$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa File: 9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa (raw, json) Hash identifier: VrmV+PbGJnk/T9EzVvkQtJCXVj6ptVLEVAPF2IY+Wc4= Subject key identifier: BE:6D:C3:46:A6:4C:0A:5D:A3:0A:4C:F1:B4:64:C3:A1:3B:1D:A4:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A4110656B4E5C85AC8DDF6980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396590 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:65:6b:4e:5c:85:ac:8d:df:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=ecb1c00c-1d1e-49a4-896d-5501b87fa793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:da:89:ce:d5:37:f3:e7:96:10:07:6f:fc: 38:d4:c6:64:1a:5d:5a:cb:e9:7f:00:34:09:c5:a7: aa:95:c4:25:62:6d:04:1b:96:e4:c5:7c:46:f6:85: 0e:1d:27:46:d0:d9:8a:45:7f:96:20:64:63:a2:23: 21:3d:95:4e:04:6a:26:7b:3c:20:96:3c:e3:4b:60: e9:fb:a4:18:6f:2a:33:84:d9:fe:82:15:f9:8d:bf: 9c:af:78:58:d9:89:e0:e6:18:24:c7:28:9f:ab:c7: 0a:88:81:ac:b4:f3:f0:56:f6:13:b6:5b:92:41:2b: 8d:22:50:48:cc:87:70:e0:61:63:bc:1c:a5:c8:65: ea:2e:97:e7:a8:2f:ff:c1:58:ee:21:81:30:73:92: 53:fa:f1:59:97:d6:d7:0a:ce:79:cc:eb:37:b9:f4: a2:75:52:7f:28:0e:2a:98:96:26:ae:a9:2a:36:3c: be:a3:e2:18:88:8a:c1:27:b7:23:9f:d2:49:ac:09: 8b:11:3d:b8:96:a2:f8:14:c9:d3:d7:3c:d3:aa:ec: bc:30:63:a3:66:65:94:1a:48:ca:b0:72:f3:dd:01: ce:ea:a6:cf:2a:8a:59:a9:24:68:9e:fa:9c:7f:94: 80:7d:93:e1:c7:f7:73:d1:d0:c3:bc:74:c7:e2:9f: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6D:C3:46:A6:4C:0A:5D:A3:0A:4C:F1:B4:64:C3:A1:3B:1D:A4:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fe:6e:9a:0f:2a:60:1a:db:d0:77:0c:9e:7a:20:d9:be:4c: 03:e2:fb:0f:8f:c9:71:04:2d:de:ad:b7:46:a4:e5:3d:18:8f: e9:8e:e5:b3:5c:b5:24:84:7d:fd:4d:3e:21:86:46:3b:cc:39: 98:b5:e3:3b:c7:95:2e:fc:0d:f1:de:7f:64:76:5e:ba:a1:c1: 8f:ff:97:a0:50:03:d9:b4:cf:83:b2:d3:97:17:ef:c6:7c:64: 35:07:ad:88:0a:de:93:e8:8b:8e:be:74:8b:cf:2d:4b:04:23: ef:b9:bd:09:c9:08:80:30:85:27:c1:e1:ad:4e:fe:60:a7:22: 12:26:03:f3:fa:23:61:4c:2f:e9:7b:3a:b8:d8:23:e1:0f:62: ef:95:52:a2:c9:e7:23:7e:07:5b:1d:dd:66:0d:0d:25:77:2a: 94:ba:a7:02:a8:a3:03:a0:8c:77:5d:b3:99:e4:da:f3:86:14: ea:71:c5:6a:bb:72:59:f4:dc:d3:c8:87:b5:36:73:5b:25:1c: 3f:95:c5:bb:94:1a:48:fb:02:c5:ea:30:80:80:19:11:72:3e: 43:7a:fe:1c:0c:c5:74:94:35:3c:11:9c:d0:5f:b4:78:25:eb: 7d:e4:9b:b9:26:db:2b:c5:7f:24:d8:1c:18:d6:8e:d5:d2:bf: ab:8d:ac:99 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGVrTlyFrI3faYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZWNiMWMwMGMtMWQxZS00OWE0LTg5NmQtNTUwMWI4N2ZhNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC/aic7VN/PnlhAHb/w41MZkGl1ay+l/ADQJ xaeqlcQlYm0EG5bkxXxG9oUOHSdG0NmKRX+WIGRjoiMhPZVOBGomezwgljzjS2Dp +6QYbyozhNn+ghX5jb+cr3hY2Yng5hgkxyifq8cKiIGstPPwVvYTtluSQSuNIlBI zIdw4GFjvBylyGXqLpfnqC//wVjuIYEwc5JT+vFZl9bXCs55zOs3ufSidVJ/KA4q mJYmrqkqNjy+o+IYiIrBJ7cjn9JJrAmLET24lqL4FMnT1zzTquy8MGOjZmWUGkjK sHLz3QHO6qbPKopZqSRonvqcf5SAfZPhx/dz0dDDvHTH4p8PEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL5tw0amTApdowpM8bRkw6E7HaRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWE4ZTBlZjEtMTdhNi0z Mjk1LTkxMWMtMTg2NDUxYThmZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1/m6aDypgGtvQdwyeeiDZvkwD4vsPj8lxBC3e rbdGpOU9GI/pjuWzXLUkhH39TT4hhkY7zDmYteM7x5Uu/A3x3n9kdl66ocGP/5eg UAPZtM+DstOXF+/GfGQ1B62ICt6T6IuOvnSLzy1LBCPvub0JyQiAMIUnweGtTv5g pyISJgPz+iNhTC/pezq42CPhD2LvlVKiyecjfgdbHd1mDQ0ldyqUuqcCqKMDoIx3 XbOZ5NrzhhTqccVqu3JZ9NzTyIe1NnNbJRw/lcW7lBpI+wLF6jCAgBkRcj5Dev4c DMV0lDU8EZzQX7R4Jet95Ju5JtsrxX8k2BwY1o7V0r+rjayZ -----END CERTIFICATE-----Generated at Mon Jun 30 06:12:28 2025 by rpki-client