$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa File: 3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa (raw, json) Hash identifier: jcQhEeNvU/SfCXnMcIqgvbSEVmJj32fgPnMhyVCk3gQ= Subject key identifier: 85:B2:D4:EF:95:B4:C0:24:5A:D1:87:64:5C:CC:DD:65:21:90:B2:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B336D1080FB0C5A37CF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 36627 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:33:6d:10:80:fb:0c:5a:37:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=04a09eff-a21e-4255-a3d0-e648e4e70e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a9:96:6e:b5:4d:2d:3a:08:88:ef:91:96:0c: 43:da:fb:80:33:7b:3e:a8:43:60:0f:4f:8b:ca:09: 5c:b2:6b:ec:67:d8:b3:a0:ab:0e:45:11:75:51:a7: 1f:8e:f8:2f:21:dc:50:32:9e:f5:d2:e9:a7:1d:98: 6e:79:00:94:0b:b2:55:c1:de:32:88:85:b0:bb:2a: e0:5b:b4:fe:86:7d:8e:bb:73:5e:1b:71:a5:08:b5: 59:59:d4:42:40:c8:96:d0:ca:5d:09:95:2b:c9:d4: 7a:ce:44:98:6c:08:68:39:f7:fb:25:b7:d6:59:71: b4:33:8d:f2:82:7b:05:77:39:a1:66:81:09:24:60: 50:9f:53:b7:f3:00:5d:bf:df:fd:72:7f:2e:29:c5: 4a:c0:d7:81:c1:0c:59:21:8c:e7:0c:7c:4f:49:b9: bb:73:2e:e9:5f:e1:4d:a9:48:d5:37:e8:9a:da:71: 3e:ee:e6:47:ca:6f:de:c8:86:a7:bb:b9:f7:f5:2f: 13:60:71:6d:25:25:70:a5:78:c0:ba:4d:47:1f:95: c9:7c:f3:cc:ec:c3:ba:bb:66:c8:97:b4:99:f3:ca: 78:8f:07:e1:06:95:a0:61:7e:a3:8f:5b:d5:b0:d9: e3:63:4e:e1:23:b4:bf:7b:24:57:42:51:f4:3b:b2: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B2:D4:EF:95:B4:C0:24:5A:D1:87:64:5C:CC:DD:65:21:90:B2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:95:2b:d4:92:25:75:50:69:d2:78:db:6c:ef:a0:d0:51:da: 9a:64:4b:73:f9:d4:50:54:ca:f5:dc:71:c9:33:92:35:3e:65: 0c:d5:84:b8:0c:fb:a4:70:c5:89:46:13:6b:52:09:d0:35:3a: 59:c4:6c:4a:07:9e:da:88:1b:38:8a:a0:8a:7f:f8:0f:96:20: a4:83:d2:62:d4:8e:6d:1d:e9:6d:0f:70:e2:e2:ba:40:eb:b6: fc:d6:54:7a:5c:88:cb:d4:58:84:c6:61:f5:18:9c:bd:d3:7d: 9a:52:91:64:c4:94:00:65:e2:ac:7a:49:12:6f:64:53:5c:0d: 84:26:41:80:37:98:56:5b:12:37:7f:b3:cf:d8:e4:9f:d0:7e: 95:e2:66:bd:86:8e:f1:bd:a1:01:67:ca:58:0f:2d:57:4b:7f: 8b:2f:28:11:a2:55:83:11:a1:58:7b:aa:c0:07:4a:f3:71:2e: bd:c0:50:dc:e1:96:24:d3:d9:4e:e8:5e:0e:1a:fa:af:3f:dd: 87:40:f4:0b:d4:58:2e:c8:93:06:1d:6e:6b:04:42:47:f5:6c: 4a:be:b0:da:99:a2:94:84:ec:91:82:b3:d6:a3:98:9b:f7:ec: cc:09:60:ff:fd:f2:ec:30:7b:b9:3f:02:02:12:43:0e:55:6d: 05:75:21:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmzNtEID7DFo3z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MDRhMDllZmYtYTIxZS00MjU1LWEzZDAtZTY0OGU0ZTcwZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqmWbrVNLToIiO+RlgxD2vuAM3s+qENgD0+L yglcsmvsZ9izoKsORRF1UacfjvgvIdxQMp710umnHZhueQCUC7JVwd4yiIWwuyrg W7T+hn2Ou3NeG3GlCLVZWdRCQMiW0MpdCZUrydR6zkSYbAhoOff7JbfWWXG0M43y gnsFdzmhZoEJJGBQn1O38wBdv9/9cn8uKcVKwNeBwQxZIYznDHxPSbm7cy7pX+FN qUjVN+ia2nE+7uZHym/eyIanu7n39S8TYHFtJSVwpXjAuk1HH5XJfPPM7MO6u2bI l7SZ88p4jwfhBpWgYX6jj1vVsNnjY07hI7S/eyRXQlH0O7LZMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIWy1O+VtMAkWtGHZFzM3WUhkLIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2E0N2M1YWEtZjJkZi0z YTRjLTkyMzEtNzU5NmZmYmQzOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAplSvUkiV1UGnSeNts76DQUdqaZEtz+dRQVMr1 3HHJM5I1PmUM1YS4DPukcMWJRhNrUgnQNTpZxGxKB57aiBs4iqCKf/gPliCkg9Ji 1I5tHeltD3Di4rpA67b81lR6XIjL1FiExmH1GJy9032aUpFkxJQAZeKsekkSb2RT XA2EJkGAN5hWWxI3f7PP2OSf0H6V4ma9ho7xvaEBZ8pYDy1XS3+LLygRolWDEaFY e6rAB0rzcS69wFDc4ZYk09lO6F4OGvqvP92HQPQL1FguyJMGHW5rBEJH9WxKvrDa maKUhOyRgrPWo5ib9+zMCWD//fLsMHu5PwICEkMOVW0FdSEy -----END CERTIFICATE-----Generated at Mon Jun 30 00:19:39 2025 by rpki-client