$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa File: 58c7d010-56ad-3b1e-8476-fb1b0e916912.roa (raw, json) Hash identifier: K7RQZxhkOLL6e2JsbfzARAISXkRxme+cRyEul+8SWSA= Subject key identifier: F7:A2:85:AD:8A:AE:BB:82:4C:17:7A:F7:27:01:84:5C:64:62:3F:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A14657FC02BD68AA268DF5780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 0 IP address blocks: 2620:74:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:c0:2b:d6:8a:a2:68:df:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=81d67e2c-0676-421e-bc26-00af6c155cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:af:0f:ec:30:e6:4e:06:da:85:04:a7:b2: 1a:2e:f6:86:6b:2b:7a:f7:15:cc:89:d6:0a:63:fd: 43:c1:8d:39:04:d4:6e:d9:f6:d0:c7:94:b0:69:4c: 30:c9:a7:aa:38:bd:cb:88:d4:e4:4f:20:57:61:d2: 38:1b:52:3a:66:39:f5:10:c2:5a:b8:d8:3e:7c:ba: ae:65:55:64:9c:43:c0:03:d0:1a:32:95:01:1c:ec: 00:5f:1d:e8:16:06:f5:3d:ec:c2:8d:1c:c2:a1:5e: 70:25:b7:d1:57:23:81:9d:aa:24:15:35:8d:0e:45: 2a:71:58:0e:8a:81:d2:7c:29:89:92:48:18:45:65: 76:f2:37:ec:a2:a4:79:99:0a:b4:f9:d4:d9:87:77: 21:d7:89:26:6c:ad:8b:85:7d:48:2f:f6:64:ff:9c: 1d:00:68:bd:48:35:50:d2:f2:9b:f6:7c:ac:34:bc: d6:96:32:4e:40:e4:56:7b:7e:7d:2a:33:02:06:c7: 44:1a:e7:80:7c:03:8b:63:8a:7c:24:df:a9:39:fa: 8c:a3:52:2f:35:12:91:7d:76:c9:9d:43:ed:18:9d: 1f:98:20:77:e7:fb:48:8d:5b:df:77:cb:c4:2c:85: c1:00:00:96:21:39:26:00:ff:df:39:af:fc:60:d7: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A2:85:AD:8A:AE:BB:82:4C:17:7A:F7:27:01:84:5C:64:62:3F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ea:88:93:3b:d1:79:4b:c8:ca:23:f0:d5:55:c1:5d:05:87: 8d:11:b7:b1:92:fc:2d:c1:86:50:06:fb:66:3b:25:e2:db:5b: e5:37:2f:2e:ba:88:74:67:fc:eb:5f:e4:98:85:c8:d8:74:38: 38:00:1d:71:20:b5:92:81:35:e4:b3:e2:0a:ea:07:9e:7f:ab: ec:51:63:2d:f3:f5:24:12:c1:a4:cc:d5:07:b7:6c:c7:d5:2d: 5a:c0:02:5d:cc:0c:97:27:bf:a5:a2:88:ab:f1:02:29:bf:83: 41:40:3f:40:58:3c:35:8b:ff:aa:59:f8:2b:82:28:57:e3:9c: 40:5d:59:c8:97:c7:4b:78:0a:c1:57:dc:cf:4f:dd:ea:7d:8a: a3:6a:0b:02:5d:7f:2e:ce:ec:ef:eb:c5:a6:01:1b:cb:6c:3c: fc:dc:a7:d1:87:96:3e:c2:3f:12:7b:31:b0:89:45:96:21:82: 9e:a0:3c:23:c8:dc:74:86:68:29:7b:23:f4:1d:32:d8:9a:5b: 34:ff:bb:31:e0:7b:f7:b0:01:9e:f4:ef:05:c9:ed:98:1b:f5: 94:41:23:9a:6f:ae:70:cd:a8:19:97:09:75:2c:7a:c3:47:71: 8e:0b:85:2b:08:22:3d:44:87:1d:5e:b2:c7:74:73:fe:69:67: 28:ac:13:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZX/AK9aKomjfV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODFkNjdlMmMtMDY3Ni00MjFlLWJjMjYtMDBhZjZjMTU1Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw+vD+ww5k4G2oUEp7IaLvaGayt69xXMidYK Y/1DwY05BNRu2fbQx5SwaUwwyaeqOL3LiNTkTyBXYdI4G1I6Zjn1EMJauNg+fLqu ZVVknEPAA9AaMpUBHOwAXx3oFgb1PezCjRzCoV5wJbfRVyOBnaokFTWNDkUqcVgO ioHSfCmJkkgYRWV28jfsoqR5mQq0+dTZh3ch14kmbK2LhX1IL/Zk/5wdAGi9SDVQ 0vKb9nysNLzWljJOQORWe359KjMCBsdEGueAfAOLY4p8JN+pOfqMo1IvNRKRfXbJ nUPtGJ0fmCB35/tIjVvfd8vELIXBAACWITkmAP/fOa/8YNdw3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPeiha2KrruCTBd69ycBhFxkYj+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNThjN2QwMTAtNTZhZC0z YjFlLTg0NzYtZmIxYjBlOTE2OTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3qiJM70XlLyMoj8NVVwV0Fh40Rt7GS/C3BhlAG+2Y7JeLbW+U3 Ly66iHRn/Otf5JiFyNh0ODgAHXEgtZKBNeSz4grqB55/q+xRYy3z9SQSwaTM1Qe3 bMfVLVrAAl3MDJcnv6WiiKvxAim/g0FAP0BYPDWL/6pZ+CuCKFfjnEBdWciXx0t4 CsFX3M9P3ep9iqNqCwJdfy7O7O/rxaYBG8tsPPzcp9GHlj7CPxJ7MbCJRZYhgp6g PCPI3HSGaCl7I/QdMtiaWzT/uzHge/ewAZ707wXJ7Zgb9ZRBI5pvrnDNqBmXCXUs esNHcY4LhSsIIj1Ehx1essd0c/5pZyisE/8= -----END CERTIFICATE-----Generated at Mon Jun 30 18:31:19 2025 by rpki-client