$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/518e3b9a-5635-355b-8a40-3467e68d7e88.roa File: 518e3b9a-5635-355b-8a40-3467e68d7e88.roa (raw, json) Hash identifier: wibC/yCX8WcmbskyVwyBB4v5/IPo+ZrkJXyFoeyUkuY= Subject key identifier: 11:C7:2D:5E:D6:AF:52:8F:7D:9A:B1:46:5F:A3:A8:81:1E:75:C8:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411067BBC648F36E46F64B44 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/518e3b9a-5635-355b-8a40-3467e68d7e88.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396617 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:67:bb:c6:48:f3:6e:46:f6:4b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=db3a218c-8994-4f07-a7bc-7c923cd0b5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:01:2b:48:bf:10:f5:aa:5e:cd:9a:f1:a9: 99:fe:50:d5:55:36:2f:19:29:29:17:43:b0:86:70: 6a:53:14:25:8a:4a:8c:2f:0f:2c:5d:36:ad:65:61: 24:ad:1d:32:fe:99:e0:4d:7b:77:9c:e1:2e:5b:5c: 8d:88:3f:32:cc:86:50:29:9e:c0:a5:38:09:73:68: 26:70:04:2c:34:51:cd:41:1a:bd:f8:9a:e7:ac:d8: a7:e1:9c:82:ec:23:bc:d2:bf:79:36:34:e2:c1:cb: e8:d5:d6:9c:33:b1:37:4a:db:94:3d:e4:6c:f5:f2: 83:60:ad:0d:ae:ab:e7:84:62:ff:92:a1:09:5b:25: 0d:b2:1a:02:c8:df:5a:10:8b:48:74:1d:e2:9f:75: 26:c7:b7:28:f7:ec:e0:7d:5c:1c:2e:0e:67:0c:5c: 10:0f:f6:f6:c3:92:83:bb:15:c8:9c:73:a7:a2:2d: 36:ef:ef:ba:3b:b8:69:b7:85:ed:3f:57:21:ca:e6: d6:52:b8:b0:8f:20:7f:d3:5d:16:8b:86:96:32:88: 98:f8:55:96:c4:32:6b:ca:79:e0:f9:fa:f4:16:95: 38:3a:16:0d:c7:d5:2b:5a:1b:6c:4e:36:69:a0:56: a5:64:8f:b6:ec:fb:69:53:49:b1:68:32:8d:46:fe: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C7:2D:5E:D6:AF:52:8F:7D:9A:B1:46:5F:A3:A8:81:1E:75:C8:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/518e3b9a-5635-355b-8a40-3467e68d7e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ee:54:d7:80:bd:13:7e:6f:83:54:e1:66:66:c9:18:2b:66: ae:5d:88:5a:45:3c:37:0a:fb:5c:45:fb:a5:4a:c6:f5:50:de: cd:e6:03:ae:a6:7e:15:5f:21:10:9b:cd:96:47:e6:35:9c:14: 99:05:dd:a6:a3:46:6c:9d:d7:6b:f9:a4:84:ab:c8:ea:db:13: 56:b1:17:72:e5:da:7d:fe:1e:92:73:69:6a:86:7e:45:d9:33: 77:e1:c4:14:04:cf:92:51:c9:92:c4:28:08:4a:f5:72:50:05: 06:87:c4:27:1c:e3:87:46:ed:f1:54:0b:72:96:e8:5a:ff:67: 74:ab:6b:ba:e7:0d:7a:44:28:9a:ad:8d:82:32:6e:09:99:58: 5c:07:61:cb:a0:64:02:d6:89:98:19:74:10:57:ed:84:0e:79: af:11:d6:5a:c5:06:9c:27:44:b6:14:8b:55:4e:86:65:09:80: c4:a9:a7:b1:b2:65:63:c6:c2:8b:76:c3:50:8f:08:43:06:25: ca:5b:ba:63:9c:ea:83:84:04:b9:19:92:9b:85:9a:55:7f:59: bb:3c:2e:6d:19:0a:cc:4f:9d:bf:13:bb:3a:e5:7d:99:e5:0e: c1:e5:8a:f5:4e:0e:80:1a:d8:8c:31:ec:b8:75:69:fe:93:62: 66:f8:8f:97 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGe7xkjzbkb2S0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZGIzYTIxOGMtODk5NC00ZjA3LWE3YmMtN2M5MjNjZDBiNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluMBK0i/EPWqXs2a8amZ/lDVVTYvGSkpF0Ow hnBqUxQlikqMLw8sXTatZWEkrR0y/pngTXt3nOEuW1yNiD8yzIZQKZ7ApTgJc2gm cAQsNFHNQRq9+JrnrNin4ZyC7CO80r95NjTiwcvo1dacM7E3StuUPeRs9fKDYK0N rqvnhGL/kqEJWyUNshoCyN9aEItIdB3in3Umx7co9+zgfVwcLg5nDFwQD/b2w5KD uxXInHOnoi027++6O7hpt4XtP1chyubWUriwjyB/010Wi4aWMoiY+FWWxDJrynng +fr0FpU4OhYNx9UrWhtsTjZpoFalZI+27PtpU0mxaDKNRv6WKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBHHLV7Wr1KPfZqxRl+jqIEedchGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTE4ZTNiOWEtNTYzNS0z NTViLThhNDAtMzQ2N2U2OGQ3ZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB/7lTXgL0Tfm+DVOFmZskYK2auXYhaRTw3Cvtc RfulSsb1UN7N5gOupn4VXyEQm82WR+Y1nBSZBd2mo0Zsnddr+aSEq8jq2xNWsRdy 5dp9/h6Sc2lqhn5F2TN34cQUBM+SUcmSxCgISvVyUAUGh8QnHOOHRu3xVAtyluha /2d0q2u65w16RCiarY2CMm4JmVhcB2HLoGQC1omYGXQQV+2EDnmvEdZaxQacJ0S2 FItVToZlCYDEqaexsmVjxsKLdsNQjwhDBiXKW7pjnOqDhAS5GZKbhZpVf1m7PC5t GQrMT52/E7s65X2Z5Q7B5Yr1Tg6AGtiMMey4dWn+k2Jm+I+X -----END CERTIFICATE-----Generated at Mon Jun 30 19:50:13 2025 by rpki-client