$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0864f05-2149-30c7-8282-1ec5717adf8b.roa File: e0864f05-2149-30c7-8282-1ec5717adf8b.roa (raw, json) Hash identifier: 7Y/N+QsgbPbyj45OCreM7yPDhIgec5wmzdWMQAJ7xjw= Subject key identifier: E6:5C:04:2F:73:EE:49:42:BA:4B:01:44:1C:A1:E0:96:3E:9D:A1:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411069F7B462299996D50000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0864f05-2149-30c7-8282-1ec5717adf8b.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396550 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:69:f7:b4:62:29:99:96:d5:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=281b2f8f-5995-406f-aea1-4a01b6152ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:8a:1d:b0:b1:c9:53:b7:bf:c9:80:07:a0: ec:af:b1:aa:b1:bb:70:42:96:28:37:f3:b1:e1:28: a0:ca:51:fc:05:4d:a3:1c:20:cf:f0:1a:c5:86:66: 33:2c:8e:7f:8a:78:52:06:39:81:64:50:d3:74:a7: 09:cf:80:07:c1:f0:9a:ce:f0:37:0b:b2:86:32:2c: d5:79:d6:59:a4:d7:f0:e4:54:51:80:c9:1f:ff:71: ff:02:36:4f:51:b1:68:f2:f3:fb:d9:1e:e4:44:bf: 44:23:c0:0c:7c:52:61:8e:3a:37:f6:d9:56:03:e6: 8f:20:62:b6:55:57:f7:00:e7:96:1d:c2:28:ad:07: 91:99:d7:da:d3:fe:45:d0:4a:e9:74:4c:3b:5e:42: 50:d3:f9:95:41:2b:0f:6a:4b:8e:d1:92:68:44:64: 89:8c:59:7d:63:b8:93:0f:64:26:da:15:11:92:86: 67:51:47:ab:be:01:05:0f:56:4b:8a:20:57:a7:c1: c6:06:b6:66:6f:de:45:f5:76:0e:3e:7a:51:6c:92: c6:34:ff:73:7e:22:4d:18:08:44:97:bd:b4:c5:ab: 5f:91:84:78:70:b1:d0:6a:95:6b:3a:2e:9a:0b:3a: 9b:ee:31:b6:a7:af:ea:38:86:a2:3a:5f:52:bc:7f: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5C:04:2F:73:EE:49:42:BA:4B:01:44:1C:A1:E0:96:3E:9D:A1:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0864f05-2149-30c7-8282-1ec5717adf8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:16:4b:b6:05:22:f5:3d:ae:6b:18:7b:2a:4a:10:ba:33:ca: d2:92:47:49:e4:36:9e:b6:7e:ae:e2:9c:bc:c8:5e:47:ee:a2: f9:dc:4e:83:90:0e:c0:4e:49:80:9a:82:ef:b1:1e:1d:3f:1e: eb:7f:c1:b6:cd:58:f9:f7:ae:13:18:06:2c:5b:d7:f1:8f:45: 92:43:48:34:1b:37:5a:e2:c3:c1:e0:7e:cf:6b:60:bc:5b:77: 1f:26:94:92:f3:c1:00:7a:61:fb:30:58:95:10:04:cf:eb:29: e2:5c:68:cc:52:c9:5a:d2:21:ec:de:28:a2:7a:29:0c:4a:ec: c9:65:0b:ea:d5:46:2a:65:86:de:cc:52:d4:1f:c3:ba:3c:76: df:30:46:5d:fe:67:61:06:24:8d:62:48:cf:02:95:07:e6:37: b4:40:2f:90:04:d0:8d:12:60:07:6d:52:5b:47:dd:ad:31:59: 1d:9a:4b:d5:50:ce:68:87:e0:e1:e2:da:78:9f:87:ef:df:8a: 89:e9:93:af:01:16:b8:b8:a3:b0:57:e9:1f:8a:f8:e1:a1:d2: 33:72:5f:6d:44:6e:70:80:a5:f8:8e:b3:11:da:f0:d9:2f:30: b9:74:35:92:2e:50:67:4b:ca:f2:d3:40:ba:a1:ca:05:db:96: bd:14:75:ab -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGn3tGIpmZbVAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MjgxYjJmOGYtNTk5NS00MDZmLWFlYTEtNGEwMWI2MTUyZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXiKHbCxyVO3v8mAB6Dsr7GqsbtwQpYoN/Ox 4SigylH8BU2jHCDP8BrFhmYzLI5/inhSBjmBZFDTdKcJz4AHwfCazvA3C7KGMizV edZZpNfw5FRRgMkf/3H/AjZPUbFo8vP72R7kRL9EI8AMfFJhjjo39tlWA+aPIGK2 VVf3AOeWHcIorQeRmdfa0/5F0ErpdEw7XkJQ0/mVQSsPakuO0ZJoRGSJjFl9Y7iT D2Qm2hURkoZnUUervgEFD1ZLiiBXp8HGBrZmb95F9XYOPnpRbJLGNP9zfiJNGAhE l720xatfkYR4cLHQapVrOi6aCzqb7jG2p6/qOIaiOl9SvH8PBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOZcBC9z7klCuksBRByh4JY+naE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTA4NjRmMDUtMjE0OS0z MGM3LTgyODItMWVjNTcxN2FkZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQByFku2BSL1Pa5rGHsqShC6M8rSkkdJ5Daetn6u 4py8yF5H7qL53E6DkA7ATkmAmoLvsR4dPx7rf8G2zVj5964TGAYsW9fxj0WSQ0g0 Gzda4sPB4H7Pa2C8W3cfJpSS88EAemH7MFiVEATP6yniXGjMUsla0iHs3iiieikM SuzJZQvq1UYqZYbezFLUH8O6PHbfMEZd/mdhBiSNYkjPApUH5je0QC+QBNCNEmAH bVJbR92tMVkdmkvVUM5oh+Dh4tp4n4fv34qJ6ZOvARa4uKOwV+kfivjhodIzcl9t RG5wgKX4jrMR2vDZLzC5dDWSLlBnS8ry00C6ocoF25a9FHWr -----END CERTIFICATE-----Generated at Sun Jun 29 23:41:44 2025 by rpki-client