$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa File: 220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa (raw, json) Hash identifier: qmEFrzYH9ux26cUVsyg0Odg690GIw19d7F6fG8jEYgk= Subject key identifier: 36:9D:2D:DA:DC:B1:22:45:D2:C6:55:58:60:9F:91:C3:9E:47:24:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2D79306814A0762EFB60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 396566 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2d:79:30:68:14:a0:76:2e:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=99d46490-80b8-45d5-9d19-d16deaa39b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cc:f1:91:10:0b:2d:ea:64:3b:f4:90:93:02: cc:8f:54:28:f8:74:5b:0c:16:75:cc:c1:48:90:85: 3a:d4:28:e2:89:e6:d7:db:29:14:dd:11:ef:6e:35: ce:e5:28:a6:98:5e:6b:f8:a8:25:7c:ac:2a:89:10: 98:8d:8d:ec:26:1a:b4:02:37:4b:28:5b:fe:83:30: 4b:db:9c:1b:11:14:0a:18:1e:b9:dd:97:2c:59:7b: f2:bc:9a:0d:41:21:c7:a0:40:ad:c7:8e:58:7d:c2: 1b:30:2f:11:9c:7e:a3:de:89:27:2b:80:21:bb:06: 91:7a:9e:07:11:4e:75:1d:1c:c6:13:73:55:47:10: 99:fc:89:84:60:06:bd:a7:ca:f0:9d:d2:b4:1e:5f: 8b:cd:a7:55:34:df:83:38:1b:29:2b:7b:8e:92:25: eb:58:f0:6f:e7:00:10:e4:85:43:f1:90:36:d3:20: fb:66:2b:83:59:a6:3b:48:c6:6d:72:69:9e:4a:f3: de:c4:f9:73:6b:66:be:35:90:3e:f5:67:64:ba:0b: e1:b1:c8:8e:fa:9f:0e:32:4d:2d:af:65:20:ef:37: ef:4a:b6:a7:e7:f1:43:82:19:51:9c:b0:c0:e6:e5: 33:24:b4:89:1c:b3:f1:58:c6:23:71:6d:7c:93:f7: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9D:2D:DA:DC:B1:22:45:D2:C6:55:58:60:9F:91:C3:9E:47:24:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4f:57:9a:31:bf:d4:62:b7:88:b7:50:aa:8b:a5:7b:83:bb: 11:73:4d:e3:3f:9b:9a:c5:e4:dc:35:6e:ff:73:80:05:6d:33: cc:f5:0e:23:ef:96:2a:a0:6e:85:42:5b:c8:22:7b:75:7a:93: 46:4d:f5:71:78:e0:f9:72:b1:10:1e:af:e7:7b:92:24:45:a8: 5f:2a:ab:4e:f3:90:12:63:5c:72:2d:31:17:33:93:86:1d:8e: c8:0a:a8:93:56:26:8c:4d:b7:41:06:e7:16:3f:37:a7:69:20: 24:1c:f8:a2:93:7f:92:0d:9b:7e:9d:7e:18:7a:00:06:be:82: 2f:ab:86:aa:e6:8a:7d:5b:ee:48:ee:47:e5:e4:bf:00:15:fc: e0:7f:8e:44:60:d6:28:1b:ee:68:d3:1e:60:d7:36:71:4e:69: a3:8c:00:cd:e5:9e:7a:2d:cc:de:98:a2:90:e7:f7:c9:30:e5: ef:bd:d9:f5:7a:73:df:a9:f8:43:ab:fa:2c:8c:f4:c9:9f:b3: 69:d9:26:18:be:45:ce:6d:21:c6:95:4b:00:6e:8c:38:dd:bb: fd:09:0b:79:2e:fc:e4:29:12:68:1a:b2:34:40:66:23:50:d1: e0:af:69:7a:98:f6:b0:4c:94:67:3e:f8:35:9d:da:1e:f0:53: 16:59:e9:3d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmy15MGgUoHYu+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk OTlkNDY0OTAtODBiOC00NWQ1LTlkMTktZDE2ZGVhYTM5YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48zxkRALLepkO/SQkwLMj1Qo+HRbDBZ1zMFI kIU61CjiiebX2ykU3RHvbjXO5SimmF5r+KglfKwqiRCYjY3sJhq0AjdLKFv+gzBL 25wbERQKGB653ZcsWXvyvJoNQSHHoECtx45YfcIbMC8RnH6j3oknK4AhuwaRep4H EU51HRzGE3NVRxCZ/ImEYAa9p8rwndK0Hl+LzadVNN+DOBspK3uOkiXrWPBv5wAQ 5IVD8ZA20yD7ZiuDWaY7SMZtcmmeSvPexPlza2a+NZA+9WdkugvhsciO+p8OMk0t r2Ug7zfvSran5/FDghlRnLDA5uUzJLSJHLPxWMYjcW18k/fV9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDadLdrcsSJF0sZVWGCfkcOeRySEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIwY2NmM2QtMjY1NC0z NDAzLWIxNTktYzNlYjlkNmNhNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3T1eaMb/UYreIt1Cqi6V7g7sRc03jP5uaxeTc NW7/c4AFbTPM9Q4j75YqoG6FQlvIInt1epNGTfVxeOD5crEQHq/ne5IkRahfKqtO 85ASY1xyLTEXM5OGHY7ICqiTViaMTbdBBucWPzenaSAkHPiik3+SDZt+nX4YegAG voIvq4aq5op9W+5I7kfl5L8AFfzgf45EYNYoG+5o0x5g1zZxTmmjjADN5Z56Lcze mKKQ5/fJMOXvvdn1enPfqfhDq/osjPTJn7Np2SYYvkXObSHGlUsAbow43bv9CQt5 LvzkKRJoGrI0QGYjUNHgr2l6mPawTJRnPvg1ndoe8FMWWek9 -----END CERTIFICATE-----Generated at Mon Jun 30 15:14:27 2025 by rpki-client