$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa File: 574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa (raw, json) Hash identifier: +XHOkvU/04vsv3a9O76Surpkh3r7aoa/JyavYNYIbPM= Subject key identifier: 62:33:90:C6:4B:C5:EC:A6:94:A9:71:2F:E8:D1:11:95:73:CD:F0:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106C272D7C093DCE4B0600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 21313 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:6c:27:2d:7c:09:3d:ce:4b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=d43f1b68-812d-4087-8115-0d941c11dd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:1d:41:4a:dc:f9:ae:74:15:d3:98:68:3f: db:8e:a1:fb:0a:49:4b:6e:59:59:f8:78:09:50:69: 5a:91:97:77:b1:63:d0:09:59:88:27:5b:75:f5:59: 2d:4a:f2:75:95:93:9a:e3:28:d2:27:2a:67:83:57: 3e:f4:56:69:91:d2:d8:08:a1:7c:1b:14:bc:f4:dd: 74:e3:67:29:49:f8:3a:97:94:f8:4a:7e:4e:b5:8d: cf:68:b6:29:22:9b:63:60:c6:23:8e:14:ab:0b:c5: 77:a0:03:62:0f:f8:17:a8:f5:8f:30:f1:39:8f:69: 93:f6:9e:ef:60:c5:b2:e0:5b:fb:b8:9f:22:2b:91: e1:b6:de:2e:16:20:1b:02:4d:45:50:cd:25:c4:6a: 18:d6:49:88:19:3d:84:f6:57:ee:8b:7d:ef:b9:f7: 45:7c:87:f7:71:64:84:04:fe:ba:e8:ae:3d:22:43: 2f:5e:dd:65:ad:b8:f2:bd:e3:20:09:94:f5:01:d1: 54:ca:63:a2:a2:a1:6a:8e:92:66:cf:b4:7d:21:94: 89:13:0c:82:f9:02:39:39:69:e9:f8:7b:46:a0:d8: 46:76:b4:18:f6:eb:bd:30:a6:77:04:ec:0f:e6:06: 47:cf:77:d6:4c:b2:50:e0:af:b4:e7:9e:40:67:63: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:33:90:C6:4B:C5:EC:A6:94:A9:71:2F:E8:D1:11:95:73:CD:F0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b1:3e:ad:99:a9:dd:c6:3d:94:aa:57:41:52:60:0b:33:c2: d0:5c:6b:b9:c7:b1:00:c2:18:df:32:a3:7f:90:d3:1a:9c:27: 80:5c:9e:28:00:76:a6:0f:d6:e2:99:c7:fe:0a:9f:46:28:37: 5f:95:05:93:84:84:48:ca:23:dd:cc:91:7b:4e:c4:1a:48:88: f2:3b:d9:01:6c:ce:1d:4e:33:08:86:8f:e7:30:86:57:7d:4c: c5:ad:f7:69:7f:06:3f:52:9c:54:4a:a2:bc:cf:1d:fd:cd:98: fb:d3:7a:b5:6a:f1:00:a7:19:f4:d8:f3:01:1a:86:3e:b8:47: bd:09:8d:76:df:17:e2:15:3d:0a:6e:78:f5:b4:7c:72:d8:28: f9:ee:1e:0e:e7:42:0d:d2:27:95:4f:13:8b:b3:35:d3:29:e9: 0f:7a:75:a7:6e:34:a4:08:7a:e0:57:64:cb:3e:ec:b4:49:90: 03:4d:60:7d:5f:37:0c:70:63:5f:de:9f:18:5f:dc:ec:64:e9: 88:37:fc:fe:4e:97:2e:ba:66:0b:27:9a:cf:62:1d:f0:ef:8c: 65:79:1d:f4:6d:d1:30:07:14:3d:53:aa:14:f4:24:af:55:e1: 8b:aa:dd:25:e6:42:e9:d7:c1:87:e6:7a:98:0f:bd:a8:06:64: db:39:42:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGwnLXwJPc5LBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDQzZjFiNjgtODEyZC00MDg3LTgxMTUtMGQ5NDFjMTFkZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3QdQUrc+a50FdOYaD/bjqH7CklLbllZ+HgJ UGlakZd3sWPQCVmIJ1t19VktSvJ1lZOa4yjSJypng1c+9FZpkdLYCKF8GxS89N10 42cpSfg6l5T4Sn5OtY3PaLYpIptjYMYjjhSrC8V3oANiD/gXqPWPMPE5j2mT9p7v YMWy4Fv7uJ8iK5Hhtt4uFiAbAk1FUM0lxGoY1kmIGT2E9lfui33vufdFfIf3cWSE BP666K49IkMvXt1lrbjyveMgCZT1AdFUymOioqFqjpJmz7R9IZSJEwyC+QI5OWnp +HtGoNhGdrQY9uu9MKZ3BOwP5gZHz3fWTLJQ4K+0555AZ2MNrwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGIzkMZLxeymlKlxL+jREZVzzfDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc0ZTUyOGUtY2UyZC0z N2E1LWJjOTMtYTMyYzZhYWE1OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBgsT6tmandxj2UqldBUmALM8LQXGu5x7EAwhjf MqN/kNManCeAXJ4oAHamD9bimcf+Cp9GKDdflQWThIRIyiPdzJF7TsQaSIjyO9kB bM4dTjMIho/nMIZXfUzFrfdpfwY/UpxUSqK8zx39zZj703q1avEApxn02PMBGoY+ uEe9CY123xfiFT0Kbnj1tHxy2Cj57h4O50IN0ieVTxOLszXTKekPenWnbjSkCHrg V2TLPuy0SZADTWB9XzcMcGNf3p8YX9zsZOmIN/z+TpcuumYLJ5rPYh3w74xleR30 bdEwBxQ9U6oU9CSvVeGLqt0l5kLp18GH5nqYD72oBmTbOUIB -----END CERTIFICATE-----Generated at Sun Jun 29 23:33:15 2025 by rpki-client