$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36952738-8b91-3ac9-8622-6ced3436cb49.roa File: 36952738-8b91-3ac9-8622-6ced3436cb49.roa (raw, json) Hash identifier: EPPmK6NHpWyYQV9KcSwVB+7jw/hdQVHk33ITKCN9Wo4= Subject key identifier: 4C:F0:56:60:97:27:9C:1B:64:71:90:AA:9B:E6:EE:36:46:2D:C8:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106B7C60EB12F210511E70 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36952738-8b91-3ac9-8622-6ced3436cb49.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 397203 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:6b:7c:60:eb:12:f2:10:51:1e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=cbff005d-5626-4d89-9b3b-cfc5740bb1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:ff:9e:5c:51:14:cb:51:74:cc:e8:a9:f5: 37:07:55:a4:ce:69:49:4b:12:1d:05:b3:df:72:b6: 9d:e3:48:d1:65:de:0b:b6:ff:b1:d8:22:b8:f1:72: e6:e6:62:47:fb:1a:7e:08:16:48:d7:6a:b8:c5:f8: ef:c8:e2:39:09:95:8c:cd:3a:52:db:52:1e:3b:15: 71:9b:e5:54:de:1e:65:3a:b9:61:7a:df:55:25:78: 3e:aa:c7:fd:9e:c5:5b:48:66:5f:d7:37:a0:52:1e: 87:6f:e7:a9:e0:13:3c:7b:18:1b:c6:29:ac:3a:96: 59:0b:d7:fe:41:a6:87:73:b5:c7:7f:43:b4:96:70: d7:f1:8e:17:ac:85:a7:90:b2:65:09:ad:93:7c:4b: 4c:f9:a8:5b:bb:6b:28:b3:04:65:11:14:60:5d:c5: 0f:09:19:31:d7:ae:e3:70:f2:ce:9f:a4:31:1e:a7: a5:d4:48:b7:5a:44:3b:45:ec:3e:95:46:bb:97:6c: ee:8e:47:4c:1d:3e:54:42:e8:0e:dc:c9:ee:fe:21: 3d:fa:a9:66:a8:2e:af:04:79:d7:4a:1f:78:da:7b: d7:f1:ad:8c:bd:cb:28:3a:2a:15:df:16:c2:f3:35: 60:76:87:c1:94:22:4e:d8:64:c2:85:3d:c9:e3:40: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:56:60:97:27:9C:1B:64:71:90:AA:9B:E6:EE:36:46:2D:C8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36952738-8b91-3ac9-8622-6ced3436cb49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cc:b2:df:9f:69:b0:91:d4:c1:ad:89:60:a9:82:7a:5c:79: 16:21:da:b5:c8:bb:59:b2:0c:d3:c8:1a:31:a4:1f:e1:61:03: 02:ec:1b:ee:b0:e3:b2:ef:cf:e6:39:ae:57:25:38:c8:45:94: 0a:2f:4d:9c:dc:c4:90:f2:3c:e2:5a:93:42:88:65:1b:9b:0c: 19:87:80:82:bb:aa:4f:0e:53:ff:97:25:bc:6a:b7:5c:d3:b5: 16:fa:68:05:3d:90:01:93:08:57:3c:1c:2f:e4:49:c4:26:03: d9:24:b1:fd:06:a6:47:04:24:59:dc:11:e5:5f:24:d9:a5:27: f0:05:41:8a:c3:4d:c3:5a:5b:c9:f3:59:2a:54:b2:81:d6:92: 9b:32:e3:ae:87:3f:11:8e:f1:cc:88:3e:5f:54:80:7f:0f:01: 99:60:89:00:86:9c:e7:31:73:6a:48:70:25:38:83:f0:a5:c7: c6:30:a1:43:7e:2b:79:9e:61:3c:ab:38:76:61:96:ea:f5:32: 1c:1b:85:75:9e:98:4a:8e:c0:ff:4d:c6:b2:0c:9c:eb:90:d4: d0:ce:50:d5:82:fb:71:ae:23:fd:b0:a5:c6:35:2b:a4:fe:70: cc:43:ef:8d:57:5f:8c:c1:b6:25:83:2d:65:e6:2a:ab:c2:e8: f1:d7:a1:d4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGt8YOsS8hBRHnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Y2JmZjAwNWQtNTYyNi00ZDg5LTliM2ItY2ZjNTc0MGJiMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcf/nlxRFMtRdMzoqfU3B1WkzmlJSxIdBbPf crad40jRZd4Ltv+x2CK48XLm5mJH+xp+CBZI12q4xfjvyOI5CZWMzTpS21IeOxVx m+VU3h5lOrlhet9VJXg+qsf9nsVbSGZf1zegUh6Hb+ep4BM8exgbximsOpZZC9f+ QaaHc7XHf0O0lnDX8Y4XrIWnkLJlCa2TfEtM+ahbu2soswRlERRgXcUPCRkx167j cPLOn6QxHqel1Ei3WkQ7Rew+lUa7l2zujkdMHT5UQugO3Mnu/iE9+qlmqC6vBHnX Sh942nvX8a2MvcsoOioV3xbC8zVgdofBlCJO2GTChT3J40ACFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEzwVmCXJ5wbZHGQqpvm7jZGLchaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY5NTI3MzgtOGI5MS0z YWM5LTg2MjItNmNlZDM0MzZjYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA0zLLfn2mwkdTBrYlgqYJ6XHkWIdq1yLtZsgzT yBoxpB/hYQMC7BvusOOy78/mOa5XJTjIRZQKL02c3MSQ8jziWpNCiGUbmwwZh4CC u6pPDlP/lyW8ardc07UW+mgFPZABkwhXPBwv5EnEJgPZJLH9BqZHBCRZ3BHlXyTZ pSfwBUGKw03DWlvJ81kqVLKB1pKbMuOuhz8RjvHMiD5fVIB/DwGZYIkAhpznMXNq SHAlOIPwpcfGMKFDfit5nmE8qzh2YZbq9TIcG4V1nphKjsD/TcayDJzrkNTQzlDV gvtxriP9sKXGNSuk/nDMQ++NV1+MwbYlgy1l5iqrwujx16HU -----END CERTIFICATE-----Generated at Tue Jul 1 00:53:03 2025 by rpki-client