$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa File: b1ee3038-ef24-3677-9eef-55387c02c99e.roa (raw, json) Hash identifier: TeTDsNJOPbCrP8gJlFhU3s12jbA6OJeUDyuLJ2RU9sw= Subject key identifier: 21:D7:60:52:05:81:D4:61:E0:BF:08:B8:00:06:7D:CF:8D:84:96:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9958AE20AB045E1E5C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396552 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:99:58:ae:20:ab:04:5e:1e:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=e50ef507-dfe8-4928-ae92-38d582a8c62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:ea:55:b2:12:fc:60:bf:c0:0a:ad:84:78: f6:d7:a0:98:4a:c1:c5:ab:c3:c5:5d:eb:ad:d6:b7: c1:71:d4:03:25:5c:c3:87:5a:67:fb:27:10:da:a7: 77:0f:e0:c5:6b:5e:90:ba:86:f2:7b:fd:09:1a:b3: 7c:0e:21:ba:3b:5f:eb:82:f8:52:ba:ea:d6:b6:ee: d6:b6:bd:94:b0:c4:81:21:ee:87:32:86:02:29:16: 3b:ac:fa:da:ae:3d:66:0c:3d:2f:22:4b:d0:b2:a0: dc:76:4d:04:02:96:25:b5:0e:e9:9b:83:78:9c:51: 97:d1:06:fb:c2:02:06:2d:2f:ac:b2:c8:a9:ec:0d: bc:dc:9b:cf:47:82:4e:ad:2e:20:49:4c:f9:7b:a1: 40:20:93:1c:06:b3:2c:19:29:84:2b:c0:48:7e:cb: 78:1f:e0:7f:dd:80:87:3e:28:bc:39:36:5b:6e:34: 22:75:60:f6:e8:af:17:49:92:f5:f9:20:0b:69:e0: 92:06:2f:41:c5:4f:23:67:5f:7a:2f:88:8d:03:8e: 92:6a:15:a1:66:b8:42:50:69:9e:92:70:59:69:0d: a4:f6:d4:31:5a:60:b0:eb:1d:1c:30:69:60:b2:fc: d1:bb:41:d7:57:40:37:b7:30:9c:a1:70:ce:5b:a7: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D7:60:52:05:81:D4:61:E0:BF:08:B8:00:06:7D:CF:8D:84:96:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f8:8d:43:6f:79:0c:6b:9a:ce:2c:f3:4f:90:c4:88:b1:b4: 44:23:1c:eb:9f:e5:4a:66:be:57:e2:39:e2:25:4f:42:71:45: 96:44:94:6a:a0:4c:7e:eb:37:e8:93:20:3b:7b:3f:b8:d1:d9: 23:19:e1:f5:54:a3:e8:8a:71:6d:54:d5:68:25:9a:82:66:13: 60:a1:10:79:16:77:2d:5c:92:53:2b:d3:96:63:a2:50:d5:81: 52:0d:43:8a:7a:4c:2d:a2:53:b0:45:4f:b4:87:0f:d4:fb:90: 3f:45:25:25:73:9c:f8:7d:84:2f:0c:0b:a6:b9:3d:ff:2c:68: d3:69:6d:5c:a3:54:5c:e8:d5:bd:d0:ba:3a:8e:1d:9f:58:ca: b3:86:c3:c1:76:66:f7:43:d0:57:98:93:f9:e4:d0:da:9a:c7: c8:8e:20:7c:89:ee:e7:5b:6f:45:ba:82:aa:a6:4d:02:56:be: 1d:a1:de:76:11:bc:13:09:9b:66:a7:ce:25:46:9f:e7:bf:30: 3d:4f:91:17:60:05:1d:43:9b:bd:f2:85:91:2b:e5:a6:69:c6: 0b:a9:b5:24:21:9a:7b:39:94:a2:c6:46:5b:03:09:e7:49:08: 22:3c:82:30:3c:48:1d:a9:bc:ee:69:1e:b6:30:e1:98:9b:c7: c2:f2:dd:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4eplYriCrBF4eXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZTUwZWY1MDctZGZlOC00OTI4LWFlOTItMzhkNTgyYThjNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3jqVbIS/GC/wAqthHj216CYSsHFq8PFXeut 1rfBcdQDJVzDh1pn+ycQ2qd3D+DFa16Quobye/0JGrN8DiG6O1/rgvhSuurWtu7W tr2UsMSBIe6HMoYCKRY7rPrarj1mDD0vIkvQsqDcdk0EApYltQ7pm4N4nFGX0Qb7 wgIGLS+sssip7A283JvPR4JOrS4gSUz5e6FAIJMcBrMsGSmEK8BIfst4H+B/3YCH Pii8OTZbbjQidWD26K8XSZL1+SALaeCSBi9BxU8jZ196L4iNA46SahWhZrhCUGme knBZaQ2k9tQxWmCw6x0cMGlgsvzRu0HXV0A3tzCcoXDOW6eACQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCHXYFIFgdRh4L8IuAAGfc+NhJY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjFlZTMwMzgtZWYyNC0z Njc3LTllZWYtNTUzODdjMDJjOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBR+I1Db3kMa5rOLPNPkMSIsbREIxzrn+VKZr5X 4jniJU9CcUWWRJRqoEx+6zfokyA7ez+40dkjGeH1VKPoinFtVNVoJZqCZhNgoRB5 FnctXJJTK9OWY6JQ1YFSDUOKekwtolOwRU+0hw/U+5A/RSUlc5z4fYQvDAumuT3/ LGjTaW1co1Rc6NW90Lo6jh2fWMqzhsPBdmb3Q9BXmJP55NDamsfIjiB8ie7nW29F uoKqpk0CVr4dod52EbwTCZtmp84lRp/nvzA9T5EXYAUdQ5u98oWRK+WmacYLqbUk IZp7OZSixkZbAwnnSQgiPIIwPEgdqbzuaR62MOGYm8fC8t0m -----END CERTIFICATE-----Generated at Mon Jun 30 15:11:53 2025 by rpki-client