$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/994b5274-465b-3e10-be1a-3b92a6baa5e1.roa File: 994b5274-465b-3e10-be1a-3b92a6baa5e1.roa (raw, json) Hash identifier: hJWqL4Sl2VTEIl7v/AYEjrZlBYeSqB42O/PQFSOXjG0= Subject key identifier: 16:3D:CF:2F:BE:8B:E0:5B:4D:4E:82:50:6E:05:56:97:23:8F:D7:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2DC7458AF20007226080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/994b5274-465b-3e10-be1a-3b92a6baa5e1.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 396596 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2d:c7:45:8a:f2:00:07:22:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=7e10e1f4-a672-4309-ac51-1eebde5495b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:25:f2:06:3e:fc:0b:6f:7a:48:66:5c:54: 3d:34:67:31:91:2f:95:5d:4d:da:6a:44:55:ed:a2: 14:5c:70:a5:07:70:b9:80:30:3d:25:7d:4f:c7:7e: 89:e0:8e:75:6f:3d:60:d0:aa:28:53:8d:7d:34:16: 52:89:6e:6a:b7:83:16:64:c9:33:d8:08:6f:68:b2: f6:39:30:92:4e:bd:58:a0:3a:0f:f5:a0:7d:37:90: 4d:b0:ab:7b:14:94:16:62:6c:c1:5b:c5:ed:10:b4: 51:c4:29:e1:69:9b:9a:1d:18:36:8f:b6:2a:d2:d9: b1:cb:f2:12:dc:82:82:29:57:ac:2e:32:61:29:03: 53:53:78:b1:39:7d:f0:96:19:cb:8f:15:9d:88:70: 45:86:86:41:85:53:a3:41:c6:01:be:01:fe:bb:0e: 44:7f:0b:8f:58:b5:fe:88:17:2e:25:30:7a:ba:4a: de:47:51:82:e6:09:08:46:da:19:7a:3c:5f:37:d6: 75:93:4d:f6:ca:df:64:86:e2:a9:ba:69:04:03:51: dc:9e:b8:66:18:a4:34:00:9c:b2:b6:b9:14:62:ca: 45:8f:88:8e:60:19:cc:72:13:83:b7:0b:95:35:47: db:5f:9a:96:23:51:34:a4:fe:53:68:61:23:36:69: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:CF:2F:BE:8B:E0:5B:4D:4E:82:50:6E:05:56:97:23:8F:D7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/994b5274-465b-3e10-be1a-3b92a6baa5e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3e:79:91:02:d4:4b:96:8d:1f:6c:5c:04:54:b7:77:d9:00: 45:fa:a9:dd:a4:b9:0e:9a:26:bd:6b:44:fe:2b:d7:85:1f:d1: a4:5d:ce:09:db:d0:13:ab:09:c6:a3:7e:5b:23:c2:a8:ae:6f: 1f:a3:8d:d2:d2:b4:77:c1:58:c9:e2:bd:86:e4:8f:c0:fa:6a: 7c:44:a1:5c:37:ed:4a:77:6b:41:e6:e8:1f:92:ed:f9:d3:e9: cc:f3:b7:fb:02:91:bb:68:60:76:0a:c1:bb:84:8f:87:22:ec: 5c:71:5f:27:e8:c3:9e:37:38:5e:e6:00:9f:fd:32:21:c9:da: 0e:d3:57:3b:ba:fe:0f:cd:58:14:ca:a7:0d:59:3a:bb:6a:7d: c4:08:69:56:2e:cb:a8:d8:dd:56:61:44:6f:58:59:a4:f1:1e: 84:9b:26:73:fc:ca:5d:83:bf:c3:a6:30:c9:bc:d7:1c:2b:d4: 4f:0e:cf:89:39:49:72:8f:b5:5a:d7:31:c6:d1:49:bb:74:25: a7:ef:51:b0:26:a6:97:3d:62:63:00:16:a8:46:5e:ea:b3:2e: a0:d3:8a:29:19:c6:f7:75:45:0f:55:c7:79:94:59:62:82:07: f3:0c:dc:db:d7:b5:4d:fb:5c:61:85:16:fa:79:77:99:d9:a1: 31:23:24:78 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmy3HRYryAAciYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk N2UxMGUxZjQtYTY3Mi00MzA5LWFjNTEtMWVlYmRlNTQ5NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8Il8gY+/AtvekhmXFQ9NGcxkS+VXU3aakRV 7aIUXHClB3C5gDA9JX1Px36J4I51bz1g0KooU419NBZSiW5qt4MWZMkz2AhvaLL2 OTCSTr1YoDoP9aB9N5BNsKt7FJQWYmzBW8XtELRRxCnhaZuaHRg2j7Yq0tmxy/IS 3IKCKVesLjJhKQNTU3ixOX3wlhnLjxWdiHBFhoZBhVOjQcYBvgH+uw5EfwuPWLX+ iBcuJTB6ukreR1GC5gkIRtoZejxfN9Z1k032yt9khuKpumkEA1HcnrhmGKQ0AJyy trkUYspFj4iOYBnMchODtwuVNUfbX5qWI1E0pP5TaGEjNmltqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBY9zy++i+BbTU6CUG4FVpcjj9fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk0YjUyNzQtNDY1Yi0z ZTEwLWJlMWEtM2I5MmE2YmFhNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBCPnmRAtRLlo0fbFwEVLd32QBF+qndpLkOmia9 a0T+K9eFH9GkXc4J29ATqwnGo35bI8Korm8fo43S0rR3wVjJ4r2G5I/A+mp8RKFc N+1Kd2tB5ugfku350+nM87f7ApG7aGB2CsG7hI+HIuxccV8n6MOeNzhe5gCf/TIh ydoO01c7uv4PzVgUyqcNWTq7an3ECGlWLsuo2N1WYURvWFmk8R6EmyZz/Mpdg7/D pjDJvNccK9RPDs+JOUlyj7Va1zHG0Um7dCWn71GwJqaXPWJjABaoRl7qsy6g04op Gcb3dUUPVcd5lFliggfzDNzb17VN+1xhhRb6eXeZ2aExIyR4 -----END CERTIFICATE-----Generated at Mon Jun 30 00:25:57 2025 by rpki-client