$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de74c8c1-c141-3c4b-a62f-1ca0339a326d.roa File: de74c8c1-c141-3c4b-a62f-1ca0339a326d.roa (raw, json) Hash identifier: zv0ejccQTrs9y0gmvnDfjf+PWBsWdpxQHSCyBXsqLjs= Subject key identifier: 3B:F4:99:4A:F2:B2:F2:23:1C:45:34:3B:15:53:89:80:43:E9:DA:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411066D44DB7C071470A0260 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de74c8c1-c141-3c4b-a62f-1ca0339a326d.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396602 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:66:d4:4d:b7:c0:71:47:0a:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=8d2bba2f-3084-4c1d-89f2-91cef696f847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:71:c5:b3:d6:30:69:79:03:f0:01:78:cc: 16:44:b1:d9:c3:72:08:b3:2b:58:aa:07:d9:f8:2e: 75:75:b6:33:56:9e:ec:7d:a5:d8:b4:a2:26:4d:61: 4a:19:28:a1:8f:36:b8:c7:d3:1f:87:9c:91:7e:06: 37:21:c9:04:eb:5c:f0:99:0c:5c:27:6a:e5:a0:f9: c6:5f:55:83:8d:9d:09:69:61:14:d5:88:a1:75:4e: ab:5f:a1:b1:a2:e7:c8:b4:7c:38:bb:f0:1e:71:13: 73:62:b3:94:a7:39:48:83:a8:07:e7:79:a8:3c:2c: 62:9a:15:bd:e6:bb:31:6e:87:a6:ac:63:dd:7c:0b: f3:b7:73:1c:75:ff:d4:65:5e:5f:b5:f3:e4:90:f0: 15:75:30:9b:d8:dd:cd:46:ae:fa:3a:ec:0d:22:94: 1c:20:ac:42:96:47:47:21:65:f9:53:f5:f8:c5:e1: c8:67:80:1e:eb:ba:5c:7f:8c:af:00:0f:f0:12:6b: d7:11:05:25:af:6f:7b:e6:1a:39:7b:00:14:ba:c1: 4d:f7:f3:18:d9:95:19:d2:d2:c2:b3:0d:06:d6:aa: 3b:21:ff:dd:62:75:38:b2:04:37:18:4f:62:7b:7b: 5f:c2:39:65:28:57:27:df:29:64:02:61:26:28:a5: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:99:4A:F2:B2:F2:23:1C:45:34:3B:15:53:89:80:43:E9:DA:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de74c8c1-c141-3c4b-a62f-1ca0339a326d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:93:08:8e:77:b7:23:50:76:43:b2:3e:b2:fa:e5:15:8f:fd: 29:8b:3e:58:ec:96:7a:06:b8:36:9b:9a:27:85:9c:79:b1:4d: b6:1d:70:28:74:67:05:7f:df:55:28:75:dd:37:27:60:49:36: 44:b4:f9:8e:c9:5f:c4:e8:be:94:73:5a:01:59:0a:53:e6:c9: bd:40:57:c3:32:41:52:0a:19:5c:47:2c:ed:2c:f0:a1:10:36: 57:80:25:1d:f0:c1:bf:ce:7d:69:a3:82:3f:6a:5e:b1:7b:0c: 5d:90:97:8a:08:27:07:5a:8d:43:f0:0c:68:57:c1:cf:94:eb: 94:36:da:d1:ff:21:64:e4:84:78:b3:5f:1e:5f:27:ec:8d:38: a8:36:c3:ce:72:9a:b7:85:4b:14:16:02:b8:28:83:98:70:a0: 55:80:2b:bf:b5:94:ff:e2:71:8d:40:9d:e9:2d:63:d0:f8:31: 83:a4:15:87:4b:54:5c:2f:a6:2e:22:77:55:84:c4:17:58:01: 1e:d5:5e:75:96:44:59:d7:9b:6b:83:0b:56:62:e5:85:51:83: 9c:d9:f5:eb:85:34:e3:3f:e2:f7:04:9b:13:95:78:fb:b6:28: a6:b9:fc:4d:c4:18:dc:07:dd:25:70:4b:38:05:83:c2:a0:1f: a1:ab:e4:74 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGbUTbfAcUcKAmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk OGQyYmJhMmYtMzA4NC00YzFkLTg5ZjItOTFjZWY2OTZmODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG9xxbPWMGl5A/ABeMwWRLHZw3IIsytYqgfZ +C51dbYzVp7sfaXYtKImTWFKGSihjza4x9Mfh5yRfgY3IckE61zwmQxcJ2rloPnG X1WDjZ0JaWEU1YihdU6rX6GxoufItHw4u/AecRNzYrOUpzlIg6gH53moPCximhW9 5rsxboemrGPdfAvzt3Mcdf/UZV5ftfPkkPAVdTCb2N3NRq76OuwNIpQcIKxClkdH IWX5U/X4xeHIZ4Ae67pcf4yvAA/wEmvXEQUlr2975ho5ewAUusFN9/MY2ZUZ0tLC sw0G1qo7If/dYnU4sgQ3GE9ie3tfwjllKFcn3ylkAmEmKKXN5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDv0mUrysvIjHEU0OxVTiYBD6dqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU3NGM4YzEtYzE0MS0z YzRiLWE2MmYtMWNhMDMzOWEzMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXkwiOd7cjUHZDsj6y+uUVj/0piz5Y7JZ6Brg2 m5onhZx5sU22HXAodGcFf99VKHXdNydgSTZEtPmOyV/E6L6Uc1oBWQpT5sm9QFfD MkFSChlcRyztLPChEDZXgCUd8MG/zn1po4I/al6xewxdkJeKCCcHWo1D8AxoV8HP lOuUNtrR/yFk5IR4s18eXyfsjTioNsPOcpq3hUsUFgK4KIOYcKBVgCu/tZT/4nGN QJ3pLWPQ+DGDpBWHS1RcL6YuIndVhMQXWAEe1V51lkRZ15trgwtWYuWFUYOc2fXr hTTjP+L3BJsTlXj7tiimufxNxBjcB90lcEs4BYPCoB+hq+R0 -----END CERTIFICATE-----Generated at Sun Jun 29 23:34:59 2025 by rpki-client