$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa File: 238e4239-26e2-34b0-b9f4-5d67352e64dd.roa (raw, json) Hash identifier: XqleaHARwDmiAWo95vXZKlDd91dkvCKb+KB8VdhjaWI= Subject key identifier: A2:36:C3:1D:9D:55:6C:5B:2F:8C:78:FB:08:47:62:FF:1A:DE:E1:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A4110673BDE2DFF8813A578C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396589 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:67:3b:de:2d:ff:88:13:a5:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=0b4429cd-5d36-48d4-9ab2-845377e9d1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:c2:bd:35:c5:df:1d:8e:1c:a5:9e:0d:72: 8c:e0:78:92:95:b6:6b:08:85:fe:21:77:75:bc:61: 72:98:dd:ca:e3:f2:72:e5:95:f3:40:44:20:c9:07: 59:3a:fe:87:de:8d:c3:aa:e0:4e:4a:20:22:db:bb: 70:aa:12:40:cd:05:9e:8a:1b:61:4a:1f:20:f0:7c: bd:f0:71:22:ef:f0:db:06:f5:a3:e8:ba:8d:85:1e: d4:0d:bb:54:ea:53:07:b9:97:e9:3a:ec:6d:e4:86: b2:24:27:1c:b5:1e:56:99:26:9e:38:99:53:82:25: 71:24:3c:37:bc:1e:94:04:19:ee:d5:69:c3:de:b9: 71:eb:58:e2:44:40:27:8a:b6:d5:c1:58:5b:88:ea: 4e:cf:ff:24:21:ce:f2:3c:e7:87:83:80:b6:f8:4b: 0e:5c:c7:5b:9c:ef:50:e0:e2:8f:49:ad:34:ab:fb: f3:39:ec:9b:63:dd:52:78:24:7e:7d:79:0b:a2:fc: be:be:d2:70:cc:59:5f:e5:ef:45:45:1b:ec:e4:e7: f1:10:f0:ae:95:c3:d3:e1:0e:1e:fa:a2:d6:dc:5a: 67:20:32:bd:66:6e:48:fe:9b:fb:01:f3:07:61:0b: fe:e5:76:5b:a2:bb:c0:96:36:5b:99:45:78:ae:1a: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:C3:1D:9D:55:6C:5B:2F:8C:78:FB:08:47:62:FF:1A:DE:E1:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ae:e8:df:6c:15:13:61:1d:45:0b:ec:4d:ed:b8:a0:86:db: b6:7a:c2:4a:78:a7:15:c0:cd:c9:0c:e3:e5:af:5e:1e:d6:6c: 68:91:a1:ea:77:ca:fa:14:91:9c:3f:dd:ea:06:27:b7:1b:20: 10:cf:02:06:65:56:54:4e:e4:7c:26:1d:d3:44:48:8f:3c:3d: 6b:c5:bc:05:75:47:de:53:64:b3:ba:8c:58:b9:66:bd:75:1c: 6b:15:a8:64:30:37:26:10:30:a9:ad:0d:ee:b5:2c:42:6e:c8: 57:44:cb:39:c0:2c:78:97:eb:0f:e8:9a:42:0e:43:4e:89:f5: fa:4c:08:ab:07:67:d0:06:87:1e:d2:eb:b6:e0:43:f8:c6:e7: 73:d3:0a:d5:ca:7c:05:f3:46:5f:4c:8d:ff:19:d6:fc:86:63: 1b:35:04:3e:cb:0c:b7:80:9e:6e:7c:dd:c6:b5:98:f0:a9:d7: 2a:60:15:be:b7:10:06:16:c0:e6:6c:6a:db:80:f1:a0:80:2a: f2:69:9c:f5:e8:0a:46:9f:17:dd:4c:e5:3c:07:19:52:6e:b9: 76:59:2f:85:e3:0b:43:12:dd:55:6f:e8:53:64:45:b3:78:f0: 8e:ef:fb:2a:d7:b5:6d:c4:1d:80:fe:41:36:04:73:5c:86:46: e8:1a:6b:30 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGc73i3/iBOleMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MGI0NDI5Y2QtNWQzNi00OGQ0LTlhYjItODQ1Mzc3ZTlkMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPzCvTXF3x2OHKWeDXKM4HiSlbZrCIX+IXd1 vGFymN3K4/Jy5ZXzQEQgyQdZOv6H3o3DquBOSiAi27twqhJAzQWeihthSh8g8Hy9 8HEi7/DbBvWj6LqNhR7UDbtU6lMHuZfpOuxt5IayJCcctR5WmSaeOJlTgiVxJDw3 vB6UBBnu1WnD3rlx61jiREAnirbVwVhbiOpOz/8kIc7yPOeHg4C2+EsOXMdbnO9Q 4OKPSa00q/vzOeybY91SeCR+fXkLovy+vtJwzFlf5e9FRRvs5OfxEPCulcPT4Q4e +qLW3FpnIDK9Zm5I/pv7AfMHYQv+5XZborvAljZbmUV4rhq8LwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKI2wx2dVWxbL4x4+whHYv8a3uFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjM4ZTQyMzktMjZlMi0z NGIwLWI5ZjQtNWQ2NzM1MmU2NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlrujfbBUTYR1FC+xN7bightu2esJKeKcVwM3J DOPlr14e1mxokaHqd8r6FJGcP93qBie3GyAQzwIGZVZUTuR8Jh3TREiPPD1rxbwF dUfeU2SzuoxYuWa9dRxrFahkMDcmEDCprQ3utSxCbshXRMs5wCx4l+sP6JpCDkNO ifX6TAirB2fQBoce0uu24EP4xudz0wrVynwF80ZfTI3/Gdb8hmMbNQQ+ywy3gJ5u fN3GtZjwqdcqYBW+txAGFsDmbGrbgPGggCryaZz16ApGnxfdTOU8BxlSbrl2WS+F 4wtDEt1Vb+hTZEWzePCO7/sq17VtxB2A/kE2BHNchkboGmsw -----END CERTIFICATE-----Generated at Mon Jun 30 13:51:08 2025 by rpki-client