$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bd5557d-5d6a-3f5b-b41e-7344995f18c1.roa File: 4bd5557d-5d6a-3f5b-b41e-7344995f18c1.roa (raw, json) Hash identifier: KWBmF0+DA+BAlfDuPmVtTHwMsQjq+oUsVXCRyqrovZM= Subject key identifier: 16:31:5A:45:4D:7C:5B:3B:B5:9E:F8:32:B8:EC:76:10:71:DC:6F:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106BFBCE0481916A09D480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bd5557d-5d6a-3f5b-b41e-7344995f18c1.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396565 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:6b:fb:ce:04:81:91:6a:09:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=04aa32c5-65e9-451b-9976-bcae791a1506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:58:66:4c:81:62:76:47:4e:ea:84:3d:47: fd:12:0f:64:44:c3:0c:6a:ef:88:a3:53:68:28:34: 53:40:d4:98:f2:97:57:ce:b4:af:84:5a:ed:f3:77: 1f:76:0d:12:38:b8:62:55:bc:26:93:d2:40:5c:89: 14:ab:97:ce:4e:a9:9a:5e:10:0f:ab:16:b0:86:0f: 1a:39:35:bc:fe:ef:a9:1d:35:ea:90:83:ad:7e:3b: 82:fb:6b:cf:81:14:a1:24:3b:4f:0f:91:50:c9:48: dd:57:63:03:2f:8e:dc:e7:57:85:bc:3f:e8:9f:82: 2d:83:1e:04:a8:be:77:d3:d6:c7:55:70:22:88:14: 27:87:b3:12:eb:6c:8b:04:3f:4a:6c:ba:e1:7e:2d: 6d:30:0f:6b:8d:8a:7c:e9:78:1b:15:b3:27:32:af: 69:9e:ac:fb:e0:45:20:cf:ec:49:0d:66:3a:85:9f: 6a:1d:75:47:37:7d:c6:37:7c:61:14:0e:bd:9d:0e: 80:53:ed:d2:0e:fb:79:63:af:56:42:1e:e4:7a:1d: b3:c0:1d:c9:45:2f:42:e9:84:3f:76:c4:fb:26:c7: 59:c5:99:3a:67:fd:d3:8e:d2:b8:7e:12:54:8f:bf: 41:f9:a2:e2:23:91:46:f3:68:ab:a5:2a:48:62:07: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:31:5A:45:4D:7C:5B:3B:B5:9E:F8:32:B8:EC:76:10:71:DC:6F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bd5557d-5d6a-3f5b-b41e-7344995f18c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d5:3d:5d:d1:ef:40:8e:c6:a2:da:2f:dd:8a:07:8d:ac:f6: f8:28:a3:36:b5:df:71:55:25:01:b2:29:be:57:28:e9:12:4d: 63:f7:40:57:5b:c9:32:e2:0e:fd:13:30:c6:5b:1e:f7:08:a7: 51:1d:2c:21:31:13:6d:cc:82:35:c3:17:fe:52:78:da:77:61: bd:7b:00:99:55:34:57:aa:29:8f:94:45:d7:6a:c7:a0:15:b6: ef:b4:3e:77:f8:27:63:db:8b:d5:40:df:9c:49:83:9c:fc:f9: 53:4d:bf:01:da:01:3d:15:6a:0e:8e:e9:28:1c:f0:49:8d:06: ac:04:e0:7c:d7:7d:bd:ad:d3:e6:69:4e:69:cc:a8:a1:e9:69: 99:fe:02:44:a0:cb:48:01:b5:80:45:8d:33:85:7b:2e:27:82: 34:2e:c0:9b:7d:80:17:59:e0:28:82:f8:a7:ef:46:21:44:ea: d3:3b:e9:65:c7:10:44:0e:9a:bd:9e:f0:f7:77:0b:28:d2:40: 68:d9:a2:04:12:6a:c8:4b:51:8c:3d:00:1b:a2:94:96:7c:4c: 8b:a2:56:98:ea:bb:ec:98:c8:f2:f1:a9:94:b0:aa:b1:90:95: 26:a1:08:f0:4e:0a:14:e5:cb:5b:f0:8d:94:35:8f:72:6d:b6: 41:93:98:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGv7zgSBkWoJ1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MDRhYTMyYzUtNjVlOS00NTFiLTk5NzYtYmNhZTc5MWExNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoytYZkyBYnZHTuqEPUf9Eg9kRMMMau+Io1No KDRTQNSY8pdXzrSvhFrt83cfdg0SOLhiVbwmk9JAXIkUq5fOTqmaXhAPqxawhg8a OTW8/u+pHTXqkIOtfjuC+2vPgRShJDtPD5FQyUjdV2MDL47c51eFvD/on4Itgx4E qL5309bHVXAiiBQnh7MS62yLBD9KbLrhfi1tMA9rjYp86XgbFbMnMq9pnqz74EUg z+xJDWY6hZ9qHXVHN33GN3xhFA69nQ6AU+3SDvt5Y69WQh7keh2zwB3JRS9C6YQ/ dsT7JsdZxZk6Z/3TjtK4fhJUj79B+aLiI5FG82irpSpIYgfZsQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBYxWkVNfFs7tZ74MrjsdhBx3G/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGJkNTU1N2QtNWQ2YS0z ZjViLWI0MWUtNzM0NDk5NWYxOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAP1T1d0e9Ajsai2i/digeNrPb4KKM2td9xVSUB sim+VyjpEk1j90BXW8ky4g79EzDGWx73CKdRHSwhMRNtzII1wxf+Unjad2G9ewCZ VTRXqimPlEXXasegFbbvtD53+Cdj24vVQN+cSYOc/PlTTb8B2gE9FWoOjukoHPBJ jQasBOB81329rdPmaU5pzKih6WmZ/gJEoMtIAbWARY0zhXsuJ4I0LsCbfYAXWeAo gvin70YhROrTO+llxxBEDpq9nvD3dwso0kBo2aIEEmrIS1GMPQAbopSWfEyLolaY 6rvsmMjy8amUsKqxkJUmoQjwTgoU5ctb8I2UNY9ybbZBk5hW -----END CERTIFICATE-----Generated at Mon Jun 30 10:47:29 2025 by rpki-client