$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e6b8549-3732-398d-9411-43a3f7bd37a6.roa File: 5e6b8549-3732-398d-9411-43a3f7bd37a6.roa (raw, json) Hash identifier: 2QxP5Fr5F3nudOSPrPVq7Vzm2U+z5LN9sY3pHTnLmyI= Subject key identifier: 41:FA:2E:71:B9:5C:AD:27:83:EA:51:AE:7D:AB:EB:47:48:A3:5E:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A97749E85469605198500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e6b8549-3732-398d-9411-43a3f7bd37a6.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396544 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:97:74:9e:85:46:96:05:19:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=b4eaa8a8-339c-4e3a-b6b4-171c25bd3746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:b1:c5:ba:71:6f:40:ab:8f:73:2d:14:23: e6:19:7d:05:51:08:88:9e:29:f5:d8:b3:51:88:a5: ce:00:a7:e6:ff:52:2c:03:b8:22:8e:9f:d5:06:f8: 1c:c4:9a:1d:f4:af:95:9f:b8:64:a4:60:9a:92:ed: 70:7b:19:63:a0:78:9e:f4:57:fd:d5:db:d9:6a:5d: 23:82:27:cb:bc:78:ca:17:e3:51:43:e5:0c:77:9a: 48:17:46:17:07:4f:9c:16:a4:92:cf:75:04:cd:4b: a8:b8:82:ea:21:c8:34:9b:be:59:d0:ca:0f:16:d8: 49:7f:be:f8:d4:63:63:aa:c6:13:c0:d0:30:70:9a: 54:50:93:fd:31:9a:0a:25:10:d3:21:76:4d:aa:14: 85:87:8e:31:f8:68:2a:c1:ac:54:55:d7:0f:d2:e3: c0:f1:97:84:c8:8f:72:ad:ae:38:f8:dd:7d:4c:ec: f1:84:54:b2:ae:48:f6:04:03:7e:93:b0:02:9e:6e: d5:6b:b1:dc:8f:d5:56:04:86:b3:65:42:0c:02:8d: 23:46:15:55:ba:2b:fe:03:f0:3e:b0:30:ce:58:17: 44:f6:52:ce:9a:1a:75:d7:6a:6b:45:01:f6:23:07: 5a:72:8b:ea:61:41:f2:fc:1b:8f:9a:f3:d3:5d:ed: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:2E:71:B9:5C:AD:27:83:EA:51:AE:7D:AB:EB:47:48:A3:5E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e6b8549-3732-398d-9411-43a3f7bd37a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8f:c2:fe:b4:12:9f:09:75:fb:54:91:96:62:24:58:56:b2: 05:1a:ea:e8:3e:15:df:c7:0f:dd:36:fb:61:d2:47:a1:e6:9d: b3:5f:28:79:8b:f0:fa:55:37:73:4b:46:00:58:68:81:70:f7: 8f:7a:6f:26:cf:6c:27:b4:1f:79:0e:19:90:aa:a0:40:e2:16: b3:49:5f:2c:db:3a:9c:c9:0f:23:51:4d:45:f7:cf:48:23:7b: d1:4b:59:3e:09:15:ac:0f:10:4c:da:23:f7:08:1d:c9:f7:cf: 85:8f:1f:8d:74:d8:ae:85:3f:7f:4e:e4:7a:19:1c:75:f2:c4: 0b:62:2c:c4:da:86:da:14:9a:22:27:fa:b5:8e:1e:1d:c6:44: 7d:6d:2c:1a:50:2a:25:b8:8e:c8:97:00:b9:61:1f:ea:c9:45: 10:40:d9:50:2f:3b:58:3a:dc:d9:c5:68:14:0c:09:1b:65:48: 34:16:dc:7c:a9:56:96:8c:cc:1d:e5:6d:f0:d3:24:ef:af:6c: 3b:b6:ee:60:fa:09:fa:98:30:5a:47:67:dc:56:f4:f2:ad:3a: 30:dc:2b:88:3b:c0:ca:27:6c:38:00:c9:6c:8f:b8:de:46:12: a7:e4:01:66:3f:42:ec:38:26:90:2e:c6:f1:80:d7:33:43:bd: b5:aa:4b:d1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epd0noVGlgUZhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YjRlYWE4YTgtMzM5Yy00ZTNhLWI2YjQtMTcxYzI1YmQzNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorixxbpxb0Crj3MtFCPmGX0FUQiInin12LNR iKXOAKfm/1IsA7gijp/VBvgcxJod9K+Vn7hkpGCaku1wexljoHie9Ff91dvZal0j gifLvHjKF+NRQ+UMd5pIF0YXB0+cFqSSz3UEzUuouILqIcg0m75Z0MoPFthJf774 1GNjqsYTwNAwcJpUUJP9MZoKJRDTIXZNqhSFh44x+GgqwaxUVdcP0uPA8ZeEyI9y ra44+N19TOzxhFSyrkj2BAN+k7ACnm7Va7Hcj9VWBIazZUIMAo0jRhVVuiv+A/A+ sDDOWBdE9lLOmhp112prRQH2IwdacovqYUHy/BuPmvPTXe2opQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEH6LnG5XK0ng+pRrn2r60dIo14MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWU2Yjg1NDktMzczMi0z OThkLTk0MTEtNDNhM2Y3YmQzN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXj8L+tBKfCXX7VJGWYiRYVrIFGuroPhXfxw/d Nvth0keh5p2zXyh5i/D6VTdzS0YAWGiBcPePem8mz2wntB95DhmQqqBA4hazSV8s 2zqcyQ8jUU1F989II3vRS1k+CRWsDxBM2iP3CB3J98+Fjx+NdNiuhT9/TuR6GRx1 8sQLYizE2obaFJoiJ/q1jh4dxkR9bSwaUColuI7IlwC5YR/qyUUQQNlQLztYOtzZ xWgUDAkbZUg0Ftx8qVaWjMwd5W3w0yTvr2w7tu5g+gn6mDBaR2fcVvTyrTow3CuI O8DKJ2w4AMlsj7jeRhKn5AFmP0LsOCaQLsbxgNczQ721qkvR -----END CERTIFICATE-----Generated at Mon Jun 30 11:38:22 2025 by rpki-client