$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa File: f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa (raw, json) Hash identifier: Ndnm2+HHM5UWOW9fA7adl8d9Ey0NubmDSGDzsZvt0MI= Subject key identifier: 57:09:41:E6:AE:B0:34:83:E4:4D:08:8C:DD:1D:0B:83:30:E8:A1:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0EB6F9087CE6DDF9F1B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396610 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:eb:6f:90:87:ce:6d:df:9f:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2a5bc891-9034-4726-af08-6500b9331fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:6b:9f:b1:1c:8c:2b:ea:8e:d8:68:d9:69: b2:70:9b:c9:00:7c:e3:f7:a1:21:41:6b:9d:7c:04: a9:be:02:c9:29:8b:46:97:7e:24:d6:46:e6:f8:02: 56:de:fd:95:60:3e:d4:6f:4f:4c:00:6c:9c:5c:e0: 93:42:5a:d1:d7:f0:ec:9e:c6:11:9a:4a:cc:92:4a: df:07:3d:f2:07:3c:5d:c1:8c:16:2d:59:a2:b6:91: b9:28:49:bc:54:b7:2e:f1:dd:b0:2e:4d:f0:d4:f8: 18:5a:be:c7:40:d2:6f:5d:a2:72:bc:21:46:10:15: 89:f9:30:68:b9:ca:21:34:b7:a0:e6:3e:32:2b:89: 59:86:54:1a:f1:2a:9f:75:32:76:4d:a6:74:30:3c: e5:06:0f:0d:c8:3e:12:da:70:d0:17:84:d8:d8:43: f0:44:31:aa:d1:97:dc:05:bc:8a:b5:82:5b:f3:0f: 55:b7:3d:08:01:77:70:33:83:fd:a9:94:82:83:81: 83:84:fd:68:f3:cf:0f:ae:5b:1d:4e:69:24:6b:67: 3c:8f:45:ab:b9:35:3f:b8:30:83:33:00:3b:de:11: d1:29:e1:63:20:e2:52:5b:38:18:df:39:a6:48:64: 77:cd:87:51:13:91:2e:53:4b:94:52:4f:46:28:f0: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:41:E6:AE:B0:34:83:E4:4D:08:8C:DD:1D:0B:83:30:E8:A1:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1f:27:85:5e:fb:68:d2:b8:b5:31:b7:c6:91:c5:4d:a7:c6: e8:09:d7:8c:5a:5f:1f:54:0f:20:03:cd:2b:3d:3c:b9:ab:90: 3e:9c:af:e6:ba:be:7a:da:a9:94:cf:68:20:1b:91:2b:66:de: c8:af:a1:03:e1:0a:ec:d8:ff:7e:89:c6:28:5f:b6:00:48:58: 17:ec:57:77:1e:41:9a:36:a7:6d:44:97:fc:7a:ac:48:ea:29: 7d:d0:33:ff:36:b9:f9:fa:19:2f:33:53:33:d5:35:d8:8e:cc: 87:55:9c:a1:96:ee:04:55:39:5d:73:8a:9a:13:f3:1d:20:2a: e0:f1:fe:e7:0b:7f:e1:34:9c:e2:d5:fc:60:81:90:13:9a:b0: 11:16:7f:9b:6e:d3:19:61:50:90:ba:7e:50:09:dc:a0:9e:f1: c1:8a:0e:1b:b2:d3:16:2d:58:5e:16:e7:4b:89:14:4e:c2:63: 97:2a:30:fd:f7:7c:42:d1:8a:d5:96:1f:e0:fa:6c:46:7b:82: 89:3a:2e:2f:3a:6b:17:e5:7f:f5:ad:92:76:35:ed:42:5e:b5: 35:be:9a:a9:85:b6:cb:5e:47:8c:8d:4d:e7:66:bc:3b:ab:f6: 69:31:d9:dd:62:b6:6b:86:05:87:54:92:11:b9:1d:14:ed:31: 56:5e:91:e4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOtvkIfObd+fG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MmE1YmM4OTEtOTAzNC00NzI2LWFmMDgtNjUwMGI5MzMxZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CJrn7EcjCvqjtho2WmycJvJAHzj96EhQWud fASpvgLJKYtGl34k1kbm+AJW3v2VYD7Ub09MAGycXOCTQlrR1/DsnsYRmkrMkkrf Bz3yBzxdwYwWLVmitpG5KEm8VLcu8d2wLk3w1PgYWr7HQNJvXaJyvCFGEBWJ+TBo ucohNLeg5j4yK4lZhlQa8SqfdTJ2TaZ0MDzlBg8NyD4S2nDQF4TY2EPwRDGq0Zfc BbyKtYJb8w9Vtz0IAXdwM4P9qZSCg4GDhP1o888PrlsdTmkka2c8j0WruTU/uDCD MwA73hHRKeFjIOJSWzgY3zmmSGR3zYdRE5EuU0uUUk9GKPBBhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFcJQeausDSD5E0IjN0dC4Mw6KEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjNlOTVhMTctNTZiNy0z YTRhLTgyYjItNGM4NWVkYTcwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmHyeFXvto0ri1MbfGkcVNp8boCdeMWl8fVA8g A80rPTy5q5A+nK/mur562qmUz2ggG5ErZt7Ir6ED4Qrs2P9+icYoX7YASFgX7Fd3 HkGaNqdtRJf8eqxI6il90DP/Nrn5+hkvM1Mz1TXYjsyHVZyhlu4EVTldc4qaE/Md ICrg8f7nC3/hNJzi1fxggZATmrARFn+bbtMZYVCQun5QCdygnvHBig4bstMWLVhe FudLiRROwmOXKjD993xC0YrVlh/g+mxGe4KJOi4vOmsX5X/1rZJ2Ne1CXrU1vpqp hbbLXkeMjU3nZrw7q/ZpMdndYrZrhgWHVJIRuR0U7TFWXpHk -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:48 2025 by rpki-client