$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3df7adf-e885-3ee7-8f6b-e538975a9aa2.roa File: c3df7adf-e885-3ee7-8f6b-e538975a9aa2.roa (raw, json) Hash identifier: xszm9+qyh208nTIizLCw1JxpCkWvRWT+jpopKsWfz/0= Subject key identifier: 5F:04:2D:B5:77:71:98:A9:06:73:C3:AB:5A:81:39:D6:29:A0:73:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411068DA012002D1F61D5770 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3df7adf-e885-3ee7-8f6b-e538975a9aa2.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396604 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:68:da:01:20:02:d1:f6:1d:57:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=1f4c091e-f6cf-44c7-8eb8-d6dce98d4be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:89:0f:57:e0:8a:be:bf:a6:62:4d:95:76:96: 04:16:00:a5:d7:8f:d7:3b:19:3a:70:60:df:b1:87: 04:9e:4a:09:7e:3b:45:34:59:04:ea:04:45:d5:f3: e9:86:ae:be:04:1e:da:84:7a:50:da:ee:ef:b1:cc: ab:dc:91:99:65:5f:72:5c:b3:f5:65:ef:c5:3c:5a: 25:aa:b7:eb:69:1b:0e:2b:b1:63:c4:21:87:20:b2: 05:99:05:96:4e:3d:54:85:c4:c9:2d:bf:06:84:0b: 0c:ba:c0:c8:85:94:d7:f6:95:9f:40:e6:7d:17:2c: 8e:8a:6f:b0:67:f3:03:76:c9:cb:4f:21:dc:d5:0a: df:b4:71:e8:43:2d:a3:82:b9:cf:d3:35:71:ab:56: 0f:5e:04:d8:d9:4e:f3:56:3d:3f:b4:ba:1d:c0:46: c7:27:ee:82:03:4a:07:cd:ff:8e:fd:1d:b1:32:5f: ff:74:7f:b0:e0:ff:85:29:23:91:6e:68:d1:d0:8c: 92:57:5b:48:f8:17:18:1f:c5:ad:f3:5e:e3:2a:a7: 22:58:a4:06:bd:0b:f3:ef:4d:af:e7:f0:5b:ae:43: 58:c0:b5:e5:f5:bb:a2:4a:70:ea:e0:68:1f:ec:db: 71:28:1c:ab:4e:a2:94:69:f7:8a:ba:f6:b9:a3:4b: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:04:2D:B5:77:71:98:A9:06:73:C3:AB:5A:81:39:D6:29:A0:73:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3df7adf-e885-3ee7-8f6b-e538975a9aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ad:d8:15:dc:b7:cd:1d:5b:bd:71:a7:f6:f1:ef:b6:08:b6: 88:88:2b:bb:93:f2:57:06:42:df:e8:86:6c:64:87:17:f4:79: d3:c6:f0:a4:58:69:c2:c3:e7:08:56:8b:aa:a3:55:df:b8:de: 13:58:24:d6:69:24:d8:e6:ce:e2:6b:68:9c:34:06:39:c9:77: 42:99:25:e1:ba:2a:fa:db:33:8d:38:14:f2:66:7d:85:c0:43: 58:53:f5:f8:67:60:be:d9:b4:c9:b9:95:fe:5a:f6:5b:eb:40: 28:a3:f6:a9:ae:e8:c8:f2:57:7a:b8:0e:de:6a:f7:43:b6:29: 8b:f2:36:96:4d:5d:ea:30:84:c7:41:9c:e8:9c:6e:1e:e5:7a: 0e:15:ce:d4:06:cf:df:39:6c:d9:2e:ac:74:62:91:9f:a2:6f: 52:8f:3f:86:2c:7b:cf:d9:5a:17:8a:8d:f5:22:20:a1:b5:0c: 00:73:f4:ee:52:59:90:bd:2c:0e:4b:0c:5b:ab:f1:9e:56:60: 10:4b:b3:f6:ce:4a:c6:16:93:ee:bd:3d:ca:df:b9:d1:21:48: fc:44:d5:44:a8:fd:c6:68:08:37:bf:5b:89:fc:36:bb:87:dd: 38:0d:51:ea:82:3d:43:09:4a:fc:68:96:f8:78:95:8e:63:e7: b0:03:89:ca -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGjaASAC0fYdV3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MWY0YzA5MWUtZjZjZi00NGM3LThlYjgtZDZkY2U5OGQ0YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYkPV+CKvr+mYk2VdpYEFgCl14/XOxk6cGDf sYcEnkoJfjtFNFkE6gRF1fPphq6+BB7ahHpQ2u7vscyr3JGZZV9yXLP1Ze/FPFol qrfraRsOK7FjxCGHILIFmQWWTj1UhcTJLb8GhAsMusDIhZTX9pWfQOZ9FyyOim+w Z/MDdsnLTyHc1QrftHHoQy2jgrnP0zVxq1YPXgTY2U7zVj0/tLodwEbHJ+6CA0oH zf+O/R2xMl//dH+w4P+FKSORbmjR0IySV1tI+BcYH8Wt817jKqciWKQGvQvz702v 5/BbrkNYwLXl9buiSnDq4Ggf7NtxKByrTqKUafeKuva5o0tI0wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF8ELbV3cZipBnPDq1qBOdYpoHMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzNkZjdhZGYtZTg4NS0z ZWU3LThmNmItZTUzODk3NWE5YWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5rdgV3LfNHVu9caf28e+2CLaIiCu7k/JXBkLf 6IZsZIcX9HnTxvCkWGnCw+cIVouqo1XfuN4TWCTWaSTY5s7ia2icNAY5yXdCmSXh uir62zONOBTyZn2FwENYU/X4Z2C+2bTJuZX+WvZb60Aoo/aprujI8ld6uA7eavdD timL8jaWTV3qMITHQZzonG4e5XoOFc7UBs/fOWzZLqx0YpGfom9Sjz+GLHvP2VoX io31IiChtQwAc/TuUlmQvSwOSwxbq/GeVmAQS7P2zkrGFpPuvT3K37nRIUj8RNVE qP3GaAg3v1uJ/Da7h904DVHqgj1DCUr8aJb4eJWOY+ewA4nK -----END CERTIFICATE-----Generated at Sun Jun 29 22:27:45 2025 by rpki-client