$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e10990d-802a-331a-8309-39cdc5aa1189.roa File: 3e10990d-802a-331a-8309-39cdc5aa1189.roa (raw, json) Hash identifier: DaXJVpc8N7EnDsEAPiSQ4Abt2gRZ1pefu/IfgznBHys= Subject key identifier: 0C:B6:E2:42:55:98:CC:51:26:B2:C7:26:A7:8B:76:B2:8C:28:FD:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411068598960CDE25C989CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e10990d-802a-331a-8309-39cdc5aa1189.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 397199 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:68:59:89:60:cd:e2:5c:98:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=7ec85fab-24b8-46d7-90ed-cd4ab85f4bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:b8:8d:12:5c:4c:f2:af:6a:c0:84:00:4d: cc:cc:12:9d:f7:5f:b2:76:ad:79:31:39:d1:dc:c7: 1b:c3:79:8c:68:0a:48:c1:f9:2f:b0:67:0a:85:05: 85:8a:76:32:f2:98:7c:5c:60:3f:09:1d:79:5f:6a: f1:50:5e:6b:7a:cc:18:1d:d2:d3:b0:99:2f:51:77: 79:d7:ea:55:75:09:38:d5:22:2a:b8:3e:61:5e:06: 44:d8:3b:a6:1e:da:81:a9:d8:22:d6:26:12:95:f4: d3:83:98:29:bb:47:c4:73:e1:a6:b1:63:53:d0:f3: 1c:77:b9:45:2f:8a:9b:22:2c:3c:3b:2e:1e:0c:d6: 85:1b:3f:9a:5f:6c:b9:ac:30:3b:59:9f:b3:f9:1e: fe:14:4f:5e:fc:95:ee:24:c7:41:da:35:c2:da:e5: 0c:ca:7e:bb:5d:f9:d8:3a:67:2f:eb:78:ae:b4:c5: b9:b6:5e:7b:79:d0:76:66:71:23:db:db:f3:35:6f: b3:3f:8d:aa:25:6a:e8:00:a0:21:c8:62:8c:53:f5: 92:3a:64:ab:b3:b1:61:21:65:93:a6:af:01:6c:92: ef:78:a0:20:f3:07:e0:4d:fa:6b:a2:77:8f:5e:b8: 5b:8a:06:2c:fa:9c:f0:26:f8:7c:b8:e2:16:51:00: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B6:E2:42:55:98:CC:51:26:B2:C7:26:A7:8B:76:B2:8C:28:FD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e10990d-802a-331a-8309-39cdc5aa1189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:41:58:ef:1a:54:97:85:83:21:20:08:ab:c4:01:95:f7:2d: e5:31:59:60:cb:2d:fe:ae:0d:72:92:73:11:3f:21:5a:02:46: 68:d3:e5:a5:84:49:70:c9:92:a5:23:17:f0:62:90:b3:36:67: 0b:d9:f9:f6:e5:56:2c:b9:00:f3:a9:c4:01:54:5d:f0:9a:8c: ec:54:68:c0:3c:42:b4:4e:f2:4f:e0:fc:29:67:84:8b:fb:f3: 56:df:ea:27:62:b5:55:38:5d:e3:3f:62:95:e0:1a:a6:c8:53: 71:88:ad:fb:e5:2e:10:d4:68:9c:06:7a:df:dd:1e:99:7e:06: 53:c3:d4:6f:88:ef:dd:11:90:35:6e:9a:4b:dc:fc:51:ae:68: e9:1e:95:55:d5:29:a8:26:5d:3f:ba:0c:57:74:e2:2f:69:2d: 0e:1e:4f:9f:0d:f9:c8:e0:16:15:b7:e1:ed:59:2a:99:ca:f6: a9:22:cf:46:a0:8d:7d:8b:06:ef:23:6d:09:72:2a:52:b5:ee: 6c:07:fc:70:bd:d4:a1:38:38:f3:56:6e:c4:cb:0f:2c:22:11: af:fc:96:9f:62:ca:d5:43:cb:d5:42:af:8a:31:8a:2a:d8:26: 1b:e3:d7:96:c6:31:30:c9:88:31:0d:97:d0:de:98:5a:b9:76: 69:9c:c3:35 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGhZiWDN4lyYnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk N2VjODVmYWItMjRiOC00NmQ3LTkwZWQtY2Q0YWI4NWY0YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0a4jRJcTPKvasCEAE3MzBKd91+ydq15MTnR 3Mcbw3mMaApIwfkvsGcKhQWFinYy8ph8XGA/CR15X2rxUF5reswYHdLTsJkvUXd5 1+pVdQk41SIquD5hXgZE2DumHtqBqdgi1iYSlfTTg5gpu0fEc+GmsWNT0PMcd7lF L4qbIiw8Oy4eDNaFGz+aX2y5rDA7WZ+z+R7+FE9e/JXuJMdB2jXC2uUMyn67XfnY Omcv63iutMW5tl57edB2ZnEj29vzNW+zP42qJWroAKAhyGKMU/WSOmSrs7FhIWWT pq8BbJLveKAg8wfgTfpronePXrhbigYs+pzwJvh8uOIWUQDaEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAy24kJVmMxRJrLHJqeLdrKMKP2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2UxMDk5MGQtODAyYS0z MzFhLTgzMDktMzljZGM1YWExMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPQVjvGlSXhYMhIAirxAGV9y3lMVlgyy3+rg1y knMRPyFaAkZo0+WlhElwyZKlIxfwYpCzNmcL2fn25VYsuQDzqcQBVF3wmozsVGjA PEK0TvJP4PwpZ4SL+/NW3+onYrVVOF3jP2KV4BqmyFNxiK375S4Q1GicBnrf3R6Z fgZTw9RviO/dEZA1bppL3PxRrmjpHpVV1SmoJl0/ugxXdOIvaS0OHk+fDfnI4BYV t+HtWSqZyvapIs9GoI19iwbvI20JcipSte5sB/xwvdShODjzVm7Eyw8sIhGv/Jaf YsrVQ8vVQq+KMYoq2CYb49eWxjEwyYgxDZfQ3phauXZpnMM1 -----END CERTIFICATE-----Generated at Tue Jul 1 03:04:32 2025 by rpki-client