$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87c60395-35c3-3b88-95f4-8c8629761fdb.roa File: 87c60395-35c3-3b88-95f4-8c8629761fdb.roa (raw, json) Hash identifier: DkyVBlF6N/lR2sY1WFe/huXJLk+rRGh9FfWSEOOUMNw= Subject key identifier: C1:E5:4A:F6:EF:30:53:72:1A:57:23:34:DC:B6:BE:F1:63:CE:9B:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A3FAADE9D031968A45C7F7080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87c60395-35c3-3b88-95f4-8c8629761fdb.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 396828 IP address blocks: 2620:74:92::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:de:9d:03:19:68:a4:5c:7f:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=c51252b2-ea15-4086-b804-c3d7590f5236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:a4:f0:11:22:66:1d:65:1c:a3:1f:75:dc: 7c:1f:d6:7c:17:18:a1:46:68:16:10:e5:ed:01:7f: 3a:4d:8a:e3:59:c7:22:e7:79:c0:d8:d9:5e:b5:8b: d5:83:19:22:da:ab:8d:fd:cf:99:8d:ce:01:11:74: 16:c8:d8:c8:1b:7b:90:5e:97:bf:d4:80:9a:7f:db: d2:3e:c0:76:63:5a:47:1b:96:19:91:4d:93:e3:7a: 79:fa:83:52:78:85:d5:3b:5b:92:42:a3:73:7e:2e: 78:84:8c:12:fc:bf:ff:2e:78:2d:69:55:e7:00:68: 37:fa:15:80:cf:8c:c6:5b:9f:9a:cb:2a:33:28:49: f9:14:10:57:f8:1f:07:6a:62:2f:47:b5:f2:69:a7: 1e:7e:ca:e3:c6:7e:99:ab:ec:6d:23:eb:1b:50:06: f1:ab:f4:ba:65:7a:d3:cb:df:81:de:f6:97:ac:14: 4c:95:86:3d:ec:0a:fb:c3:f6:04:12:24:30:62:de: 0b:5d:d6:11:43:dd:32:ba:ed:50:4a:b6:da:38:e7: 00:56:8d:dd:e6:f1:9f:08:b0:39:7f:2e:e1:fa:60: de:05:2d:54:1a:7a:85:7c:2b:0b:25:71:e1:ac:9d: 8c:ce:76:72:94:da:b6:45:e8:5a:5a:09:79:1b:49: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:4A:F6:EF:30:53:72:1A:57:23:34:DC:B6:BE:F1:63:CE:9B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87c60395-35c3-3b88-95f4-8c8629761fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:92::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:83:a5:fa:24:98:65:67:b5:c9:cf:36:30:11:79:d5:da:2e: 92:68:a1:7f:cc:0d:86:de:64:08:ad:bd:6b:46:3c:ad:ee:d0: 99:90:f9:d0:4b:4b:4d:8d:c3:bf:60:1f:05:85:85:95:7b:ac: ea:8c:e2:7d:a2:c5:8d:6d:41:9a:b8:0c:08:3f:1d:86:68:39: 70:2b:d6:72:27:b7:e6:e4:21:0d:c5:e3:e9:ab:32:55:56:1f: 15:54:80:d6:11:6e:ca:01:45:1f:03:50:64:28:11:7f:54:b6: b6:dc:cc:d0:70:40:94:66:b1:dc:e4:44:b1:71:da:5a:91:9f: a3:70:95:bb:ca:a0:54:5d:ad:33:85:89:aa:82:e4:01:2d:22: fc:05:05:81:19:51:31:ff:a6:d3:6e:de:ce:2c:ed:06:b3:cc: 98:54:14:49:ea:7a:ab:d9:ff:5b:3f:17:d9:aa:6d:9b:ce:f5: 6e:3d:78:d0:8d:2d:fd:26:86:6d:9e:97:7d:cd:cd:37:15:f2: 17:96:f6:6d:7c:52:ca:c4:f0:9c:d7:0a:9a:15:e0:38:79:15: 17:0b:6f:ec:c3:3a:d8:e0:f0:8a:ae:d3:ad:2c:a2:88:f7:c4: d5:a1:06:ca:e9:1a:97:6f:8e:f8:6d:6b:c0:9c:be:81:42:4a: fe:5c:22:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo/qt6dAxlopFx/cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk YzUxMjUyYjItZWExNS00MDg2LWI4MDQtYzNkNzU5MGY1MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Ck8BEiZh1lHKMfddx8H9Z8FxihRmgWEOXt AX86TYrjWcci53nA2NletYvVgxki2quN/c+Zjc4BEXQWyNjIG3uQXpe/1ICaf9vS PsB2Y1pHG5YZkU2T43p5+oNSeIXVO1uSQqNzfi54hIwS/L//LngtaVXnAGg3+hWA z4zGW5+ayyozKEn5FBBX+B8HamIvR7Xyaacefsrjxn6Zq+xtI+sbUAbxq/S6ZXrT y9+B3vaXrBRMlYY97Ar7w/YEEiQwYt4LXdYRQ90yuu1QSrbaOOcAVo3d5vGfCLA5 fy7h+mDeBS1UGnqFfCsLJXHhrJ2MznZylNq2RehaWgl5G0kAIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHlSvbvMFNyGlcjNNy2vvFjzptjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdjNjAzOTUtMzVjMy0z Yjg4LTk1ZjQtOGM4NjI5NzYxZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaDpfokmGVntcnPNjARedXaLpJooX/MDYbeZAitvWtGPK3u0JmQ +dBLS02Nw79gHwWFhZV7rOqM4n2ixY1tQZq4DAg/HYZoOXAr1nInt+bkIQ3F4+mr MlVWHxVUgNYRbsoBRR8DUGQoEX9UtrbczNBwQJRmsdzkRLFx2lqRn6NwlbvKoFRd rTOFiaqC5AEtIvwFBYEZUTH/ptNu3s4s7QazzJhUFEnqeqvZ/1s/F9mqbZvO9W49 eNCNLf0mhm2el33NzTcV8heW9m18UsrE8JzXCpoV4Dh5FRcLb+zDOtjg8Iqu060s ooj3xNWhBsrpGpdvjvhta8CcvoFCSv5cItk= -----END CERTIFICATE-----Generated at Tue Jul 1 21:08:09 2025 by rpki-client