$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c0f61db-962d-3d24-87af-a4b8ec7ad87b.roa File: 1c0f61db-962d-3d24-87af-a4b8ec7ad87b.roa (raw, json) Hash identifier: UkP1oveGh5Sc8EXTXlOsN8G2yArHdF+cFFSPYrd+5X0= Subject key identifier: 76:D0:9F:0A:B9:D1:0C:27:B3:DF:86:67:6B:8F:65:B0:27:2D:DB:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B31298EA0188DF7F06000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c0f61db-962d-3d24-87af-a4b8ec7ad87b.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20362 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:31:29:8e:a0:18:8d:f7:f0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=4f48bd31-d9c6-4874-8c95-fe1e1650f9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:88:d0:f8:4a:e3:01:32:f2:4f:2b:18:8b: 15:6e:8c:38:ec:6f:f3:df:91:be:f9:53:eb:84:d7: ac:6f:ca:ab:ea:87:b1:7c:51:b0:dc:09:f7:76:49: 4b:ee:0b:ce:4d:45:d0:2c:2f:7f:21:2a:7c:a7:7b: 59:b3:e9:8f:20:ff:2a:42:b7:50:54:68:eb:b4:86: 2d:da:3c:aa:e1:3e:2a:79:7e:c4:ca:b4:58:45:2a: 41:e9:ad:bf:b0:5c:87:7e:ef:7e:f1:39:1e:e9:26: 03:2f:f6:ce:49:0f:ed:df:e5:54:1d:b7:c2:a2:aa: da:f8:5a:99:e8:b9:52:0d:5e:b9:98:22:10:8e:62: df:fe:84:43:13:fb:c8:64:99:77:35:39:d2:99:ad: 1b:c2:b5:8a:03:69:04:2f:5f:03:da:3f:bb:5c:de: 8e:8a:d4:3f:f8:db:43:35:36:c1:a9:91:89:b1:da: be:54:79:90:c3:2c:bb:8d:4c:c8:eb:19:71:74:c8: 8b:40:32:4d:16:e2:df:e6:7f:c5:9c:bf:62:c7:36: 42:29:8d:26:c2:15:91:0a:2d:15:d8:e0:79:9e:31: b9:98:9c:38:ad:44:cc:ff:4f:8a:ba:96:85:db:3a: 67:1a:21:cd:c1:69:2c:59:40:48:a8:69:71:e8:53: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D0:9F:0A:B9:D1:0C:27:B3:DF:86:67:6B:8F:65:B0:27:2D:DB:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c0f61db-962d-3d24-87af-a4b8ec7ad87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7f:3e:56:af:77:7e:bf:6f:72:8f:09:ba:4d:a3:0e:5c:73: 02:ef:14:1b:a7:70:1e:27:ac:ba:2a:cb:4e:fd:e1:e8:bf:4f: 29:eb:ec:bb:78:e2:65:7c:8e:6e:ae:c4:ad:43:a5:cd:3d:8a: 7d:31:eb:9b:ff:36:b9:ac:76:8a:6c:36:3d:9c:37:8b:11:1a: 6d:bc:04:66:60:2f:ae:ae:7f:3f:e4:ab:ea:d9:64:78:f8:87: 67:34:4e:3b:8b:29:cf:94:a4:35:51:db:b2:2f:f1:6d:78:98: 99:e7:03:c5:71:ba:fd:fa:f0:aa:fe:65:c9:4e:46:fa:3e:46: f0:65:f6:ba:04:4a:c3:be:f7:7c:26:47:4f:cb:bf:3a:ea:fc: 62:87:1c:6c:96:c4:15:60:a0:8d:72:d5:16:d0:32:c4:55:f0: 81:f8:7f:86:8b:c2:6a:9d:75:9c:c8:bf:df:a3:88:eb:ce:28: df:c8:2d:2c:a8:4e:f6:04:2d:bf:5f:c2:b0:3d:fd:8c:cb:04: 2e:89:97:c7:83:58:f6:39:99:01:d8:e1:73:47:67:4c:94:1a: 49:e4:d2:f1:0f:52:4a:e5:4d:51:b1:1d:84:80:2c:2b:5a:25: ba:50:50:86:27:28:46:ee:e7:4a:67:1a:e7:eb:a1:fb:09:fe: 76:71:50:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmzEpjqAYjffwYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk NGY0OGJkMzEtZDljNi00ODc0LThjOTUtZmUxZTE2NTBmOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmSI0PhK4wEy8k8rGIsVbow47G/z35G++VPr hNesb8qr6oexfFGw3An3dklL7gvOTUXQLC9/ISp8p3tZs+mPIP8qQrdQVGjrtIYt 2jyq4T4qeX7EyrRYRSpB6a2/sFyHfu9+8Tke6SYDL/bOSQ/t3+VUHbfCoqra+FqZ 6LlSDV65mCIQjmLf/oRDE/vIZJl3NTnSma0bwrWKA2kEL18D2j+7XN6OitQ/+NtD NTbBqZGJsdq+VHmQwyy7jUzI6xlxdMiLQDJNFuLf5n/FnL9ixzZCKY0mwhWRCi0V 2OB5njG5mJw4rUTM/0+KupaF2zpnGiHNwWksWUBIqGlx6FPIKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHbQnwq50Qwns9+GZ2uPZbAnLduNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWMwZjYxZGItOTYyZC0z ZDI0LTg3YWYtYTRiOGVjN2FkODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvfz5Wr3d+v29yjwm6TaMOXHMC7xQbp3AeJ6y6 KstO/eHov08p6+y7eOJlfI5ursStQ6XNPYp9Meub/za5rHaKbDY9nDeLERptvARm YC+urn8/5Kvq2WR4+IdnNE47iynPlKQ1UduyL/FteJiZ5wPFcbr9+vCq/mXJTkb6 PkbwZfa6BErDvvd8JkdPy7866vxihxxslsQVYKCNctUW0DLEVfCB+H+Gi8JqnXWc yL/fo4jrzijfyC0sqE72BC2/X8KwPf2MywQuiZfHg1j2OZkB2OFzR2dMlBpJ5NLx D1JK5U1RsR2EgCwrWiW6UFCGJyhG7udKZxrn66H7Cf52cVBG -----END CERTIFICATE-----Generated at Sun Jun 29 21:50:31 2025 by rpki-client