$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa File: 343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa (raw, json) Hash identifier: OELfu0k35EzXrJ65SsFP97cTDchW9w/oJTQbJhANYJs= Subject key identifier: D8:F3:A1:39:FA:4E:67:12:32:14:C4:9F:F1:41:29:FD:92:D4:AE:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B6DF5E1BFF5D31BFB82C3A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 7342 IP address blocks: 2620:74:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5e:1b:ff:5d:31:bf:b8:2c:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=373c26da-0a85-4a62-9f0b-7e94d113a3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:17:b1:35:fa:c1:af:3c:b1:e5:31:77:fd: ff:7a:5f:b7:a0:d7:97:fd:48:48:01:a6:39:c0:9d: db:12:43:26:df:4c:60:bd:39:c8:1a:de:a3:70:ca: 6f:2d:87:e7:3b:4b:81:27:2c:37:af:cc:5b:04:c5: 97:80:ae:21:20:8f:c4:4f:15:fd:8e:e7:87:e3:0c: 8e:55:13:b4:16:c4:ab:92:51:a1:57:2a:e5:98:e0: 52:33:8e:b3:13:2c:01:bb:50:71:d6:4f:a0:22:72: 57:a8:22:54:4a:47:5e:63:ed:64:53:af:0c:08:a4: 9a:a2:1a:d0:ea:ff:b7:38:a8:e8:0e:71:38:f9:3a: dc:a1:b7:c6:ec:1c:20:ef:fe:60:a5:0f:7a:27:36: 23:b0:ee:cd:cb:8a:22:84:04:f4:4b:e5:ec:0d:c3: 8f:64:17:54:3e:c9:30:8f:51:3e:c8:ee:f9:44:bf: 5f:32:5e:e4:c8:7b:c2:9f:f6:c7:4d:f6:d3:11:2c: 98:27:3f:93:96:24:1b:7e:50:1f:83:37:c5:a7:cb: a7:a2:e4:37:04:47:63:c1:df:62:22:67:4f:74:f6: 70:1f:a3:b0:c4:77:02:7c:b7:37:23:b0:ef:f6:51: 05:d5:fd:9d:fb:fe:ce:ae:02:49:75:5e:e5:95:82: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F3:A1:39:FA:4E:67:12:32:14:C4:9F:F1:41:29:FD:92:D4:AE:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:69::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7d:5b:8a:6c:fd:0d:62:08:20:4a:58:03:ee:7f:46:9e:f7: 37:2d:3c:ce:14:ed:6a:94:8f:18:41:08:5a:3e:02:58:a2:69: 0a:8c:4f:e0:04:b8:03:ad:b0:c5:b1:1d:99:05:10:0e:2a:46: 94:1e:6e:83:65:eb:53:e3:09:5b:52:d5:0f:d7:31:6e:63:5a: 59:af:74:30:2e:d0:dc:cf:dd:0b:f9:07:55:32:a5:7a:a6:2e: 3f:a7:45:c3:d1:5b:4a:d6:02:42:d7:9a:27:60:4c:bf:a9:4f: 93:59:6e:9e:da:02:88:8e:88:25:58:5f:b8:40:6a:47:32:8e: ce:32:83:89:23:2e:66:31:8e:d8:3d:49:3a:45:ec:fc:74:1b: ec:3d:ff:e4:43:d4:a0:b4:ad:30:e9:2e:92:5f:54:97:81:91: 0b:4d:bf:c8:04:b9:36:8c:03:20:27:d7:c3:15:89:15:23:7e: 2e:75:d9:ff:b4:cc:5c:e8:01:59:49:1a:92:3c:10:e4:53:47: 2c:6f:22:54:26:b7:ca:c4:70:28:26:25:ae:ce:b2:0e:9f:03: 47:82:51:3a:48:41:4b:14:5d:c5:82:2d:6b:cf:af:71:23:7c: b4:0c:53:1f:a2:95:a5:c2:6a:0f:69:2b:69:7f:45:f9:cd:20: 1b:16:fa:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm2314b/10xv7gsOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk MzczYzI2ZGEtMGE4NS00YTYyLTlmMGItN2U5NGQxMTNhM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobsXsTX6wa88seUxd/3/el+3oNeX/UhIAaY5 wJ3bEkMm30xgvTnIGt6jcMpvLYfnO0uBJyw3r8xbBMWXgK4hII/ETxX9jueH4wyO VRO0FsSrklGhVyrlmOBSM46zEywBu1Bx1k+gInJXqCJUSkdeY+1kU68MCKSaohrQ 6v+3OKjoDnE4+TrcobfG7Bwg7/5gpQ96JzYjsO7Ny4oihAT0S+XsDcOPZBdUPskw j1E+yO75RL9fMl7kyHvCn/bHTfbTESyYJz+TliQbflAfgzfFp8unouQ3BEdjwd9i ImdPdPZwH6OwxHcCfLc3I7Dv9lEF1f2d+/7OrgJJdV7llYIcqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjzoTn6TmcSMhTEn/FBKf2S1K7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQzZDc2MjgtZGJjNi0z YzBmLTgyMDktNWE4ZTI5OGUwZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH99W4ps/Q1iCCBKWAPuf0ae9zctPM4U7WqUjxhBCFo+AliiaQqM T+AEuAOtsMWxHZkFEA4qRpQeboNl61PjCVtS1Q/XMW5jWlmvdDAu0NzP3Qv5B1Uy pXqmLj+nRcPRW0rWAkLXmidgTL+pT5NZbp7aAoiOiCVYX7hAakcyjs4yg4kjLmYx jtg9STpF7Px0G+w9/+RD1KC0rTDpLpJfVJeBkQtNv8gEuTaMAyAn18MViRUjfi51 2f+0zFzoAVlJGpI8EORTRyxvIlQmt8rEcCgmJa7Osg6fA0eCUTpIQUsUXcWCLWvP r3EjfLQMUx+ilaXCag9pK2l/RfnNIBsW+vM= -----END CERTIFICATE-----Generated at Mon Jun 30 05:11:07 2025 by rpki-client