$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aed4f07-4217-361a-a1b5-9af640dcafb1.roa File: 5aed4f07-4217-361a-a1b5-9af640dcafb1.roa (raw, json) Hash identifier: htxS7hsn9iuKd8cOvtGEE9YwmDDGbOf7uAHhPBTgEKA= Subject key identifier: 97:A9:F8:12:11:A0:A0:0B:CE:F1:BF:7A:92:64:1B:96:A4:43:59:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106A53DDB55AA25D5E07C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aed4f07-4217-361a-a1b5-9af640dcafb1.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396555 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:6a:53:dd:b5:5a:a2:5d:5e:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=ec55b31e-8d26-4d3e-9cff-52079e827b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:d8:c4:e4:30:6e:c1:7a:67:a2:53:9a:4b: 3c:fc:a2:43:5a:2a:6c:c7:dd:a2:34:11:63:38:b8: 63:cd:83:cf:9a:bb:f6:c7:d5:07:3c:eb:a0:d4:46: 4a:e0:46:5f:c9:05:f8:4f:9d:fc:5e:09:96:7a:b6: 02:0f:da:fc:29:25:b7:c7:7b:75:b0:67:83:ba:ea: 8b:9c:7a:1f:90:89:c6:62:e8:f5:a5:92:da:0f:20: f0:b1:03:d7:2f:0e:6e:16:bc:b8:e1:cb:e6:e3:96: 8a:5e:18:35:3d:f7:ad:5d:52:f1:68:65:c8:53:ae: af:bb:ab:28:af:f6:16:48:49:86:99:5c:0d:e8:cb: b9:fd:97:d3:67:31:b2:8f:9f:25:48:b1:5a:a7:c0: ec:de:be:fe:70:23:42:6a:16:8a:d3:05:29:28:4b: f2:4a:d6:6f:cf:1f:58:42:e4:f7:6d:2c:8e:99:4e: 6e:b2:78:f3:a6:d2:6e:40:32:25:77:be:65:b4:0f: 65:d8:21:25:c5:77:0c:d6:77:d5:62:29:4b:e9:49: a4:81:3f:38:14:9b:a8:56:24:ed:d4:86:e7:04:eb: 24:09:ff:c9:32:8e:98:df:04:49:72:e3:91:b7:d7: cd:2a:73:b1:31:d3:7c:ea:6b:62:a7:ba:d7:71:7e: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A9:F8:12:11:A0:A0:0B:CE:F1:BF:7A:92:64:1B:96:A4:43:59:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aed4f07-4217-361a-a1b5-9af640dcafb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2a:55:8d:90:26:88:5e:e3:4a:9d:53:34:1f:12:f2:a2:c0: e0:78:dd:ea:3e:ae:51:e3:02:f9:ae:9c:57:67:49:3b:75:49: 2e:20:67:7b:93:d9:03:25:0d:91:3b:21:0f:00:36:d4:91:57: bc:24:dc:ad:d6:2a:78:e1:e1:8e:c5:c5:a5:95:23:2c:e9:91: 32:55:d0:61:5a:3c:a6:84:df:8c:ca:99:6b:1b:26:f5:52:88: 89:d5:73:25:5d:5a:c5:8c:72:11:7e:36:b9:a9:3a:61:6e:48: 58:24:61:2c:df:d9:6b:ff:74:b5:ee:fd:bc:6b:38:bc:3f:f5: 1a:a2:f4:6d:90:e7:22:00:ad:11:89:36:d0:3c:ce:a8:b2:c1: f9:46:9a:48:42:04:b0:61:99:8c:70:22:bf:e4:c8:38:ee:63: c2:a8:43:8b:ab:d9:87:f9:2f:24:39:84:3d:a8:4a:0d:01:4c: c6:07:ba:40:b4:ac:80:a9:d4:ff:73:01:e4:e1:56:a5:ea:2b: dd:ec:46:b9:b0:ff:36:a3:da:82:8c:8f:17:8c:1e:68:9b:74: f3:4d:72:e6:9c:27:2b:cc:07:ec:6c:77:b7:f0:17:98:ef:64: 6c:4b:f6:aa:2f:7b:e7:9c:43:3a:fc:e3:df:ff:6a:f9:4e:74: 04:44:f8:85 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGpT3bVaol1eB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZWM1NWIzMWUtOGQyNi00ZDNlLTljZmYtNTIwNzllODI3YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXXYxOQwbsF6Z6JTmks8/KJDWipsx92iNBFj OLhjzYPPmrv2x9UHPOug1EZK4EZfyQX4T538XgmWerYCD9r8KSW3x3t1sGeDuuqL nHofkInGYuj1pZLaDyDwsQPXLw5uFry44cvm45aKXhg1PfetXVLxaGXIU66vu6so r/YWSEmGmVwN6Mu5/ZfTZzGyj58lSLFap8Ds3r7+cCNCahaK0wUpKEvyStZvzx9Y QuT3bSyOmU5usnjzptJuQDIld75ltA9l2CElxXcM1nfVYilL6UmkgT84FJuoViTt 1IbnBOskCf/JMo6Y3wRJcuORt9fNKnOxMdN86mtip7rXcX5AYQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJep+BIRoKALzvG/epJkG5akQ1m9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFlZDRmMDctNDIxNy0z NjFhLWExYjUtOWFmNjQwZGNhZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvKlWNkCaIXuNKnVM0HxLyosDgeN3qPq5R4wL5 rpxXZ0k7dUkuIGd7k9kDJQ2ROyEPADbUkVe8JNyt1ip44eGOxcWllSMs6ZEyVdBh WjymhN+MyplrGyb1UoiJ1XMlXVrFjHIRfja5qTphbkhYJGEs39lr/3S17v28azi8 P/UaovRtkOciAK0RiTbQPM6ossH5RppIQgSwYZmMcCK/5Mg47mPCqEOLq9mH+S8k OYQ9qEoNAUzGB7pAtKyAqdT/cwHk4Val6ivd7Ea5sP82o9qCjI8XjB5om3TzTXLm nCcrzAfsbHe38BeY72RsS/aqL3vnnEM6/OPf/2r5TnQERPiF -----END CERTIFICATE-----Generated at Sun Jun 29 16:37:47 2025 by rpki-client