$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4c34597-50af-3811-80f1-06ac34328bc0.roa File: d4c34597-50af-3811-80f1-06ac34328bc0.roa (raw, json) Hash identifier: F2BZIukLogxzI5qO7iN0Dd/yZkzxLP1xh/qlm92sfhs= Subject key identifier: F4:50:DB:2C:9B:8D:4A:51:F6:EF:BE:1C:90:48:94:B4:01:B8:53:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411064DB0FF484624DCF44B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4c34597-50af-3811-80f1-06ac34328bc0.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 36625 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:64:db:0f:f4:84:62:4d:cf:44:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=ee5713cf-9e41-4495-8281-ad3b03b6351e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:b8:b4:a4:0b:d3:b1:cb:d9:83:c1:ea:14: b6:66:7f:8e:69:7e:fc:60:1f:ee:f6:ea:84:41:e8: 00:22:a7:ca:e2:7c:1e:ee:dc:b7:8e:fd:9c:b5:e1: 05:da:17:50:48:3f:19:9b:0e:cf:73:87:8c:cb:3a: 13:b1:f2:a6:9a:fd:92:57:fe:48:e8:3b:f6:3b:f1: c3:5a:bc:66:e2:bd:4f:b6:d6:f0:79:0b:cb:06:ad: 4b:cc:3f:38:d3:78:63:05:b4:b4:4b:93:0e:36:5e: 09:58:d7:86:5e:71:a3:c3:65:b4:59:0a:31:d7:1d: eb:db:b5:c3:4c:a3:c0:43:b6:ea:86:59:4b:b9:4d: 43:ae:88:23:fe:58:ef:eb:9f:e6:cf:5f:4d:de:e5: 43:29:68:b8:ad:81:14:a7:6e:a9:56:c4:ed:43:a3: d7:e3:64:b1:ee:45:35:1d:5f:82:ab:90:2f:14:b3: 12:20:8d:33:b2:0a:62:b1:b2:62:a4:a1:3b:b7:c9: 71:6d:6e:60:5c:96:f6:cf:68:8f:fd:33:80:c7:1e: 71:6e:0b:1f:93:45:cd:2f:67:fc:2a:1c:c9:f3:76: d1:d0:0b:af:2e:fb:8b:d7:d5:47:14:8b:9d:3f:7a: 97:b1:a5:54:db:f0:b4:14:3a:16:ce:a5:80:19:7e: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:50:DB:2C:9B:8D:4A:51:F6:EF:BE:1C:90:48:94:B4:01:B8:53:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4c34597-50af-3811-80f1-06ac34328bc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d2:bc:9f:20:79:1b:62:bf:60:ce:5d:7c:18:e0:d4:f5:5d: 76:28:f2:ae:ec:22:12:a1:3f:48:ab:e6:c4:8e:92:e2:79:1d: 87:2f:b7:67:cc:26:d0:7f:2a:82:09:3e:75:bd:f7:f8:4a:95: 48:49:cc:78:dd:35:15:f8:71:58:9a:2a:87:02:18:1b:04:9d: a9:69:72:33:02:e3:77:65:21:d0:cb:ac:f1:29:5c:32:4f:e1: 27:05:48:06:81:4f:8d:ec:be:61:dc:db:f1:12:65:07:b3:64: ef:c4:96:af:d2:05:f5:c3:91:18:b4:9d:3f:18:a4:e4:85:7d: d3:74:d9:a9:90:8b:8d:3b:f8:83:e5:f2:bd:f6:58:73:e7:14: 6e:74:4f:ef:3a:75:bc:03:f0:b2:6d:da:48:f3:7a:99:a0:01: cf:34:75:ec:c4:a8:b0:8c:73:83:e8:a7:6f:57:25:44:9b:2c: 6a:ec:b0:c3:1e:ba:3a:aa:63:c7:ef:06:7b:be:4f:e9:c2:aa: e5:83:03:0b:ba:64:fd:4a:61:1c:fa:c8:d6:6d:30:60:2d:9b: b7:3c:4e:ad:03:e1:c4:c6:c9:ab:b8:ef:dc:3c:31:8b:3e:1f: 25:0a:0f:8f:fe:95:a6:b4:3e:34:7b:4d:fa:36:8f:c8:a6:73: ba:39:c6:cc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGTbD/SEYk3PRLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZWU1NzEzY2YtOWU0MS00NDk1LTgyODEtYWQzYjAzYjYzNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMq4tKQL07HL2YPB6hS2Zn+OaX78YB/u9uqE QegAIqfK4nwe7ty3jv2cteEF2hdQSD8Zmw7Pc4eMyzoTsfKmmv2SV/5I6Dv2O/HD Wrxm4r1PttbweQvLBq1LzD8403hjBbS0S5MONl4JWNeGXnGjw2W0WQox1x3r27XD TKPAQ7bqhllLuU1Drogj/ljv65/mz19N3uVDKWi4rYEUp26pVsTtQ6PX42Sx7kU1 HV+Cq5AvFLMSII0zsgpisbJipKE7t8lxbW5gXJb2z2iP/TOAxx5xbgsfk0XNL2f8 KhzJ83bR0AuvLvuL19VHFIudP3qXsaVU2/C0FDoWzqWAGX6oRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPRQ2yybjUpR9u++HJBIlLQBuFPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDRjMzQ1OTctNTBhZi0z ODExLTgwZjEtMDZhYzM0MzI4YmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBb0ryfIHkbYr9gzl18GODU9V12KPKu7CISoT9I q+bEjpLieR2HL7dnzCbQfyqCCT51vff4SpVIScx43TUV+HFYmiqHAhgbBJ2paXIz AuN3ZSHQy6zxKVwyT+EnBUgGgU+N7L5h3NvxEmUHs2TvxJav0gX1w5EYtJ0/GKTk hX3TdNmpkIuNO/iD5fK99lhz5xRudE/vOnW8A/CybdpI83qZoAHPNHXsxKiwjHOD 6KdvVyVEmyxq7LDDHro6qmPH7wZ7vk/pwqrlgwMLumT9SmEc+sjWbTBgLZu3PE6t A+HExsmruO/cPDGLPh8lCg+P/pWmtD40e036No/IpnO6OcbM -----END CERTIFICATE-----Generated at Tue Jul 1 18:03:31 2025 by rpki-client