$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f898c3e5-05d7-3302-a541-765065992d07.roa File: f898c3e5-05d7-3302-a541-765065992d07.roa (raw, json) Hash identifier: RdDBu6GqHNOnK8QZomal9HMnFn/BXWVUonrk/+WVvFE= Subject key identifier: D3:F3:8F:5C:00:08:08:C1:7E:BE:70:90:8F:89:3F:9E:61:1D:2B:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A90A0E67DBE02AAE949A42080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f898c3e5-05d7-3302-a541-765065992d07.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396566 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:e6:7d:be:02:aa:e9:49:a4:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=c4db1913-f1e7-4e84-a127-05155e096a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:a5:b8:bd:fa:31:dd:a3:78:28:11:c4:e2: 95:31:4e:81:94:e1:f1:f8:f7:d5:29:ea:95:6a:86: fb:49:e2:70:2e:b8:2f:d3:e1:c2:53:00:a5:61:c4: f1:9f:aa:08:5f:33:d0:7b:fd:2c:05:e7:40:cf:d5: 89:bd:be:7f:22:03:3a:7d:58:91:64:aa:eb:0c:ca: bd:61:27:6b:3d:24:a2:ff:82:64:86:a6:55:56:71: 01:83:6c:c2:1c:07:af:36:9a:34:8f:87:76:56:c5: 26:f5:c9:56:a3:52:db:89:53:94:bf:7a:e4:a8:a0: 50:1c:11:06:4b:e1:6c:d0:4c:1a:b0:6b:72:a9:47: 31:55:36:42:f3:b5:83:f8:d4:5c:4a:2e:76:b6:e0: 8c:6d:2a:01:31:0a:69:9e:17:a9:7e:53:f2:f6:2a: e1:bd:91:9e:38:8f:23:12:fd:40:55:a2:74:f2:9b: 9a:4f:1d:d1:fd:63:d0:e5:00:01:82:5c:19:7a:fb: 53:e9:ae:01:be:68:08:4b:35:11:d2:36:1a:d9:ef: 99:90:7b:a0:85:c6:10:ec:7c:1e:46:10:c7:ee:94: ca:db:63:e6:0d:44:f4:1c:02:d1:9d:04:96:7c:ad: 93:11:b0:93:1c:04:73:59:b7:96:ea:cf:d4:09:2e: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F3:8F:5C:00:08:08:C1:7E:BE:70:90:8F:89:3F:9E:61:1D:2B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f898c3e5-05d7-3302-a541-765065992d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:df:b9:55:c4:d5:f7:66:87:ed:3f:49:66:83:85:22:73:ec: 31:60:be:d7:e2:bc:10:98:73:b2:9c:02:b9:24:28:46:8b:1c: 54:94:32:90:28:4e:c8:12:8b:4b:63:01:c5:2d:56:6e:9c:b1: ec:e5:66:2e:88:5d:e8:e8:69:43:df:a4:bd:92:55:4a:35:4a: 61:d7:83:fb:b7:b9:0c:c9:17:b6:cd:16:2c:1b:b0:d2:0f:bb: 8c:45:d9:92:9c:6b:ee:b3:e8:d1:ac:32:79:a5:8a:cb:ec:d0: f0:6c:88:00:62:6b:09:72:a8:d2:97:0e:ac:42:3c:40:ef:56: 1c:72:5d:3b:33:d5:3f:e9:0e:6e:d4:ce:ee:d0:fc:af:85:a2: 63:e3:dc:91:b9:99:96:58:d9:18:48:05:fe:05:1b:dc:79:c8: 23:3d:08:34:6a:e9:dd:0c:dc:6b:98:b4:f3:4c:32:20:27:67: b7:9d:03:af:89:02:89:b6:94:ba:45:b5:cb:28:88:18:1a:5f: 14:b0:65:c7:84:ad:2f:3a:61:5b:4a:d9:31:0c:6b:42:dc:57: 19:08:68:f9:e6:e7:60:6d:41:32:d0:41:e4:5d:4f:a0:1c:45: a6:7c:ab:3b:a0:40:bf:3a:c0:ba:ea:f4:97:5f:f9:35:a0:5b: f9:b0:d8:6b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOZ9vgKq6UmkIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YzRkYjE5MTMtZjFlNy00ZTg0LWExMjctMDUxNTVlMDk2YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi86luL36Md2jeCgRxOKVMU6BlOHx+PfVKeqV aob7SeJwLrgv0+HCUwClYcTxn6oIXzPQe/0sBedAz9WJvb5/IgM6fViRZKrrDMq9 YSdrPSSi/4JkhqZVVnEBg2zCHAevNpo0j4d2VsUm9clWo1LbiVOUv3rkqKBQHBEG S+Fs0EwasGtyqUcxVTZC87WD+NRcSi52tuCMbSoBMQppnhepflPy9irhvZGeOI8j Ev1AVaJ08puaTx3R/WPQ5QABglwZevtT6a4BvmgISzUR0jYa2e+ZkHughcYQ7Hwe RhDH7pTK22PmDUT0HALRnQSWfK2TEbCTHARzWbeW6s/UCS6SywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNPzj1wACAjBfr5wkI+JP55hHSujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg5OGMzZTUtMDVkNy0z MzAyLWE1NDEtNzY1MDY1OTkyZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB537lVxNX3ZoftP0lmg4Uic+wxYL7X4rwQmHOy nAK5JChGixxUlDKQKE7IEotLYwHFLVZunLHs5WYuiF3o6GlD36S9klVKNUph14P7 t7kMyRe2zRYsG7DSD7uMRdmSnGvus+jRrDJ5pYrL7NDwbIgAYmsJcqjSlw6sQjxA 71Yccl07M9U/6Q5u1M7u0PyvhaJj49yRuZmWWNkYSAX+BRvcecgjPQg0aundDNxr mLTzTDIgJ2e3nQOviQKJtpS6RbXLKIgYGl8UsGXHhK0vOmFbStkxDGtC3FcZCGj5 5udgbUEy0EHkXU+gHEWmfKs7oEC/OsC66vSXX/k1oFv5sNhr -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:13 2025 by rpki-client