$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e416acd-92af-3d09-8b77-f7de04fa30d8.roa File: 8e416acd-92af-3d09-8b77-f7de04fa30d8.roa (raw, json) Hash identifier: FdZlu4IWUURbkpz7qtiPERGj9r9zLkLauumgp8l1z/U= Subject key identifier: 0E:01:98:14:0B:94:02:24:BA:1E:05:A6:19:CD:94:35:83:D8:49:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A4110663AE32B373BC69EF120 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e416acd-92af-3d09-8b77-f7de04fa30d8.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396597 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:66:3a:e3:2b:37:3b:c6:9e:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=a0d31fc7-2acd-4cde-8878-33d9815ae95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:f2:f4:e3:47:7b:09:dd:e1:f6:56:f1:5d: 01:23:6b:51:1b:e5:8f:9c:e5:e7:13:c4:a1:ed:65: 7d:63:62:58:a6:fa:db:fa:a5:33:ba:c7:b7:46:df: 27:96:99:45:d5:a1:f9:08:9e:d0:17:c1:0b:ce:a1: fa:2c:e7:5e:37:af:6a:16:d6:e4:49:41:a5:a2:5c: 44:a2:7e:a9:f9:3b:c6:9f:cf:b0:c7:34:b0:d3:0f: 99:cc:29:4b:c7:85:7e:48:9c:e9:35:87:0e:76:87: 02:59:3a:24:65:2d:7f:01:e8:90:10:27:9f:69:a2: 1d:9d:db:99:4a:ed:d3:39:9b:0d:8e:88:6f:72:b8: f3:ad:57:e4:1b:4a:59:1d:51:a7:d6:15:5b:bf:6a: 1b:a6:20:6f:99:25:cf:2d:87:0b:af:40:10:7c:0e: 4b:6a:a1:d0:1d:ff:a3:28:9c:f8:4e:51:53:3f:e8: 05:a2:45:9a:6c:3b:67:0e:99:cb:8b:00:7b:77:0b: c9:e5:14:f7:b7:7c:a9:26:95:1d:d2:2a:21:c4:9f: e4:49:f9:19:d6:a0:2f:00:91:75:59:17:76:b9:13: 8e:14:0d:21:da:13:9d:a4:37:d8:29:de:35:30:dc: 28:d6:f1:e1:2e:47:34:e3:82:a4:62:0a:a3:3b:75: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:01:98:14:0B:94:02:24:BA:1E:05:A6:19:CD:94:35:83:D8:49:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e416acd-92af-3d09-8b77-f7de04fa30d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8a:30:ca:f2:30:71:23:07:14:5b:e7:dd:6f:8b:d1:28:fb: 44:9d:eb:d8:0a:ea:0f:40:2b:f6:aa:cc:53:4c:7f:20:06:17: c0:43:17:e2:ba:5b:a8:f0:8b:59:65:52:a8:5d:68:33:fa:16: 47:b5:7f:8f:20:96:34:ae:44:33:1b:47:07:a5:c9:a5:ed:c7: 82:c8:0a:62:14:f3:4c:dc:57:84:9c:47:04:bf:f6:c0:56:66: 39:90:d3:34:24:d3:72:06:b9:40:d6:66:61:62:5a:07:43:d5: a5:03:dd:62:a4:32:ca:f1:e6:79:25:b1:54:2f:b5:75:2d:76: 09:a2:c4:ee:df:86:52:99:dd:e8:b3:13:f3:49:ba:76:41:8a: 72:19:3e:c2:9c:40:bd:7e:e9:95:82:85:e2:af:31:07:1b:a3: 0e:0d:61:68:9e:a9:d4:70:8b:ab:ac:ab:97:55:17:28:27:a5: de:ad:39:5d:0c:84:52:d8:bf:32:03:39:ae:69:46:41:14:c9: cc:fe:30:dd:a6:e2:f2:20:2d:e6:fc:6b:9c:96:92:98:cb:db: 51:06:3a:96:eb:45:74:9a:86:7f:34:ac:8b:33:99:fd:88:34: d5:0a:7e:c6:da:17:78:9a:af:e6:4c:21:e2:82:3f:77:92:bd: 82:0c:d6:41 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGY64ys3O8ae8SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YTBkMzFmYzctMmFjZC00Y2RlLTg4NzgtMzNkOTgxNWFlOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ry9ONHewnd4fZW8V0BI2tRG+WPnOXnE8Sh 7WV9Y2JYpvrb+qUzuse3Rt8nlplF1aH5CJ7QF8ELzqH6LOdeN69qFtbkSUGlolxE on6p+TvGn8+wxzSw0w+ZzClLx4V+SJzpNYcOdocCWTokZS1/AeiQECefaaIdnduZ Su3TOZsNjohvcrjzrVfkG0pZHVGn1hVbv2obpiBvmSXPLYcLr0AQfA5LaqHQHf+j KJz4TlFTP+gFokWabDtnDpnLiwB7dwvJ5RT3t3ypJpUd0iohxJ/kSfkZ1qAvAJF1 WRd2uROOFA0h2hOdpDfYKd41MNwo1vHhLkc044KkYgqjO3X1fQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA4BmBQLlAIkuh4FphnNlDWD2EneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MTZhY2QtOTJhZi0z ZDA5LThiNzctZjdkZTA0ZmEzMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAlijDK8jBxIwcUW+fdb4vRKPtEnevYCuoPQCv2 qsxTTH8gBhfAQxfiuluo8ItZZVKoXWgz+hZHtX+PIJY0rkQzG0cHpcml7ceCyApi FPNM3FeEnEcEv/bAVmY5kNM0JNNyBrlA1mZhYloHQ9WlA91ipDLK8eZ5JbFUL7V1 LXYJosTu34ZSmd3osxPzSbp2QYpyGT7CnEC9fumVgoXirzEHG6MODWFonqnUcIur rKuXVRcoJ6XerTldDIRS2L8yAzmuaUZBFMnM/jDdpuLyIC3m/GuclpKYy9tRBjqW 60V0moZ/NKyLM5n9iDTVCn7G2hd4mq/mTCHigj93kr2CDNZB -----END CERTIFICATE-----Generated at Mon Jun 30 11:38:15 2025 by rpki-client