$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/844819be-626a-325a-be7e-4f1cd7828962.roa File: 844819be-626a-325a-be7e-4f1cd7828962.roa (raw, json) Hash identifier: JqkoU80EbIsE+Za7XG0ZXBqhWXANk/EgsrdtfUy/bNE= Subject key identifier: 62:2D:AF:3D:1A:E5:28:A6:43:9A:73:5E:83:A7:5C:87:5A:82:FB:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B319C7DC453F6BADCD480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/844819be-626a-325a-be7e-4f1cd7828962.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 211369 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:31:9c:7d:c4:53:f6:ba:dc:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=d8f58753-7e32-4d60-92e7-9cd0299e120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:53:7b:3b:69:db:9d:8d:e1:95:b4:0b:d6: 13:30:2c:9c:5a:be:21:a2:8e:b0:f8:ee:1f:07:03: 7f:8a:87:21:0d:67:63:5a:d5:75:8f:4b:ad:b5:09: 1e:00:9e:b2:fa:09:f6:3f:a3:48:7f:a0:44:a7:7d: da:2f:b5:df:9b:e7:8d:9b:00:91:6c:01:02:e7:58: fa:4b:f7:0e:14:74:6f:36:89:9d:a0:ae:dc:3c:83: 83:30:b6:35:8b:c5:aa:85:64:0a:ed:f3:f0:2b:08: d8:c7:30:31:4b:73:aa:8b:b4:01:84:10:6b:ff:d8: ce:88:30:f4:1c:eb:05:37:3f:61:32:5c:22:f9:c1: 01:d5:c3:f0:b0:f9:40:5d:45:ba:3e:fd:a8:b0:c7: ee:18:77:d9:4d:25:a9:7b:5c:2e:f1:d6:4a:cf:a7: d0:49:d2:7c:49:28:6e:49:90:57:b2:69:1a:b6:99: 61:92:c2:97:9b:c6:14:45:e3:4b:22:80:2c:82:74: 2f:b1:de:35:f6:9b:01:d2:06:d5:c6:5b:10:fa:44: 99:6a:14:fa:a3:19:c2:f3:c5:23:22:65:fb:ba:88: 35:6b:62:8a:03:9c:e4:15:4d:b4:42:d5:e8:8d:49: 69:6e:71:25:af:06:c5:cf:e7:a6:73:16:ba:6e:36: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:AF:3D:1A:E5:28:A6:43:9A:73:5E:83:A7:5C:87:5A:82:FB:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/844819be-626a-325a-be7e-4f1cd7828962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a6:8a:8d:22:87:c5:85:dd:5f:73:5a:f4:3a:82:56:ee:a7: da:c2:40:83:db:98:ae:34:5e:ca:33:eb:b1:3f:5e:9f:47:5a: 98:b7:33:da:9e:ef:4a:82:37:b4:12:9b:63:d9:68:74:84:af: 0e:a7:d7:e0:22:09:7c:c5:e9:f8:f5:07:b1:59:7e:2d:33:78: d1:91:2a:c1:83:6d:3f:3e:e3:f9:fd:c1:f8:e8:b3:78:42:20: bd:16:98:2b:e2:b6:d7:50:61:9f:7e:34:de:9c:34:87:23:93: e7:39:f5:54:38:5a:0b:1d:fd:b9:4d:0a:8e:28:fd:a7:b3:7e: 0a:9d:72:d7:03:b0:cf:90:55:eb:26:31:54:f8:08:52:59:c9: e3:77:a1:2d:0e:bc:ab:61:24:aa:09:29:f5:83:ea:18:d6:61: 00:fc:c2:ce:75:0e:85:82:44:3e:7a:71:db:cb:31:81:20:45: c6:25:18:c2:cb:a8:71:5b:e9:37:86:69:87:dd:35:81:3b:cc: ee:30:4f:3a:b5:23:b0:fa:42:c6:b8:af:14:b8:70:d5:28:5f: 63:63:d8:35:73:9b:22:5d:07:85:ba:85:a2:59:f9:58:4f:3b: c1:59:b6:3b:95:3e:09:d6:5a:9b:e5:61:79:23:98:b1:29:a6: 6b:29:88:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmzGcfcRT9rrc1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDhmNTg3NTMtN2UzMi00ZDYwLTkyZTctOWNkMDI5OWUxMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqFTeztp252N4ZW0C9YTMCycWr4hoo6w+O4f BwN/iochDWdjWtV1j0uttQkeAJ6y+gn2P6NIf6BEp33aL7Xfm+eNmwCRbAEC51j6 S/cOFHRvNomdoK7cPIODMLY1i8WqhWQK7fPwKwjYxzAxS3Oqi7QBhBBr/9jOiDD0 HOsFNz9hMlwi+cEB1cPwsPlAXUW6Pv2osMfuGHfZTSWpe1wu8dZKz6fQSdJ8SShu SZBXsmkatplhksKXm8YUReNLIoAsgnQvsd419psB0gbVxlsQ+kSZahT6oxnC88Uj ImX7uog1a2KKA5zkFU20QtXojUlpbnElrwbFz+emcxa6bjamQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGItrz0a5SimQ5pzXoOnXIdagvsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODQ0ODE5YmUtNjI2YS0z MjVhLWJlN2UtNGYxY2Q3ODI4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAOpoqNIofFhd1fc1r0OoJW7qfawkCD25iuNF7K M+uxP16fR1qYtzPanu9Kgje0Eptj2Wh0hK8Op9fgIgl8xen49QexWX4tM3jRkSrB g20/PuP5/cH46LN4QiC9Fpgr4rbXUGGffjTenDSHI5PnOfVUOFoLHf25TQqOKP2n s34KnXLXA7DPkFXrJjFU+AhSWcnjd6EtDryrYSSqCSn1g+oY1mEA/MLOdQ6FgkQ+ enHbyzGBIEXGJRjCy6hxW+k3hmmH3TWBO8zuME86tSOw+kLGuK8UuHDVKF9jY9g1 c5siXQeFuoWiWflYTzvBWbY7lT4J1lqb5WF5I5ixKaZrKYgY -----END CERTIFICATE-----Generated at Wed Jul 2 05:21:30 2025 by rpki-client