$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99976e61-e1ba-3721-978a-b8070b4c8def.roa File: 99976e61-e1ba-3721-978a-b8070b4c8def.roa (raw, json) Hash identifier: CT9J/9hwmZeF6jTa1ZRpzEI8ZfAccCm2Q4aXG5t4iQ4= Subject key identifier: A2:7F:D9:02:8E:B4:B0:13:A1:4E:F5:55:E3:51:2B:1A:3D:BC:6A:9F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106C3772B715F0F6E53780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99976e61-e1ba-3721-978a-b8070b4c8def.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396610 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:6c:37:72:b7:15:f0:f6:e5:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=4acedd5f-30f8-4c1e-8d69-c8901f2cae87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:60:1e:e9:eb:97:8b:2a:26:3d:75:67:ec: ad:fe:51:22:33:28:d8:ef:d9:aa:03:64:e8:59:d0: c9:54:8a:87:6a:18:cd:20:7e:11:99:1d:45:fd:60: 94:42:d0:d9:1b:ec:fd:97:9c:ae:85:a3:9e:40:bf: 6b:b7:d0:a1:04:4e:52:9d:96:7c:e2:4f:a9:1e:6d: 81:f9:55:c4:37:2c:0e:e1:e4:09:26:57:75:9f:61: f5:21:a2:6d:cc:9a:09:5d:e8:1e:73:d0:6b:99:dc: ba:69:f0:64:c6:77:41:15:41:af:94:23:50:ae:6b: 85:70:c2:bc:fa:f1:30:a2:8a:5d:dd:77:05:f3:28: af:4c:51:6b:f7:f6:d8:f9:fb:79:d6:5e:08:b4:99: 5d:cf:6c:ee:a1:07:25:04:1d:22:2d:c5:f6:dd:1e: ea:b4:69:3d:9b:e0:10:fa:2b:85:23:bb:91:10:bb: 8e:92:7b:a2:7b:93:41:82:97:3d:9a:f6:ef:dd:e4: a4:0a:ee:66:73:5f:84:da:a2:8f:88:ef:13:7f:5c: 04:2b:b3:7b:b5:e9:bb:3b:27:3a:ab:a4:94:30:42: 2e:23:f7:80:d5:ab:4f:a3:1b:5c:4d:a9:6b:59:0b: a3:c6:33:ce:b0:e9:19:4d:41:f8:96:27:e6:1f:e7: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7F:D9:02:8E:B4:B0:13:A1:4E:F5:55:E3:51:2B:1A:3D:BC:6A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99976e61-e1ba-3721-978a-b8070b4c8def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6c:7c:4a:fb:62:4b:88:3b:da:4d:22:48:f7:18:15:68:82: b7:4f:62:98:c6:f4:fc:67:1b:ca:89:a9:86:76:61:c5:05:5a: 80:70:3d:d9:6a:cf:16:8e:aa:00:a6:c0:63:19:3d:de:0e:a0: 6a:5c:1d:8d:f6:03:6f:48:b1:ec:49:b3:86:39:4d:a2:29:96: 51:9a:e8:8a:f3:23:b4:a2:17:a3:e5:95:15:56:4a:82:76:cd: db:ef:b6:63:09:d0:5f:13:81:b0:55:b3:e6:bd:35:07:0f:c2: 2d:38:09:a7:f4:06:3d:5d:4d:a4:57:f7:84:97:90:50:ad:43: a2:0a:c9:d0:b8:ce:7c:c0:ef:cb:d3:6b:4b:1a:6f:b0:2f:ee: 00:1c:cb:b0:5f:3d:47:a4:f2:af:6d:4d:c8:6c:5c:76:dd:99: 40:08:b4:4c:c2:22:e6:c8:66:19:40:70:18:d3:ab:95:d2:b0: 30:2a:1a:ae:74:54:9d:13:95:33:ba:e1:1f:b7:8d:35:98:a6: 02:5a:ab:53:d9:f1:e7:0d:21:47:7b:55:3f:fd:0a:15:dd:15: 07:3d:76:27:1e:d8:67:bf:68:0e:f1:1e:4a:8e:0b:ae:a7:a5: 00:77:42:2c:e6:a3:17:ed:40:2b:55:bb:04:24:40:9e:be:19: 09:f5:c4:7d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGw3crcV8PblN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NGFjZWRkNWYtMzBmOC00YzFlLThkNjktYzg5MDFmMmNhZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotBgHunrl4sqJj11Z+yt/lEiMyjY79mqA2To WdDJVIqHahjNIH4RmR1F/WCUQtDZG+z9l5yuhaOeQL9rt9ChBE5SnZZ84k+pHm2B +VXENywO4eQJJld1n2H1IaJtzJoJXegec9Brmdy6afBkxndBFUGvlCNQrmuFcMK8 +vEwoopd3XcF8yivTFFr9/bY+ft51l4ItJldz2zuoQclBB0iLcX23R7qtGk9m+AQ +iuFI7uRELuOknuie5NBgpc9mvbv3eSkCu5mc1+E2qKPiO8Tf1wEK7N7tem7Oyc6 q6SUMEIuI/eA1atPoxtcTalrWQujxjPOsOkZTUH4lifmH+f+XwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKJ/2QKOtLAToU71VeNRKxo9vGqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk5NzZlNjEtZTFiYS0z NzIxLTk3OGEtYjgwNzBiNGM4ZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzbHxK+2JLiDvaTSJI9xgVaIK3T2KYxvT8ZxvK iamGdmHFBVqAcD3Zas8WjqoApsBjGT3eDqBqXB2N9gNvSLHsSbOGOU2iKZZRmuiK 8yO0ohej5ZUVVkqCds3b77ZjCdBfE4GwVbPmvTUHD8ItOAmn9AY9XU2kV/eEl5BQ rUOiCsnQuM58wO/L02tLGm+wL+4AHMuwXz1HpPKvbU3IbFx23ZlACLRMwiLmyGYZ QHAY06uV0rAwKhqudFSdE5UzuuEft401mKYCWqtT2fHnDSFHe1U//QoV3RUHPXYn Hthnv2gO8R5Kjguup6UAd0Is5qMX7UArVbsEJECevhkJ9cR9 -----END CERTIFICATE-----Generated at Sun Jun 29 23:26:59 2025 by rpki-client