$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa File: 87d87011-80de-397f-85c5-50de5579a4ab.roa (raw, json) Hash identifier: Q7Ut59T+lcQWiUHZF8KpTyW0ZVawRA0f3KIDZzmgFf4= Subject key identifier: DA:40:8F:2A:9C:74:7D:32:1B:72:63:83:D3:97:A3:DF:6B:91:C1:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411069BAFE65B3317E326140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 27544 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:69:ba:fe:65:b3:31:7e:32:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=f9a30571-2431-4ed0-86c0-5c803042777f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:01:1a:4e:9d:6f:7c:98:9b:fa:37:90:21: 1e:1d:0e:22:ad:71:3d:18:f4:d7:3a:e1:16:29:56: a6:7b:ff:e4:e7:8f:91:8c:0d:bd:ec:d0:b7:39:5e: 20:1a:93:6b:47:2d:13:2b:2b:ff:27:7c:1b:a9:d6: cf:0a:81:a6:94:2b:47:02:8f:94:26:40:6c:d3:09: cb:f0:0a:15:b3:b5:af:ae:65:9b:ab:31:85:60:11: 10:ba:dc:5e:c2:9a:f7:ab:19:56:5a:87:98:95:f8: 25:4b:fe:f3:48:75:a5:85:16:46:81:2c:74:55:3b: 25:46:df:02:49:9e:13:72:7b:00:57:83:7a:eb:c4: 1e:37:a6:8c:5e:98:9d:a4:bb:3b:a8:07:90:24:07: 91:8c:43:4b:d1:2e:cc:0e:02:cf:22:4f:05:74:e8: cf:09:c3:e9:70:4b:e1:b8:7a:61:a5:69:80:ed:e5: 34:21:15:78:a2:c8:39:f9:9c:87:62:ab:8c:b5:30: 1d:ef:c2:04:5b:48:f6:30:25:72:7c:61:5a:a8:82: 99:bf:66:4d:69:8a:d6:0f:05:4f:a2:7d:6b:b3:75: f9:05:f0:65:6d:d2:11:8f:b5:e7:19:5d:dc:41:a6: fd:28:43:80:34:6f:cb:7f:9a:96:41:63:65:b0:75: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:8F:2A:9C:74:7D:32:1B:72:63:83:D3:97:A3:DF:6B:91:C1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:55:dc:98:6c:33:72:cc:8d:1d:fe:98:e7:e2:1a:bd:2e:a3: 60:56:8e:ea:b0:2d:10:be:89:95:99:4c:66:84:7d:3d:13:9f: 6e:d6:5b:5e:cb:e7:ec:ca:57:ca:f2:fc:af:54:16:f5:55:6c: 40:27:bb:ae:e7:50:9c:e0:e5:e2:c6:d2:5e:d8:c3:a5:7d:bd: 39:45:4c:26:6b:48:25:e1:a0:c0:b7:3f:6f:1a:3b:41:33:a7: ba:15:60:3a:0a:98:7b:bc:b7:0a:6e:e6:6a:14:ff:a7:8d:e7: 65:3a:bd:4e:61:ce:bb:96:bb:6c:75:5e:56:45:7d:46:5f:c6: 45:f4:1d:aa:7a:fc:af:91:ef:58:09:05:f6:cd:eb:25:a9:ec: 24:0f:18:85:52:92:06:a8:96:bf:47:77:8c:66:f6:85:9c:1e: d2:33:66:22:a1:c0:81:7f:81:fa:1f:3f:1f:f7:6f:95:00:48: ed:8b:55:8a:2b:13:4c:26:de:53:02:c0:10:4f:46:58:de:a8: 71:c3:74:a5:ad:53:cf:32:2c:f5:85:cb:d7:df:23:e8:42:03: 86:d5:d0:a7:53:b1:60:3f:46:70:30:f3:64:c4:0e:f5:64:01: 95:1d:50:53:f2:d2:a3:f8:dd:6b:94:3c:5e:b9:4c:9c:b7:6e: 08:58:bc:cb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGm6/mWzMX4yYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZjlhMzA1NzEtMjQzMS00ZWQwLTg2YzAtNWM4MDMwNDI3NzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTIBGk6db3yYm/o3kCEeHQ4irXE9GPTXOuEW KVame//k54+RjA297NC3OV4gGpNrRy0TKyv/J3wbqdbPCoGmlCtHAo+UJkBs0wnL 8AoVs7WvrmWbqzGFYBEQutxewpr3qxlWWoeYlfglS/7zSHWlhRZGgSx0VTslRt8C SZ4TcnsAV4N668QeN6aMXpidpLs7qAeQJAeRjENL0S7MDgLPIk8FdOjPCcPpcEvh uHphpWmA7eU0IRV4osg5+ZyHYquMtTAd78IEW0j2MCVyfGFaqIKZv2ZNaYrWDwVP on1rs3X5BfBlbdIRj7XnGV3cQab9KEOANG/Lf5qWQWNlsHWR4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNpAjyqcdH0yG3Jjg9OXo99rkcESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdkODcwMTEtODBkZS0z OTdmLTg1YzUtNTBkZTU1NzlhNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBxVdyYbDNyzI0d/pjn4hq9LqNgVo7qsC0QvomV mUxmhH09E59u1ltey+fsylfK8vyvVBb1VWxAJ7uu51Cc4OXixtJe2MOlfb05RUwm a0gl4aDAtz9vGjtBM6e6FWA6Cph7vLcKbuZqFP+njedlOr1OYc67lrtsdV5WRX1G X8ZF9B2qevyvke9YCQX2zeslqewkDxiFUpIGqJa/R3eMZvaFnB7SM2YiocCBf4H6 Hz8f92+VAEjti1WKKxNMJt5TAsAQT0ZY3qhxw3SlrVPPMiz1hcvX3yPoQgOG1dCn U7FgP0ZwMPNkxA71ZAGVHVBT8tKj+N1rlDxeuUyct24IWLzL -----END CERTIFICATE-----Generated at Mon Jun 30 11:26:43 2025 by rpki-client