$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa File: beaf5995-a580-35dc-b4a9-719173ffda0e.roa (raw, json) Hash identifier: PZZ8anCs9699v5uqoWJtJwjKaavfSdMyMw3a4G/f4Fw= Subject key identifier: 7D:E7:ED:0A:49:2F:70:26:5C:A3:88:98:28:DA:AD:D5:60:56:BF:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106A9D0F9D8BF8F44FCA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396593 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:6a:9d:0f:9d:8b:f8:f4:4f:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=fabbd3fb-d5fd-4903-8f09-7b502018f1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:6f:b1:e4:fe:70:3a:b7:bf:e0:c7:dc:a9: a8:74:f5:ce:ad:c7:a9:a0:9c:a4:9a:76:ff:8b:ef: af:8b:5e:63:b9:ac:30:56:f4:2e:8a:8f:71:fc:55: 3e:f1:c2:d8:e5:25:bc:90:93:8b:3e:11:52:34:4c: 7f:49:b6:8f:fa:84:6b:98:a0:41:f5:9e:62:d3:62: a7:da:de:84:f8:25:9a:37:ec:5b:65:27:b0:fd:b4: db:1c:3b:ca:48:90:60:2b:c3:f5:8e:57:4f:1b:c8: 21:70:50:24:e8:da:36:16:3b:ad:fc:50:32:96:8d: f9:26:46:15:53:f0:6a:6d:c5:3f:4d:33:81:93:4d: 39:13:60:78:06:a6:ce:b3:c2:2e:91:2f:dc:3f:de: bc:44:34:79:92:43:f7:8a:eb:1c:1f:ae:1d:61:cc: c9:31:33:3e:9d:32:94:8c:3a:1c:20:d2:b1:aa:82: 79:d5:61:0d:9a:9b:d3:e7:69:8c:dc:98:81:1d:af: d7:be:bc:3a:aa:45:9f:24:9b:58:d0:30:16:f8:d4: a1:37:0d:51:88:ce:b3:76:58:aa:a5:dd:20:71:4f: bd:e9:7a:f4:3e:2c:10:86:29:0a:f9:68:08:5d:c6: 23:b5:f0:30:04:4b:68:ab:22:67:97:1e:48:ea:c2: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:ED:0A:49:2F:70:26:5C:A3:88:98:28:DA:AD:D5:60:56:BF:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:3c:a4:00:be:3a:22:b4:bd:b1:3c:4f:f6:a3:41:0d:af:ea: e5:a7:13:63:24:0a:c5:ed:a8:d1:46:47:dc:ed:61:dd:12:4d: fe:76:7e:75:b7:43:1d:48:3b:88:94:8c:af:b3:4f:9d:b1:db: 5f:7d:60:e3:4c:47:d6:62:f9:4c:f6:83:68:90:20:58:57:6c: a8:3e:01:7a:49:cc:e4:01:23:18:2d:18:3c:18:35:81:39:90: 39:27:94:bf:d6:ee:fc:16:ba:56:c0:92:4d:9c:91:1b:cb:0a: 32:3c:ca:11:65:9d:f7:cc:dc:91:98:5e:6e:51:f9:d6:d8:a7: ee:24:54:9a:5c:2d:61:1c:15:ba:fe:68:76:53:98:c8:0f:89: fa:c1:13:00:03:ff:c4:c7:62:7e:10:76:b2:67:5b:67:6b:e9: cf:4e:ec:72:dd:5d:4b:c5:e7:31:a1:e0:70:d8:aa:ad:36:f7: c5:68:0b:d3:c0:94:bb:dd:e0:37:02:f8:e7:e6:d4:01:bc:cb: ef:ca:cc:eb:93:13:2d:07:3b:fd:b8:a1:96:03:b6:81:48:52: 3f:cf:94:d9:4e:cc:14:fa:fa:dc:65:b8:74:75:9d:4c:7f:67: f7:a9:25:da:2c:07:22:3a:e0:f8:99:c3:ef:10:ef:c9:a6:2c: a6:6a:43:ef -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGqdD52L+PRPyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZmFiYmQzZmItZDVmZC00OTAzLThmMDktN2I1MDIwMThmMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZFvseT+cDq3v+DH3KmodPXOrcepoJykmnb/ i++vi15juawwVvQuio9x/FU+8cLY5SW8kJOLPhFSNEx/SbaP+oRrmKBB9Z5i02Kn 2t6E+CWaN+xbZSew/bTbHDvKSJBgK8P1jldPG8ghcFAk6No2Fjut/FAylo35JkYV U/BqbcU/TTOBk005E2B4BqbOs8IukS/cP968RDR5kkP3iuscH64dYczJMTM+nTKU jDocINKxqoJ51WENmpvT52mM3JiBHa/Xvrw6qkWfJJtY0DAW+NShNw1RiM6zdliq pd0gcU+96Xr0PiwQhikK+WgIXcYjtfAwBEtoqyJnlx5I6sIONQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH3n7QpJL3AmXKOImCjardVgVr9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmVhZjU5OTUtYTU4MC0z NWRjLWI0YTktNzE5MTczZmZkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBbPKQAvjoitL2xPE/2o0ENr+rlpxNjJArF7ajR Rkfc7WHdEk3+dn51t0MdSDuIlIyvs0+dsdtffWDjTEfWYvlM9oNokCBYV2yoPgF6 SczkASMYLRg8GDWBOZA5J5S/1u78FrpWwJJNnJEbywoyPMoRZZ33zNyRmF5uUfnW 2KfuJFSaXC1hHBW6/mh2U5jID4n6wRMAA//Ex2J+EHayZ1tna+nPTuxy3V1Lxecx oeBw2KqtNvfFaAvTwJS73eA3Avjn5tQBvMvvyszrkxMtBzv9uKGWA7aBSFI/z5TZ TswU+vrcZbh0dZ1Mf2f3qSXaLAciOuD4mcPvEO/JpiymakPv -----END CERTIFICATE-----Generated at Tue Jul 1 01:03:09 2025 by rpki-client