$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbdaa374-ba6e-31b2-818c-703e43f0b913.roa File: cbdaa374-ba6e-31b2-818c-703e43f0b913.roa (raw, json) Hash identifier: DVJ+lJO4b7w88ttA2TDsj8EBJLnX6KP9qzuWdAFbB3o= Subject key identifier: 1A:2D:1D:5A:6D:0B:F7:0C:57:0A:0D:6E:9A:EC:56:55:98:0F:74:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A41106999F0060A0C26319700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbdaa374-ba6e-31b2-818c-703e43f0b913.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 36618 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:69:99:f0:06:0a:0c:26:31:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=f53b2e8e-321b-4f32-89d4-1ca7729f6e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3a:63:9d:66:d8:2b:f8:36:c5:ea:af:59:ea: 75:20:38:d4:ae:84:75:24:1d:42:18:d4:74:a9:e6: d8:e8:14:6d:cc:5b:ad:7b:11:8e:2d:b2:45:e3:4d: 5c:94:f2:ac:13:d2:60:26:14:c0:78:e8:00:25:1a: 29:8c:4f:25:0d:f1:51:78:74:d2:10:76:e1:4f:79: 7a:ba:f7:83:bd:62:8d:81:6e:88:d3:05:d3:f4:50: 41:72:45:f0:20:9e:10:53:c6:bf:f3:7f:64:de:9d: 41:89:01:f0:30:ec:2e:78:ff:3c:fb:6b:18:02:1a: 5e:90:b2:be:dd:d4:3c:c2:e0:85:b8:a4:c7:75:8b: 5a:ee:94:6d:6f:cc:00:a0:86:a7:47:91:ee:04:ba: 67:0c:a2:1d:aa:bb:94:1d:85:42:aa:a0:e1:4a:9f: 4d:88:af:e0:58:6f:59:ce:d3:91:cc:26:94:78:a4: 8e:ea:a6:b5:8a:19:91:3e:a6:e0:25:27:93:9b:00: ea:9d:5f:69:70:bb:48:b6:36:e4:6d:54:1a:79:a0: 72:55:f0:a2:47:fb:f1:01:60:97:0d:74:44:3e:8c: 84:69:6c:7c:4b:9d:55:e4:79:06:2f:ab:c2:be:0f: 52:e7:63:f2:aa:6b:c9:7c:11:97:06:8c:1c:30:c1: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2D:1D:5A:6D:0B:F7:0C:57:0A:0D:6E:9A:EC:56:55:98:0F:74:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbdaa374-ba6e-31b2-818c-703e43f0b913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c9:1d:da:74:2a:f6:ce:07:2c:6f:66:6f:8e:b0:00:e6:b0: c9:8b:69:db:cc:60:0a:89:69:a7:7a:2b:90:56:25:6c:43:28: 34:54:11:7a:4f:25:66:dc:7b:03:5c:9c:f1:74:5f:98:43:bc: 70:12:dc:41:01:9b:af:ef:a0:2e:d9:de:c8:0b:a3:5a:83:3b: 6b:ee:76:53:ce:84:9c:86:99:cf:a4:40:ea:74:2b:e9:c4:b7: 4a:2d:d4:f1:a1:fa:0a:3f:ff:b0:c4:39:69:bf:d5:7f:9b:56: 5b:b0:35:37:b9:4c:cd:0c:95:54:da:07:25:28:ea:64:b6:c5: 4d:69:84:83:cb:52:3c:01:f8:fb:91:5b:2b:df:02:87:3f:e9: f4:67:48:72:2e:b6:a9:af:62:bb:89:c6:e0:f4:e0:10:92:b0: 11:f0:0b:30:d2:fd:83:1a:ba:81:24:93:1f:10:a8:52:97:99: 02:0b:03:23:74:71:11:5a:e2:b3:7c:da:22:fa:bc:03:30:db: c9:c0:62:29:c3:57:24:53:03:8d:f0:0b:cd:df:ac:b2:87:64: 57:ba:36:90:f5:a5:9a:b1:3b:c4:ea:c2:66:d7:7c:61:e1:22: e0:a5:02:47:10:15:98:ae:93:8b:53:c0:9f:35:f8:bc:b8:5a: 02:0b:39:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGmZ8AYKDCYxlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZjUzYjJlOGUtMzIxYi00ZjMyLTg5ZDQtMWNhNzcyOWY2ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizpjnWbYK/g2xeqvWep1IDjUroR1JB1CGNR0 qebY6BRtzFutexGOLbJF401clPKsE9JgJhTAeOgAJRopjE8lDfFReHTSEHbhT3l6 uveDvWKNgW6I0wXT9FBBckXwIJ4QU8a/839k3p1BiQHwMOwueP88+2sYAhpekLK+ 3dQ8wuCFuKTHdYta7pRtb8wAoIanR5HuBLpnDKIdqruUHYVCqqDhSp9NiK/gWG9Z ztORzCaUeKSO6qa1ihmRPqbgJSeTmwDqnV9pcLtItjbkbVQaeaByVfCiR/vxAWCX DXREPoyEaWx8S51V5HkGL6vCvg9S52PyqmvJfBGXBowcMMEhoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBotHVptC/cMVwoNbprsVlWYD3QFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2JkYWEzNzQtYmE2ZS0z MWIyLTgxOGMtNzAzZTQzZjBiOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvyR3adCr2zgcsb2ZvjrAA5rDJi2nbzGAKiWmn eiuQViVsQyg0VBF6TyVm3HsDXJzxdF+YQ7xwEtxBAZuv76Au2d7IC6Nagztr7nZT zoSchpnPpEDqdCvpxLdKLdTxofoKP/+wxDlpv9V/m1ZbsDU3uUzNDJVU2gclKOpk tsVNaYSDy1I8Afj7kVsr3wKHP+n0Z0hyLrapr2K7icbg9OAQkrAR8Asw0v2DGrqB JJMfEKhSl5kCCwMjdHERWuKzfNoi+rwDMNvJwGIpw1ckUwON8AvN36yyh2RXujaQ 9aWasTvE6sJm13xh4SLgpQJHEBWYrpOLU8CfNfi8uFoCCzm1 -----END CERTIFICATE-----Generated at Sun Jun 29 23:44:41 2025 by rpki-client