$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa File: 9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa (raw, json) Hash identifier: l5o/IG4krORu+5T8LwBmdxpriE3x1H3VQqdU6GcjGpw= Subject key identifier: 0B:FC:8A:8D:FB:07:F7:77:66:F2:56:6C:BA:32:23:02:04:E3:93:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411068294AD6B9FBDB4847E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 40647 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:68:29:4a:d6:b9:fb:db:48:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=fef01950-536d-4854-b692-2ea0b1a28664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:12:e6:33:8c:e1:57:a0:a2:80:ae:dc:9f: 0c:0e:a4:5d:5a:74:34:45:c4:85:a8:07:64:7f:29: 58:d5:7b:7c:5d:a2:36:27:b5:79:4f:29:34:c1:04: 82:35:ec:28:8f:2c:95:73:c1:d1:ef:03:cf:55:8d: dd:64:52:d8:90:fb:24:8e:48:32:71:dc:83:9a:01: 66:19:5e:81:41:10:ea:b9:84:b4:f4:f7:31:5b:c3: e0:f6:52:cc:08:2a:c2:9b:d2:ee:9e:62:ab:bc:41: 31:fa:1e:0b:60:d1:e4:21:23:83:1b:a8:85:18:98: b2:09:7c:9d:62:e7:70:69:ae:14:19:71:08:9c:7d: 22:2e:be:f6:8e:06:b9:92:b5:6a:59:06:59:5b:b5: 95:d2:c5:07:44:bb:db:15:0f:1b:6f:8f:3b:5e:ee: 65:7d:25:da:99:66:49:93:60:0e:23:58:ac:67:bd: 34:db:76:3b:99:fc:92:fe:c3:38:6d:e3:1b:94:b2: ba:cc:82:0e:e2:8a:38:15:ee:e8:50:47:3a:65:b6: 1c:cd:77:a7:1b:e4:d9:3e:47:c8:73:d5:9e:84:b6: 13:fe:a8:7c:ed:5a:a8:52:30:f8:0a:46:28:a2:86: b8:1b:ae:94:c4:ed:85:da:33:33:6f:c8:fc:53:51: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FC:8A:8D:FB:07:F7:77:66:F2:56:6C:BA:32:23:02:04:E3:93:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:56:47:3f:75:c0:74:16:7d:29:c0:7d:ed:2a:ae:fa:8b:0f: c5:13:5a:a7:99:c7:3f:6a:f6:45:c9:47:c9:ed:4b:e8:2a:5f: 84:d9:d1:cc:07:c0:0e:7e:5b:b9:99:86:a2:a0:9e:6b:6d:65: 01:71:17:fb:14:b1:62:ae:53:55:5a:0b:c2:45:3a:3d:94:5b: 01:d6:55:df:14:7e:2f:b8:e1:93:9c:e4:45:41:52:00:19:8f: c7:83:c0:8e:0e:45:93:43:91:bc:90:81:b8:f5:f2:b2:28:39: ce:50:a6:95:80:94:6c:39:ca:28:2a:a1:11:3d:6c:2c:2b:f9: b7:3a:2b:e6:28:9d:97:10:37:a4:64:46:52:ce:7a:18:af:43: c5:60:c5:2f:6a:e1:91:1e:d3:4d:2a:22:da:58:28:79:c8:93: 57:7d:b8:0d:da:41:40:45:75:ec:0f:6c:09:d4:47:a5:80:f2: 37:84:b0:e8:1c:40:4b:37:d0:b3:76:16:84:6a:8f:93:79:5d: fb:60:96:5b:b1:a2:94:1a:79:7b:6c:9c:7c:74:fe:ae:7d:7e: d5:33:d1:71:0e:70:09:0e:e2:0c:c4:38:f5:e4:29:1a:8e:cc: d9:63:e3:40:70:7a:42:e2:d4:25:b9:0b:19:26:9c:0f:85:bd: b8:23:84:4d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGgpSta5+9tIR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZmVmMDE5NTAtNTM2ZC00ODU0LWI2OTItMmVhMGIxYTI4NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy4S5jOM4VegooCu3J8MDqRdWnQ0RcSFqAdk fylY1Xt8XaI2J7V5Tyk0wQSCNewojyyVc8HR7wPPVY3dZFLYkPskjkgycdyDmgFm GV6BQRDquYS09PcxW8Pg9lLMCCrCm9LunmKrvEEx+h4LYNHkISODG6iFGJiyCXyd Yudwaa4UGXEInH0iLr72jga5krVqWQZZW7WV0sUHRLvbFQ8bb487Xu5lfSXamWZJ k2AOI1isZ70023Y7mfyS/sM4beMblLK6zIIO4oo4Fe7oUEc6ZbYczXenG+TZPkfI c9WehLYT/qh87VqoUjD4CkYoooa4G66UxO2F2jMzb8j8U1FD4QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAv8io37B/d3ZvJWbLoyIwIE45PAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQ5ZDdhYTUtMTJlYi0z YjU1LTg2MTctNmQ0MDBiMWRhNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5Vkc/dcB0Fn0pwH3tKq76iw/FE1qnmcc/avZF yUfJ7UvoKl+E2dHMB8AOflu5mYaioJ5rbWUBcRf7FLFirlNVWgvCRTo9lFsB1lXf FH4vuOGTnORFQVIAGY/Hg8CODkWTQ5G8kIG49fKyKDnOUKaVgJRsOcooKqERPWws K/m3OivmKJ2XEDekZEZSznoYr0PFYMUvauGRHtNNKiLaWCh5yJNXfbgN2kFARXXs D2wJ1EelgPI3hLDoHEBLN9CzdhaEao+TeV37YJZbsaKUGnl7bJx8dP6ufX7VM9Fx DnAJDuIMxDj15CkajszZY+NAcHpC4tQluQsZJpwPhb24I4RN -----END CERTIFICATE-----Generated at Sun Jun 29 22:42:33 2025 by rpki-client