$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df99b829-7747-36ad-acaf-1a1fc1a94666.roa File: df99b829-7747-36ad-acaf-1a1fc1a94666.roa (raw, json) Hash identifier: o2yufar7Bdoh2L4LtUhL1aTCNuQOepuinEWOP9faQgs= Subject key identifier: 95:05:3C:61:25:77:52:69:47:EF:4E:FA:4A:F5:8E:D9:F4:3D:3D:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EA21A559AEEA4B162000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df99b829-7747-36ad-acaf-1a1fc1a94666.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 397212 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ea:21:a5:59:ae:ea:4b:16:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=6c54511f-867c-48d1-ae04-ea0963b9210b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:53:83:1e:df:58:59:ed:84:e0:6c:16:94: 47:58:44:94:7d:f6:f7:f4:28:43:93:9b:c1:22:b9: 5d:25:e5:69:e8:21:fe:f2:48:35:33:77:c7:91:4d: 52:af:56:04:dc:3e:86:dc:e9:79:d6:1a:7b:15:27: ae:f1:46:c8:2f:7e:44:c6:e3:2c:8d:d2:37:e5:e4: 9f:43:9a:c4:6d:77:bd:f0:ee:4d:69:22:e0:56:87: b6:fb:e0:8c:bf:9c:46:c6:98:1c:77:37:23:01:db: 75:2a:37:d0:35:19:aa:f9:35:de:8b:76:29:49:96: e8:c4:7e:53:57:f6:d5:dd:5a:73:ab:86:a2:41:a2: ee:15:6f:76:55:1e:dd:a5:55:1e:ef:6f:65:6a:90: 72:0b:8d:79:57:c8:2c:35:c3:10:ed:5d:eb:cf:d8: 8c:b6:d7:89:c8:aa:f6:9c:72:33:5f:b0:e5:12:d6: 51:d3:98:86:ed:9d:e0:f4:4b:0c:a1:81:53:6a:5f: 39:1d:99:7d:ec:d5:25:fb:d3:0e:65:a0:34:b9:a9: e1:89:a6:02:28:f8:a8:86:4e:14:72:ba:32:f1:78: 17:8a:6b:5b:99:ae:fd:04:45:db:e7:af:ac:fc:47: 21:1e:91:84:61:e3:a9:2b:9f:24:49:35:76:44:b9: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:05:3C:61:25:77:52:69:47:EF:4E:FA:4A:F5:8E:D9:F4:3D:3D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df99b829-7747-36ad-acaf-1a1fc1a94666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:84:31:84:ea:0f:0a:c9:fe:39:ad:3b:b9:19:6c:8c:28:d9: df:b9:66:fc:25:38:5e:e3:ea:25:ac:0b:91:a5:8e:ce:3d:ad: fe:11:0e:e0:14:c3:79:69:44:50:b5:7b:33:03:d5:87:20:91: 18:24:b7:90:9d:df:a1:0b:bd:81:c6:6c:84:fc:42:cb:76:f7: fe:b7:cb:00:2e:05:1a:be:aa:e3:a5:8c:21:52:ca:87:1c:be: 12:1e:35:36:e7:11:8d:5a:12:49:13:6b:c8:d1:82:7f:94:ba: 78:5a:c8:a4:3f:a9:08:11:97:f9:68:0f:d1:e3:f3:87:46:3f: fc:e1:46:58:03:cc:82:80:01:23:02:78:86:cb:e0:41:f6:bc: 9b:21:8e:1d:16:f1:e2:2f:49:ff:34:dd:b7:10:15:11:1f:f5: a6:90:a9:48:e0:d9:fe:98:78:23:09:e0:00:b9:d7:78:a1:27: 15:7a:65:8a:6f:7b:98:76:25:5e:16:31:00:55:bc:a7:88:d6: 3b:c3:6c:f3:37:72:46:36:d9:d9:89:2a:b5:aa:74:27:51:26: 39:32:13:40:1b:89:e7:5b:9b:f5:71:63:aa:ac:5f:8f:b3:8d: c2:f4:51:35:89:09:53:60:07:9f:57:11:ae:eb:de:d8:f0:74: 59:9c:df:ba -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOohpVmu6ksWIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NmM1NDUxMWYtODY3Yy00OGQxLWFlMDQtZWEwOTYzYjkyMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqlTgx7fWFnthOBsFpRHWESUffb39ChDk5vB IrldJeVp6CH+8kg1M3fHkU1Sr1YE3D6G3Ol51hp7FSeu8UbIL35ExuMsjdI35eSf Q5rEbXe98O5NaSLgVoe2++CMv5xGxpgcdzcjAdt1KjfQNRmq+TXei3YpSZboxH5T V/bV3Vpzq4aiQaLuFW92VR7dpVUe729lapByC415V8gsNcMQ7V3rz9iMtteJyKr2 nHIzX7DlEtZR05iG7Z3g9EsMoYFTal85HZl97NUl+9MOZaA0uanhiaYCKPiohk4U croy8XgXimtbma79BEXb56+s/EchHpGEYeOpK58kSTV2RLkyUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJUFPGEld1JpR+9O+kr1jtn0PT2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY5OWI4MjktNzc0Ny0z NmFkLWFjYWYtMWExZmMxYTk0NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBOhDGE6g8Kyf45rTu5GWyMKNnfuWb8JThe4+ol rAuRpY7OPa3+EQ7gFMN5aURQtXszA9WHIJEYJLeQnd+hC72BxmyE/ELLdvf+t8sA LgUavqrjpYwhUsqHHL4SHjU25xGNWhJJE2vI0YJ/lLp4WsikP6kIEZf5aA/R4/OH Rj/84UZYA8yCgAEjAniGy+BB9rybIY4dFvHiL0n/NN23EBURH/WmkKlI4Nn+mHgj CeAAudd4oScVemWKb3uYdiVeFjEAVbyniNY7w2zzN3JGNtnZiSq1qnQnUSY5MhNA G4nnW5v1cWOqrF+Ps43C9FE1iQlTYAefVxGu697Y8HRZnN+6 -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:20 2025 by rpki-client