$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0af4ce20-5659-32e6-899b-c37fef41d072.roa File: 0af4ce20-5659-32e6-899b-c37fef41d072.roa (raw, json) Hash identifier: 4dRq/xQJJEiScWCBVkaGyDSPJ72+bJeL2z5Szg0yiq8= Subject key identifier: E4:A9:43:7A:CE:90:5C:8B:99:72:5B:25:81:5A:E6:E3:6C:89:6F:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106BBB4BCB208A1D5B8B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0af4ce20-5659-32e6-899b-c37fef41d072.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 397210 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:6b:bb:4b:cb:20:8a:1d:5b:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=269ec142-384c-4f2b-b204-40a8c45f11e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fd:ba:1a:e9:ce:ec:d7:3d:c2:66:c3:f2:d3: c0:6f:b5:3e:e6:5a:fa:d0:34:a4:bd:26:ae:52:b6: d1:9f:ac:6b:cc:15:0b:b1:1c:1b:91:ce:b6:04:21: d3:8f:19:81:fe:b0:9a:7c:0f:85:a4:d6:33:dc:23: b2:1a:43:9b:85:5a:dc:e4:99:dd:2d:3d:05:7a:0f: e7:cf:30:d1:d4:80:77:34:9d:b3:36:e0:b2:60:97: 62:8b:a6:f6:09:07:cd:0b:3f:68:5e:e2:c4:87:09: f5:56:f2:7f:8f:f7:a8:9a:eb:c6:ca:e2:cc:d7:c2: a8:49:9e:09:77:ed:60:89:a5:ad:38:e5:d6:e7:c6: bb:9b:f3:4a:fa:c5:bd:6b:aa:7c:72:23:7d:8b:4e: da:be:ae:db:62:80:37:ef:87:23:04:98:58:8f:a3: 40:21:ae:45:ce:2e:3c:21:f8:c0:ed:ef:bf:a6:b2: 56:d5:f1:6c:98:5a:a9:3f:c2:4b:f4:ec:70:ce:71: cd:77:86:2a:ea:db:2b:39:7c:d5:cb:14:df:9f:56: 5f:c0:ef:92:4c:26:95:c4:be:22:ee:80:a1:d8:8f: e0:7a:f3:12:18:3b:1a:27:59:d6:c0:61:72:dc:5d: 7e:e2:dd:c4:00:03:e0:cf:f2:9a:6f:06:2b:18:c2: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A9:43:7A:CE:90:5C:8B:99:72:5B:25:81:5A:E6:E3:6C:89:6F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0af4ce20-5659-32e6-899b-c37fef41d072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:42:f8:95:d8:45:97:3e:19:1a:e6:c0:f3:4a:15:24:54:1b: c8:2a:6f:39:8b:f1:40:ed:f8:44:75:ab:22:2f:06:86:98:ba: 51:98:21:72:74:71:a2:4b:8e:3a:da:63:ba:f4:6c:f4:2f:d9: 0c:82:f3:b9:af:20:a5:b6:19:e2:9d:2e:2b:ac:e4:32:de:2a: 1b:2e:f5:85:40:30:07:3c:55:0c:d2:d4:5d:93:d3:05:43:1a: 75:96:45:78:ab:00:78:fc:9e:72:34:74:68:c4:ac:7c:a6:b0: 9f:86:e3:d6:d0:b4:8e:50:83:f5:b7:cd:f1:83:65:00:63:99: 37:84:13:ab:15:ea:c6:c2:9a:a6:4f:5b:d3:15:81:ff:d5:34: c6:b0:4f:d4:52:08:bc:4f:ca:9e:58:d1:a5:08:9c:29:55:67: 79:78:f8:f2:da:6a:da:a8:01:be:ff:94:51:7e:d8:31:ea:f2: 66:c0:03:6d:03:ee:58:20:f0:50:fd:dc:b2:34:e9:25:c1:54: 70:8a:bb:33:5c:00:b7:82:75:8f:7f:ee:7d:68:4f:a2:12:58: e1:77:40:f4:49:65:a4:1f:fd:6c:53:e1:9a:36:ef:ab:62:b7: 68:fc:1b:7f:6a:50:52:e0:1f:6d:db:d9:48:7b:86:4f:ef:74: f5:47:58:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGu7S8sgih1bi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MjY5ZWMxNDItMzg0Yy00ZjJiLWIyMDQtNDBhOGM0NWYxMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP26GunO7Nc9wmbD8tPAb7U+5lr60DSkvSau UrbRn6xrzBULsRwbkc62BCHTjxmB/rCafA+FpNYz3COyGkObhVrc5JndLT0Feg/n zzDR1IB3NJ2zNuCyYJdii6b2CQfNCz9oXuLEhwn1VvJ/j/eomuvGyuLM18KoSZ4J d+1giaWtOOXW58a7m/NK+sW9a6p8ciN9i07avq7bYoA374cjBJhYj6NAIa5Fzi48 IfjA7e+/prJW1fFsmFqpP8JL9OxwznHNd4Yq6tsrOXzVyxTfn1ZfwO+STCaVxL4i 7oCh2I/gevMSGDsaJ1nWwGFy3F1+4t3EAAPgz/KabwYrGMKSVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOSpQ3rOkFyLmXJbJYFa5uNsiW9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFmNGNlMjAtNTY1OS0z MmU2LTg5OWItYzM3ZmVmNDFkMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAaQviV2EWXPhka5sDzShUkVBvIKm85i/FA7fhE dasiLwaGmLpRmCFydHGiS4462mO69Gz0L9kMgvO5ryClthninS4rrOQy3iobLvWF QDAHPFUM0tRdk9MFQxp1lkV4qwB4/J5yNHRoxKx8prCfhuPW0LSOUIP1t83xg2UA Y5k3hBOrFerGwpqmT1vTFYH/1TTGsE/UUgi8T8qeWNGlCJwpVWd5ePjy2mraqAG+ /5RRftgx6vJmwANtA+5YIPBQ/dyyNOklwVRwirszXAC3gnWPf+59aE+iEljhd0D0 SWWkH/1sU+GaNu+rYrdo/Bt/alBS4B9t29lIe4ZP73T1R1gh -----END CERTIFICATE-----Generated at Sun Jun 29 23:30:44 2025 by rpki-client