$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f7353ce-5ddf-3149-b1fa-5ed71ae65aef.roa File: 0f7353ce-5ddf-3149-b1fa-5ed71ae65aef.roa (raw, json) Hash identifier: Va5m8DRs4PnMVe0VSTraoZ/F8ZrPRHvM+R0r8v9cWg4= Subject key identifier: 8A:33:B9:3F:E1:9F:4B:A1:F6:22:55:56:70:D0:9D:FA:9A:B7:1E:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106949B85B12E6F83C8B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f7353ce-5ddf-3149-b1fa-5ed71ae65aef.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396540 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:69:49:b8:5b:12:e6:f8:3c:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=be9da4f4-deba-43d6-8427-17ebf74b583a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:41:30:bf:91:86:6e:fc:bc:c0:f8:20:89: 38:39:fe:56:6a:06:57:8b:65:1f:24:5b:7b:05:de: 77:b2:93:26:a8:1a:d9:4b:66:cc:e1:86:aa:10:9f: 26:99:fe:2f:43:db:4b:50:75:60:e8:c4:41:f7:65: a1:d7:5c:44:1d:7b:e2:99:67:95:f8:d1:a0:c1:5b: 5e:aa:c2:9d:9a:43:f7:aa:8e:7c:68:e7:e3:f2:58: d4:cd:ef:fd:1b:03:2b:b5:3f:da:4d:78:96:90:9f: 2f:f2:ad:45:e5:59:fd:b1:a6:4d:b8:3a:13:f4:20: 40:18:e1:78:7e:be:24:f2:40:b5:87:a4:5d:51:c3: f2:ab:0e:6e:09:71:6c:56:18:33:fa:0c:f5:7d:00: 5c:fa:46:63:53:65:10:a2:78:2a:7d:01:5a:2f:f2: ca:71:64:fa:21:33:0a:9f:d7:4b:d1:d1:c8:61:4c: 9d:7c:af:d2:54:b6:cb:7e:b8:ca:e6:86:38:b1:b7: 44:ad:e8:dd:dc:78:9e:90:a7:c9:23:df:ef:50:2c: d6:a5:b4:ce:bf:4f:28:79:71:2f:5d:36:a8:4d:9a: b2:89:ca:50:a1:15:bc:97:d7:6a:0e:ff:08:1d:99: 42:8a:b2:c6:c8:c8:03:1a:f9:ca:a0:31:8a:bc:fd: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:B9:3F:E1:9F:4B:A1:F6:22:55:56:70:D0:9D:FA:9A:B7:1E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f7353ce-5ddf-3149-b1fa-5ed71ae65aef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cf:53:cb:ce:90:d3:e6:f7:9f:3c:87:5e:d1:b4:f9:83:cd: 53:dc:e3:f4:8d:7f:f1:23:47:29:e0:57:79:0a:ec:df:52:9f: 9c:10:c2:92:1f:0b:56:5d:6e:26:cc:2a:18:bb:8c:1b:fe:6b: aa:d1:87:c6:ce:c1:87:33:2f:26:1c:49:26:69:96:d7:df:a8: ff:1f:a0:61:2f:f5:13:20:69:75:42:ba:de:ce:fd:d8:c4:cd: 60:b9:a1:05:b8:20:f3:f5:de:76:fe:eb:09:06:fb:38:1a:1f: fc:7f:02:00:dc:73:d9:e7:ed:51:ea:06:1a:1e:ad:b9:50:04: 85:60:c9:93:b0:3e:1b:54:f4:26:67:71:c3:84:1a:eb:3f:5b: 4c:2f:f2:ab:15:62:24:55:2c:d6:9e:94:9a:d8:f5:1e:da:79: eb:3c:43:c5:ed:8b:d6:2b:1d:3a:6c:bf:b3:74:de:0a:c7:8d: 56:bf:37:b3:fa:02:3a:cf:c7:33:d1:d7:06:68:11:d0:81:69: cc:35:a5:57:56:cd:99:f9:16:42:94:3c:03:39:5e:c4:67:39: 6c:90:d1:88:f4:91:19:69:99:5f:5a:e0:6e:50:96:31:88:56: f5:e3:bf:5b:b0:ee:fb:9c:68:18:62:70:bc:23:70:0b:5e:ff: fd:9b:a4:5c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGlJuFsS5vg8iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YmU5ZGE0ZjQtZGViYS00M2Q2LTg0MjctMTdlYmY3NGI1ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreNBML+Rhm78vMD4IIk4Of5WagZXi2UfJFt7 Bd53spMmqBrZS2bM4YaqEJ8mmf4vQ9tLUHVg6MRB92Wh11xEHXvimWeV+NGgwVte qsKdmkP3qo58aOfj8ljUze/9GwMrtT/aTXiWkJ8v8q1F5Vn9saZNuDoT9CBAGOF4 fr4k8kC1h6RdUcPyqw5uCXFsVhgz+gz1fQBc+kZjU2UQongqfQFaL/LKcWT6ITMK n9dL0dHIYUydfK/SVLbLfrjK5oY4sbdErejd3HiekKfJI9/vUCzWpbTOv08oeXEv XTaoTZqyicpQoRW8l9dqDv8IHZlCirLGyMgDGvnKoDGKvP0w8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIozuT/hn0uh9iJVVnDQnfqatx6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY3MzUzY2UtNWRkZi0z MTQ5LWIxZmEtNWVkNzFhZTY1YWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAdz1PLzpDT5vefPIde0bT5g81T3OP0jX/xI0cp 4Fd5CuzfUp+cEMKSHwtWXW4mzCoYu4wb/muq0YfGzsGHMy8mHEkmaZbX36j/H6Bh L/UTIGl1Qrrezv3YxM1guaEFuCDz9d52/usJBvs4Gh/8fwIA3HPZ5+1R6gYaHq25 UASFYMmTsD4bVPQmZ3HDhBrrP1tML/KrFWIkVSzWnpSa2PUe2nnrPEPF7YvWKx06 bL+zdN4Kx41Wvzez+gI6z8cz0dcGaBHQgWnMNaVXVs2Z+RZClDwDOV7EZzlskNGI 9JEZaZlfWuBuUJYxiFb1479bsO77nGgYYnC8I3ALXv/9m6Rc -----END CERTIFICATE-----Generated at Mon Jun 30 05:38:57 2025 by rpki-client