$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa File: db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa (raw, json) Hash identifier: AcCLlV8ZB9KOEM0zZCM+plBu3cjnJ6u+cc8PQhUTGv4= Subject key identifier: C3:5D:CC:53:E5:D9:04:C7:F7:7B:93:A6:F2:F9:9B:4D:70:53:16:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2CCA1AB85806D2105620 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 397207 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2c:ca:1a:b8:58:06:d2:10:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=cc23f447-b2d5-4f90-bf44-c19cceab87dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:65:e5:b7:14:91:59:31:42:0f:ef:d5:98: b2:c3:75:0e:d1:5f:43:79:20:cb:07:5e:9e:68:af: 95:81:14:7b:10:32:81:3c:e7:cc:77:38:d7:64:80: 7c:3b:67:35:da:bc:ea:da:1a:d5:a0:90:06:12:ea: f8:11:b8:e2:65:d0:c6:b0:52:ca:61:a1:a9:de:95: cd:75:aa:e9:93:ff:ba:3a:ad:4b:bc:71:0c:de:e4: ff:db:bc:8f:b1:00:ff:5a:ce:77:42:a8:00:8f:6c: a7:4a:7b:79:dc:d4:44:54:cf:2c:2e:f5:c7:c7:12: 18:71:af:a7:4d:33:f8:cb:ed:e5:5e:8e:e4:8e:d4: a8:f6:18:2c:87:99:1a:82:d6:97:65:a2:13:87:97: 58:72:2d:eb:d6:16:37:d6:b5:97:1f:b5:77:5d:9c: a3:0b:b9:3e:b8:c9:54:11:f2:ed:87:39:56:23:d1: 65:f5:cc:fc:c6:a2:84:dd:3f:a2:e5:02:d4:cd:fd: 86:91:a2:55:d0:b5:0d:95:d7:8d:a5:09:b5:8f:9e: 98:31:da:ff:4b:91:81:cd:f2:b2:ab:0b:99:23:c5: e6:4c:dd:09:45:e9:61:33:90:52:8d:6d:25:03:e4: 71:34:46:bd:c7:5d:ea:bf:68:e2:26:53:9f:20:ab: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5D:CC:53:E5:D9:04:C7:F7:7B:93:A6:F2:F9:9B:4D:70:53:16:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:29:0e:cc:6f:7b:6c:72:95:74:78:a1:42:7d:cb:ed:7a:18: 0d:f1:66:ad:d7:8e:54:b4:ed:27:61:a8:27:85:0a:61:e3:1f: f8:e3:08:c1:49:a7:62:14:c3:68:90:4f:1d:96:a4:ae:71:a9: fe:7a:2d:96:8d:2c:12:01:ca:ed:b8:8f:b2:f7:c5:7b:bf:06: 6a:82:9a:cd:7d:6c:52:a4:7a:41:7d:ae:7b:bf:48:22:70:4d: b7:ee:04:86:32:a2:dd:25:3f:45:76:64:2e:32:41:6a:b7:bc: 24:a4:9a:75:dd:d0:3c:a7:73:cd:b9:28:a5:65:39:ae:36:af: a2:61:59:8e:c2:92:91:66:92:d5:ad:19:74:b3:d3:46:14:86: 7e:e6:ea:79:0b:af:1f:cc:0a:c4:c4:da:d0:77:ae:bc:6e:a0: ea:0d:aa:aa:f8:de:b7:9c:1a:59:1b:b2:c3:2d:4c:a3:3d:a3: 9d:7c:f3:1e:d6:f9:6e:f0:11:ee:1f:b7:11:26:2d:5f:f6:be: ca:c9:23:fe:e1:13:74:e6:9f:1b:6b:0b:8f:7f:db:b3:57:41: 42:5c:e3:3d:3d:39:5e:5a:ca:57:60:3e:f7:7c:60:fd:10:e6: b1:d2:61:6d:98:bd:c4:85:cc:dc:c2:01:b7:d1:92:26:7b:d0: 9c:50:62:c9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmyzKGrhYBtIQViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk Y2MyM2Y0NDctYjJkNS00ZjkwLWJmNDQtYzE5Y2NlYWI4N2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlhl5bcUkVkxQg/v1Ziyw3UO0V9DeSDLB16e aK+VgRR7EDKBPOfMdzjXZIB8O2c12rzq2hrVoJAGEur4EbjiZdDGsFLKYaGp3pXN darpk/+6Oq1LvHEM3uT/27yPsQD/Ws53QqgAj2ynSnt53NREVM8sLvXHxxIYca+n TTP4y+3lXo7kjtSo9hgsh5kagtaXZaITh5dYci3r1hY31rWXH7V3XZyjC7k+uMlU EfLthzlWI9Fl9cz8xqKE3T+i5QLUzf2GkaJV0LUNldeNpQm1j56YMdr/S5GBzfKy qwuZI8XmTN0JRelhM5BSjW0lA+RxNEa9x13qv2jiJlOfIKtUawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMNdzFPl2QTH93uTpvL5m01wUxacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0MmUzMGEtOTljZi0z Y2RkLTkwYjEtODkwMWU1ZjAzYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPKQ7Mb3tscpV0eKFCfcvtehgN8Wat145UtO0n YagnhQph4x/44wjBSadiFMNokE8dlqSucan+ei2WjSwSAcrtuI+y98V7vwZqgprN fWxSpHpBfa57v0gicE237gSGMqLdJT9FdmQuMkFqt7wkpJp13dA8p3PNuSilZTmu Nq+iYVmOwpKRZpLVrRl0s9NGFIZ+5up5C68fzArExNrQd668bqDqDaqq+N63nBpZ G7LDLUyjPaOdfPMe1vlu8BHuH7cRJi1f9r7KySP+4RN05p8bawuPf9uzV0FCXOM9 PTleWspXYD73fGD9EOax0mFtmL3EhczcwgG30ZIme9CcUGLJ -----END CERTIFICATE-----Generated at Sun Jun 29 23:18:37 2025 by rpki-client