$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa File: cfded054-1811-38b0-8f95-949d444242c5.roa (raw, json) Hash identifier: 2+puWGoC1n2pYDF6w4vAdjutXnnkHwH75nKQc57KRJU= Subject key identifier: A6:13:6D:D0:9E:72:43:08:A6:32:A5:9C:FE:93:00:49:C9:30:59:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411066E5ACDB03E0025DB980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396551 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:66:e5:ac:db:03:e0:02:5d:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=c04dfe00-72f9-40a6-9379-4d2a42d539b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:46:6a:6e:4a:84:9a:2a:19:91:c6:22:1b: f4:95:db:c7:c2:3c:28:e8:87:d3:87:9c:67:16:ba: 97:66:e5:17:c7:ed:a5:f5:0f:81:7c:ac:68:e3:3c: 39:cb:3c:5d:0e:8f:d7:45:ea:5f:73:db:ad:e2:ce: e6:3a:e3:86:1a:7c:f5:68:e5:6e:bb:2b:5b:f0:58: c2:4f:34:f0:18:24:51:ad:11:aa:60:75:2c:c5:ac: 7d:d5:3b:15:86:fa:c6:31:1a:08:d0:91:6c:56:fa: 79:51:45:8a:53:ba:16:68:b4:52:1e:b5:c6:f4:71: fc:24:ca:25:cd:d2:ce:2c:f0:7a:11:10:c6:bf:83: 05:f5:74:a1:87:63:69:5d:1d:90:59:4c:9d:35:7c: 02:53:75:30:66:0b:25:61:3f:d3:89:76:d0:b3:8c: 0c:8d:dd:4b:6f:2d:f5:08:18:34:7a:41:1e:de:37: ee:b3:54:27:eb:71:0e:74:d3:9b:b3:45:cd:96:bc: a5:fe:e1:cc:90:8e:20:d1:2f:60:3b:eb:40:4d:23: d0:18:c7:55:86:76:5c:72:57:83:d7:79:fc:5e:97: 86:63:56:20:7e:89:bb:89:78:4d:f0:cf:e3:bc:b4: 9e:c9:6b:b1:18:b3:4f:9b:c0:12:48:4b:9a:ee:5f: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:13:6D:D0:9E:72:43:08:A6:32:A5:9C:FE:93:00:49:C9:30:59:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:da:f8:77:49:66:46:02:ef:8f:c4:4e:e0:19:f6:14:64:b2: b0:b4:5e:e2:56:be:4d:b4:c2:7e:6c:e8:88:b9:e7:76:71:9a: 0f:59:c7:a7:68:3d:73:62:15:c1:cf:01:6f:d0:3a:8e:a2:e0: c3:0c:0f:31:4f:89:d2:c8:e6:ce:f7:49:0c:dd:f4:0a:6d:dc: e4:e3:20:5e:ce:6b:ad:da:7a:ef:25:32:05:af:0d:50:6d:87: 27:76:59:6f:2b:01:81:0e:52:c5:70:45:16:01:b4:77:c2:a1: 76:fa:68:cf:c1:f3:80:ff:6c:8c:61:be:85:e9:ac:20:59:c8: 77:ad:3e:4e:51:3d:b1:48:0d:bb:e8:f4:58:ae:a2:b7:89:69: 93:52:aa:86:04:36:e7:d3:c4:8e:29:6e:90:7e:fa:44:71:72: 84:d3:37:39:11:9a:ea:0e:e8:fb:5f:8b:74:56:f1:7b:eb:63: a3:a3:46:fb:b3:f8:28:e4:e8:fd:70:6e:92:d4:2e:a8:06:7d: 24:e9:8a:0a:bc:16:14:19:d2:bc:6c:0c:1a:6f:c1:5b:98:a5: cc:93:ee:a5:9a:94:af:f7:8b:1c:5f:cc:4e:f9:f4:de:0a:2c: c5:19:ed:fd:ef:bb:26:f7:8a:f1:2c:c5:97:ff:df:bc:6a:94: 76:9a:42:6d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGblrNsD4AJduYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YzA0ZGZlMDAtNzJmOS00MGE2LTkzNzktNGQyYTQyZDUzOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXVGam5KhJoqGZHGIhv0ldvHwjwo6IfTh5xn FrqXZuUXx+2l9Q+BfKxo4zw5yzxdDo/XRepfc9ut4s7mOuOGGnz1aOVuuytb8FjC TzTwGCRRrRGqYHUsxax91TsVhvrGMRoI0JFsVvp5UUWKU7oWaLRSHrXG9HH8JMol zdLOLPB6ERDGv4MF9XShh2NpXR2QWUydNXwCU3UwZgslYT/TiXbQs4wMjd1Lby31 CBg0ekEe3jfus1Qn63EOdNObs0XNlryl/uHMkI4g0S9gO+tATSPQGMdVhnZccleD 13n8XpeGY1Ygfom7iXhN8M/jvLSeyWuxGLNPm8ASSEua7l/JPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKYTbdCeckMIpjKlnP6TAEnJMFl+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2ZkZWQwNTQtMTgxMS0z OGIwLThmOTUtOTQ5ZDQ0NDI0MmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAG2vh3SWZGAu+PxE7gGfYUZLKwtF7iVr5NtMJ+ bOiIued2cZoPWcenaD1zYhXBzwFv0DqOouDDDA8xT4nSyObO90kM3fQKbdzk4yBe zmut2nrvJTIFrw1QbYcndllvKwGBDlLFcEUWAbR3wqF2+mjPwfOA/2yMYb6F6awg Wch3rT5OUT2xSA276PRYrqK3iWmTUqqGBDbn08SOKW6QfvpEcXKE0zc5EZrqDuj7 X4t0VvF762Ojo0b7s/go5Oj9cG6S1C6oBn0k6YoKvBYUGdK8bAwab8FbmKXMk+6l mpSv94scX8xO+fTeCizFGe3977sm94rxLMWX/9+8apR2mkJt -----END CERTIFICATE-----Generated at Mon Jun 30 09:40:45 2025 by rpki-client