$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db029a6-0be4-3031-9101-61423a146c68.roa File: 2db029a6-0be4-3031-9101-61423a146c68.roa (raw, json) Hash identifier: pUQCSlCUQIVewixtoTLIVMjJrIirWSnwfRa3CzZ22AM= Subject key identifier: 96:DC:07:0F:5D:B3:51:02:19:57:52:FD:C3:D0:73:4E:C9:93:3E:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2E613B4F1234FB581980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db029a6-0be4-3031-9101-61423a146c68.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 396602 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2e:61:3b:4f:12:34:fb:58:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=8a15b0a6-fd90-4866-9272-6b492e335d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:89:75:ac:e2:05:f2:b0:dd:05:9f:b7:18: af:b1:12:88:78:2a:30:0f:02:aa:69:03:98:18:0f: dc:00:1d:9a:15:1b:e6:69:0c:a7:b4:7a:9d:0b:41: 95:cd:67:e3:f3:84:b6:45:96:21:ad:fb:4f:d9:e9: 04:9e:e5:76:cc:66:98:08:fb:e7:53:41:08:aa:cb: c4:ae:24:61:a7:aa:50:db:ce:b8:8d:32:ce:be:d5: 78:96:92:bd:b3:3f:e6:15:1c:d2:a7:f0:db:f2:4f: 9a:a2:7e:31:96:78:4b:76:e2:e4:5d:ac:26:30:d1: a9:4d:24:6b:41:c6:48:b6:71:36:93:30:57:8d:16: 52:7c:7c:ea:36:aa:4a:ef:6e:1c:d3:cb:c4:e5:45: 83:ab:63:d7:a6:4d:1b:a8:49:dd:b5:54:54:61:c9: e7:c8:74:7a:f3:21:cf:db:3c:1f:56:44:3c:6b:01: bb:01:ee:de:02:25:d7:a1:35:46:bb:31:aa:f1:46: 7f:a8:d6:40:a4:a7:6d:f9:10:05:a7:2e:c5:e5:28: da:dc:52:91:c0:72:e5:32:48:84:5b:cb:7d:29:d7: a4:6f:65:6a:da:37:2b:82:c2:b9:1a:34:f1:99:55: a2:05:e5:f9:14:c9:be:46:ea:8f:f2:ec:db:5c:b7: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:07:0F:5D:B3:51:02:19:57:52:FD:C3:D0:73:4E:C9:93:3E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db029a6-0be4-3031-9101-61423a146c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:33:75:b2:be:28:d4:12:6d:c2:ef:38:00:ba:3c:52:fd:91: 94:5e:cc:f0:fe:bc:7f:62:b2:59:01:2c:13:3d:8c:68:44:c3: 0c:38:21:98:04:6d:11:98:5a:82:62:26:15:ee:92:cb:db:a6: b1:66:2c:e5:2f:9c:e2:18:f4:ba:e4:a0:ed:ed:d9:cd:13:9c: e6:e5:2d:1b:5b:22:70:8d:52:48:e8:d3:14:fb:97:c1:1d:f4: 4f:a5:53:75:0e:05:c4:71:4f:5a:6d:7b:ef:75:80:08:8f:3f: 7b:5e:21:cf:80:19:06:e7:98:77:7e:eb:a1:be:66:83:8e:74: c8:1b:01:15:59:9c:9f:be:70:f1:0e:59:8f:04:81:a7:b5:c7: fa:44:bc:12:55:b8:86:bf:7b:d5:fc:e4:e2:6b:2a:1d:1f:ac: 56:a4:7b:a2:79:0a:5a:63:7a:22:1e:06:5e:29:68:33:53:1a: 47:4e:ee:21:8e:35:d0:6a:92:4b:bf:ea:8f:4c:af:93:fa:3b: d6:85:e4:03:af:97:fd:a3:18:b0:3d:5c:cd:90:d5:72:18:e0: 20:31:05:86:31:6b:7d:f7:7a:a5:a0:08:8a:ee:4a:27:56:3f: cd:ff:9a:30:cd:9b:6e:48:7e:0a:b1:f7:a2:d3:c6:f2:df:96: e9:29:0e:e7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmy5hO08SNPtYGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk OGExNWIwYTYtZmQ5MC00ODY2LTkyNzItNmI0OTJlMzM1ZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFmJdaziBfKw3QWftxivsRKIeCowDwKqaQOY GA/cAB2aFRvmaQyntHqdC0GVzWfj84S2RZYhrftP2ekEnuV2zGaYCPvnU0EIqsvE riRhp6pQ2864jTLOvtV4lpK9sz/mFRzSp/Db8k+aon4xlnhLduLkXawmMNGpTSRr QcZItnE2kzBXjRZSfHzqNqpK724c08vE5UWDq2PXpk0bqEndtVRUYcnnyHR68yHP 2zwfVkQ8awG7Ae7eAiXXoTVGuzGq8UZ/qNZApKdt+RAFpy7F5Sja3FKRwHLlMkiE W8t9Kdekb2Vq2jcrgsK5GjTxmVWiBeX5FMm+RuqP8uzbXLf5EwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJbcBw9ds1ECGVdS/cPQc07Jkz6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRiMDI5YTYtMGJlNC0z MDMxLTkxMDEtNjE0MjNhMTQ2YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6M3WyvijUEm3C7zgAujxS/ZGUXszw/rx/YrJZ ASwTPYxoRMMMOCGYBG0RmFqCYiYV7pLL26axZizlL5ziGPS65KDt7dnNE5zm5S0b WyJwjVJI6NMU+5fBHfRPpVN1DgXEcU9abXvvdYAIjz97XiHPgBkG55h3fuuhvmaD jnTIGwEVWZyfvnDxDlmPBIGntcf6RLwSVbiGv3vV/OTiayodH6xWpHuieQpaY3oi HgZeKWgzUxpHTu4hjjXQapJLv+qPTK+T+jvWheQDr5f9oxiwPVzNkNVyGOAgMQWG MWt993qloAiK7konVj/N/5owzZtuSH4Ksfei08by35bpKQ7n -----END CERTIFICATE-----Generated at Tue Jul 1 15:14:56 2025 by rpki-client