$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b35eb4d8-0103-311a-b7ef-4256a2052aee.roa File: b35eb4d8-0103-311a-b7ef-4256a2052aee.roa (raw, json) Hash identifier: kHNUZ7/UjbWSjO8MVYZVJ6PS0Ek0HqOek1boql/Kryw= Subject key identifier: 21:8E:FD:C3:10:A9:5D:64:E4:B0:38:E5:6E:45:A6:15:56:4E:F5:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B32B4B9B391F46A430CF0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b35eb4d8-0103-311a-b7ef-4256a2052aee.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 396570 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:32:b4:b9:b3:91:f4:6a:43:0c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=16849acd-f4a4-444c-b1ae-ecc4474e062f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:8e:b3:0a:fc:8f:55:8c:23:f6:87:6d:a6: 7f:cc:63:e3:66:3d:82:78:0d:54:32:2d:ef:45:4d: 0e:4b:07:1a:17:92:07:67:91:98:30:c1:19:86:c0: ea:e1:c0:53:29:78:c7:66:eb:67:fc:0b:15:cf:70: 9f:23:03:6f:9f:88:f5:d2:4f:94:7c:54:20:33:e1: 49:e2:fc:9e:b7:27:55:7b:aa:83:60:4b:8a:e0:bf: 9e:62:ce:3a:1f:f2:ca:bc:2d:d5:f7:38:1f:b8:95: ad:70:e9:28:ee:f4:51:ed:0f:94:cb:64:90:b8:c0: 49:00:83:e4:dd:82:ba:9c:82:fe:70:0a:cb:46:c5: a3:74:e2:9c:a8:37:d6:73:72:3f:4d:49:d0:18:c5: a5:79:6e:eb:c6:6d:92:73:9a:0b:ca:c1:b8:83:f6: b3:35:1f:65:b3:30:33:73:98:0f:2d:98:d9:9e:17: e7:5f:55:68:cd:61:02:52:35:2f:c6:3d:57:18:19: b3:cf:38:59:8f:06:33:f4:21:9b:18:2a:6a:ce:ef: ac:39:06:e9:8e:0e:64:5a:44:e6:49:c2:47:0f:64: 71:78:ee:ec:3a:f7:22:62:3f:7a:ba:14:a8:c6:00: 56:d2:da:68:b9:5c:fc:13:f7:85:e6:af:64:96:14: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8E:FD:C3:10:A9:5D:64:E4:B0:38:E5:6E:45:A6:15:56:4E:F5:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b35eb4d8-0103-311a-b7ef-4256a2052aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7e:30:f8:ca:3a:6f:77:b3:56:ae:13:e7:77:71:ea:41:40: f6:4b:0d:e1:da:3d:25:4c:bf:dc:f5:ba:d9:c7:a0:bb:43:35: 91:bf:4e:1d:dd:3f:91:94:32:15:56:c9:d9:2d:93:da:ab:89: f1:34:28:43:e3:f9:b9:16:99:f6:77:a8:a8:81:41:c3:6a:9c: ac:f6:6b:12:30:38:24:f0:db:bc:ab:6e:c4:2c:bf:18:55:55: 25:75:fe:f9:5d:96:f9:8d:7f:24:65:3b:8c:d1:bf:dc:3e:3f: bc:3b:82:1e:eb:be:d6:8d:6d:0b:31:85:a4:b9:66:18:35:ae: 4d:08:9c:f7:fb:31:8f:d5:bb:d8:bd:7e:0a:cd:51:7b:f5:21: 59:31:a0:82:ce:ab:87:8e:1b:0a:0d:0a:0b:24:3f:1b:c0:77: e1:73:98:f5:a5:b8:8c:d4:8d:11:be:d4:4a:22:d8:04:11:51: 8e:9b:94:ad:32:b7:8b:df:b9:fe:e8:ef:f2:09:90:24:97:93: 57:06:98:ac:b8:3e:b4:8d:6b:f7:7c:ef:31:4e:fd:3e:51:51: d4:2f:7d:7e:4c:a2:cd:8d:aa:83:f4:ca:81:52:7c:a3:cd:15: 5b:c8:41:bc:91:b4:fa:1a:02:62:a3:7c:5a:bd:9e:2a:22:3c: 72:a1:c7:e0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmzK0ubOR9GpDDPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MTY4NDlhY2QtZjRhNC00NDRjLWIxYWUtZWNjNDQ3NGUwNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3uOswr8j1WMI/aHbaZ/zGPjZj2CeA1UMi3v RU0OSwcaF5IHZ5GYMMEZhsDq4cBTKXjHZutn/AsVz3CfIwNvn4j10k+UfFQgM+FJ 4vyetydVe6qDYEuK4L+eYs46H/LKvC3V9zgfuJWtcOko7vRR7Q+Uy2SQuMBJAIPk 3YK6nIL+cArLRsWjdOKcqDfWc3I/TUnQGMWleW7rxm2Sc5oLysG4g/azNR9lszAz c5gPLZjZnhfnX1VozWECUjUvxj1XGBmzzzhZjwYz9CGbGCpqzu+sOQbpjg5kWkTm ScJHD2RxeO7sOvciYj96uhSoxgBW0tpouVz8E/eF5q9klhR/2QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCGO/cMQqV1k5LA45W5FphVWTvWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM1ZWI0ZDgtMDEwMy0z MTFhLWI3ZWYtNDI1NmEyMDUyYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPfjD4yjpvd7NWrhPnd3HqQUD2Sw3h2j0lTL/c 9brZx6C7QzWRv04d3T+RlDIVVsnZLZPaq4nxNChD4/m5Fpn2d6iogUHDapys9msS MDgk8Nu8q27ELL8YVVUldf75XZb5jX8kZTuM0b/cPj+8O4Ie677WjW0LMYWkuWYY Na5NCJz3+zGP1bvYvX4KzVF79SFZMaCCzquHjhsKDQoLJD8bwHfhc5j1pbiM1I0R vtRKItgEEVGOm5StMreL37n+6O/yCZAkl5NXBpisuD60jWv3fO8xTv0+UVHUL31+ TKLNjaqD9MqBUnyjzRVbyEG8kbT6GgJio3xavZ4qIjxyocfg -----END CERTIFICATE-----Generated at Sun Jun 29 23:22:14 2025 by rpki-client