$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f476232-4a24-3878-856d-3b95bd11039c.roa File: 0f476232-4a24-3878-856d-3b95bd11039c.roa (raw, json) Hash identifier: Q8uxBWoaFGcj+AwNtCTRAUmhZhPiIHy/WkMTgplZeIo= Subject key identifier: D0:68:1E:AE:19:E6:87:74:6F:9D:C2:91:69:E7:6A:E3:1C:B6:0B:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2ED4B9382E945F14D000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f476232-4a24-3878-856d-3b95bd11039c.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 396604 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2e:d4:b9:38:2e:94:5f:14:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=69ff8c9e-28cb-4838-89e3-700cb205a647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:a8:5c:bf:62:70:df:32:c2:3d:11:45:45: cf:3a:61:d1:23:1c:4c:13:5e:0f:e4:01:3d:1e:47: 1c:c5:59:8c:79:7b:87:7a:71:6d:3e:25:e9:fb:8d: e1:b3:3f:49:f7:8b:84:da:55:69:c8:c4:11:74:79: ea:1a:9b:49:b0:dc:19:0a:2a:4a:67:06:15:9f:b7: b5:e6:7f:3a:11:89:a0:57:bb:5b:9b:a6:79:98:a8: c2:88:50:01:c5:2d:f9:e0:a6:c8:a7:c5:b5:36:d2: 2e:82:f7:ad:67:87:fa:67:11:e6:83:a0:aa:58:5a: 7b:a6:9b:f6:df:12:5a:3e:ab:c0:a0:68:bf:a1:95: 8f:0b:a8:e8:b6:b1:b3:07:ec:4b:d6:23:60:39:5b: ba:ce:15:f3:41:15:d4:45:c2:39:f6:fa:78:6c:ac: 64:1e:2e:0b:c9:58:13:45:41:4f:fe:94:f5:2d:d1: e9:61:99:60:91:2c:7a:08:8b:26:34:29:ee:1b:c3: 41:b9:7a:1d:df:03:c5:f4:53:30:37:66:2c:fc:e0: 6f:fc:58:30:55:3b:dc:66:97:13:98:e8:10:21:e9: 85:7c:0b:65:56:b5:fd:75:24:a5:57:ee:4a:e3:77: 79:ed:73:e4:fa:8e:b3:a0:2a:c4:65:86:71:97:d3: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:68:1E:AE:19:E6:87:74:6F:9D:C2:91:69:E7:6A:E3:1C:B6:0B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f476232-4a24-3878-856d-3b95bd11039c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bf:7a:60:4e:89:36:c0:2f:ed:ee:db:fa:c1:17:83:5c:e4: 28:4b:f2:03:4d:ee:01:5b:57:83:87:8a:7f:9e:bd:47:ee:35: e2:a4:bf:f8:61:41:8e:38:94:0c:22:74:23:79:84:6b:7d:16: 7a:43:1e:dd:1d:1b:17:ee:81:fe:34:9a:38:b5:8f:52:07:bb: 5a:73:2c:fc:b9:51:03:50:7f:7e:44:2e:a0:68:fd:5b:f1:3c: 53:37:a9:9c:43:93:40:62:3e:19:26:ce:7b:06:16:7f:9e:0b: 72:ad:55:65:ad:37:81:ca:09:9c:44:75:61:09:6e:78:ba:4a: 7e:36:d7:c8:af:d8:c1:84:56:8e:ac:bd:43:c4:68:6c:d3:ad: f5:cc:d2:c1:55:ae:64:f2:17:98:e3:d6:ca:82:e3:f7:aa:78: ea:5d:dc:8c:6b:14:79:77:14:dc:6a:d8:02:43:20:3d:e3:57: 6e:96:e5:73:3c:ea:30:e4:0e:28:0b:48:12:14:78:b4:8b:21: ae:03:84:84:1a:87:b1:84:f1:3f:d0:13:d1:9a:bb:0a:0f:57: 81:cb:ae:3b:47:9a:c9:b2:be:92:f7:c4:cc:39:08:ac:f9:f0: 4f:52:bc:9d:49:7c:db:06:fd:f0:77:4d:f8:d1:1f:fa:72:93: 2a:42:ee:d6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmy7UuTgulF8U0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk NjlmZjhjOWUtMjhjYi00ODM4LTg5ZTMtNzAwY2IyMDVhNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTGoXL9icN8ywj0RRUXPOmHRIxxME14P5AE9 HkccxVmMeXuHenFtPiXp+43hsz9J94uE2lVpyMQRdHnqGptJsNwZCipKZwYVn7e1 5n86EYmgV7tbm6Z5mKjCiFABxS354KbIp8W1NtIugvetZ4f6ZxHmg6CqWFp7ppv2 3xJaPqvAoGi/oZWPC6jotrGzB+xL1iNgOVu6zhXzQRXURcI59vp4bKxkHi4LyVgT RUFP/pT1LdHpYZlgkSx6CIsmNCnuG8NBuXod3wPF9FMwN2Ys/OBv/FgwVTvcZpcT mOgQIemFfAtlVrX9dSSlV+5K43d57XPk+o6zoCrEZYZxl9MxLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNBoHq4Z5od0b53CkWnnauMctgtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY0NzYyMzItNGEyNC0z ODc4LTg1NmQtM2I5NWJkMTEwMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBMv3pgTok2wC/t7tv6wReDXOQoS/IDTe4BW1eD h4p/nr1H7jXipL/4YUGOOJQMInQjeYRrfRZ6Qx7dHRsX7oH+NJo4tY9SB7tacyz8 uVEDUH9+RC6gaP1b8TxTN6mcQ5NAYj4ZJs57BhZ/ngtyrVVlrTeBygmcRHVhCW54 ukp+NtfIr9jBhFaOrL1DxGhs0631zNLBVa5k8heY49bKguP3qnjqXdyMaxR5dxTc atgCQyA941duluVzPOow5A4oC0gSFHi0iyGuA4SEGoexhPE/0BPRmrsKD1eBy647 R5rJsr6S98TMOQis+fBPUrydSXzbBv3wd0340R/6cpMqQu7W -----END CERTIFICATE-----Generated at Mon Jun 30 11:39:19 2025 by rpki-client