$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ab87a79-0679-3257-9b0d-1a32631c38de.roa File: 9ab87a79-0679-3257-9b0d-1a32631c38de.roa (raw, json) Hash identifier: hwGNyNp5TF4YNJ5dGv/1m6nNONPvi1A0kqPTBL/Qrfg= Subject key identifier: B4:27:D2:C5:95:C7:34:77:A8:A9:47:5A:D3:CC:F4:C8:80:56:E4:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411067E4701EDB3B20F7F490 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ab87a79-0679-3257-9b0d-1a32631c38de.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396612 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:67:e4:70:1e:db:3b:20:f7:f4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=2990532a-46d4-497e-ab5d-f6187e93d968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:bc:e2:67:1f:05:bf:69:fd:09:df:42:86: ec:bc:e0:b3:0c:97:6b:e1:e9:de:2c:c6:9b:11:2d: 05:84:4f:dd:c5:db:a8:51:c6:e5:82:ae:27:20:af: 90:19:5a:e8:0f:18:82:8f:d0:df:df:a8:7e:22:81: 86:ca:7e:c0:ed:04:67:d3:29:50:cb:c8:43:8e:ed: 8c:1e:8c:3b:ca:fe:7e:0e:66:9d:e3:b8:1f:2d:14: 1c:a2:b3:e1:03:bf:fa:91:1a:5f:c1:d2:a5:98:7f: 90:17:8c:76:37:a6:91:c6:67:2e:d7:84:9c:d7:ee: ad:20:9d:8f:54:a4:61:16:a5:1c:1b:ba:f7:b9:be: 28:53:62:2f:57:79:df:72:7f:0b:74:e4:a4:8c:9c: fa:df:82:71:95:81:34:3e:cc:43:c9:b5:5a:68:0e: c5:15:da:4b:61:f8:34:d3:65:52:af:3a:88:57:ca: 16:1c:5f:cb:53:bb:43:b2:89:f0:c3:d1:2a:f5:f4: e5:03:ba:f5:42:b7:b8:f4:dc:0a:c4:40:b4:07:04: ce:8a:86:95:53:bd:fd:d7:49:d2:b9:a6:85:e8:77: d0:c4:22:c3:0c:9b:e4:63:ea:b2:94:a7:d4:92:45: f0:72:80:3e:dc:9a:01:26:26:aa:4f:ee:5c:96:4c: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:27:D2:C5:95:C7:34:77:A8:A9:47:5A:D3:CC:F4:C8:80:56:E4:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ab87a79-0679-3257-9b0d-1a32631c38de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c8:fc:5f:8c:22:a8:26:36:f7:1d:80:eb:03:13:26:94:57: 66:de:b9:07:7f:66:94:3c:19:4f:f6:e4:16:cb:c2:6a:d3:1c: c9:0a:56:c8:38:a5:23:1f:ad:ab:59:78:7c:35:18:ae:ae:b7: 99:5e:14:2c:ec:c7:81:d5:ac:7b:c7:62:49:29:3e:28:c9:2a: eb:94:76:ad:3e:2e:55:db:79:e6:e5:91:24:2c:75:64:5a:6f: 2d:95:af:98:3b:52:8b:a5:c3:bf:cf:29:c8:c6:77:8b:be:bd: 75:89:8a:2a:6c:43:bd:21:6c:03:f5:22:f6:61:19:31:50:60: 6e:3f:cf:39:33:c5:ba:6b:88:85:49:f7:2a:28:e9:cc:bc:b8: 69:ae:2c:25:04:c3:70:8f:3c:c8:19:0a:40:ff:43:cb:08:d7: 5b:05:95:9d:80:ce:d0:cf:59:b0:c9:7a:e3:91:43:e8:c5:b7: 1e:6d:3d:f2:d8:cc:5f:5e:85:93:f1:ce:2a:6f:9c:03:cf:59: 58:0f:84:6d:8a:e6:c1:60:d2:5f:f9:93:5c:29:9e:56:16:6b: 65:c7:24:86:0c:ea:01:52:9e:50:cf:eb:93:90:22:fc:1d:c9: e0:e4:8b:11:20:91:60:e4:e8:63:1a:24:fc:c7:c5:15:91:7b: ff:99:81:78 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGfkcB7bOyD39JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Mjk5MDUzMmEtNDZkNC00OTdlLWFiNWQtZjYxODdlOTNkOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDa84mcfBb9p/QnfQobsvOCzDJdr4eneLMab ES0FhE/dxduoUcblgq4nIK+QGVroDxiCj9Df36h+IoGGyn7A7QRn0ylQy8hDju2M How7yv5+Dmad47gfLRQcorPhA7/6kRpfwdKlmH+QF4x2N6aRxmcu14Sc1+6tIJ2P VKRhFqUcG7r3ub4oU2IvV3nfcn8LdOSkjJz634JxlYE0PsxDybVaaA7FFdpLYfg0 02VSrzqIV8oWHF/LU7tDsonww9Eq9fTlA7r1Qre49NwKxEC0BwTOioaVU73910nS uaaF6HfQxCLDDJvkY+qylKfUkkXwcoA+3JoBJiaqT+5clkx3EQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLQn0sWVxzR3qKlHWtPM9MiAVuQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWFiODdhNzktMDY3OS0z MjU3LTliMGQtMWEzMjYzMWMzOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPyPxfjCKoJjb3HYDrAxMmlFdm3rkHf2aUPBlP 9uQWy8Jq0xzJClbIOKUjH62rWXh8NRiurreZXhQs7MeB1ax7x2JJKT4oySrrlHat Pi5V23nm5ZEkLHVkWm8tla+YO1KLpcO/zynIxneLvr11iYoqbEO9IWwD9SL2YRkx UGBuP885M8W6a4iFSfcqKOnMvLhpriwlBMNwjzzIGQpA/0PLCNdbBZWdgM7Qz1mw yXrjkUPoxbcebT3y2MxfXoWT8c4qb5wDz1lYD4RtiubBYNJf+ZNcKZ5WFmtlxySG DOoBUp5Qz+uTkCL8Hcng5IsRIJFg5OhjGiT8x8UVkXv/mYF4 -----END CERTIFICATE-----Generated at Mon Jun 30 06:28:26 2025 by rpki-client