b:2c:27: 21:be:57:49:23:84:25:3e:2d:59:0e:6d:b5:aa:c7:55:ab:71: 49:49:c1:26:c2:35:f8:99:a6:1e:bd:8a:8f:42:9c:df:73:22: 32:bc:6e:60:0b:ce:62:b5:1c:a9:0a:d8:8d:cf:40:f9:81:49: 5b:0d:f2:75:1e:9e:59:4d:b2:f7:15:1b:3d:33:80:81:f9:e5: a2:f4:e1:07:9d:a2:73:2a:67:53:28:dd:a9:58:33:87:bc:be: 6f:8c:0d:82:a4:12:2f:31:b8:8e:1a:ac:3a:14:e0:2b:f0:81: d7:0d:0f:51 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmy0DDhm1fRUURIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDk1YzlhMjMtNmYwMS00YmFhLWFjMDMtMGNiZTg2YjY3NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w4QZjvPRcLq10w/4mBWOeAOjSR/vhXId8R8 KFcK1kidWI/Vo736r/G4cTIcO1IQRP3YsZAQUZ/yHvE9AxmIhM9xGaSFBx9MoTh5 pOsvkL+4IWE97Kj6iJil5tldILHB26UjgDktmYOuHTUwXn53bNCMGlOsK1onsogI gazv1MTaE6VFDnVeH5b/9uiQihUgDCausAy8HY8Y5D8j8eGdC3KLf9zCvDmr20Zf poEnSyEIjx+YB9w3CNrdaUlfW2WrT9RJeAdXZzrY8XfLkXOH9OENcLuB5oj88Unm MUtns7vk+RkRVtszlgrd3YmKZ5JrVTZKb8jHfAL3TB5VutvJNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM5VcQGU8BfkFr4Y/D83vHeAoaYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDEyMzVkMGEtMGQ0MC0z YmJkLWE1ZWMtNWYxNzk3MWQzMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7b06qj0veM00EmyGTf/YhMH2gAA/wU+l7B5oi 3qELE9bjCy71F9uNB2bOs78LhpwVDR0zB7A4O6pYG7m0a2O53pXOphiA4l1VNAqo jrERaSTDBSsnRsJPMKwsGSciUlDyigW6huaLjJcjMs3/yTxQaRqZF2iC4OdJfcDE +1KQSySvIrxvzQDBpaJ757UrLCchvldJI4QlPi1ZDm21qsdVq3FJScEmwjX4maYe vYqPQpzfcyIyvG5gC85itRypCtiNz0D5gUlbDfJ1Hp5ZTbL3FRs9M4CB+eWi9OEH naJzKmdTKN2pWDOHvL5vjA2CpBIvMbiOGqw6FOAr8IHXDQ9R -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:21 2025 by rpki-client