$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1efea82-a990-3358-9be0-3d445409db1e.roa File: e1efea82-a990-3358-9be0-3d445409db1e.roa (raw, json) Hash identifier: XtT+kRJdVwl2vxHIcElju1Skm5QSYXonOG6r+fgq8Kw= Subject key identifier: 45:65:18:3A:E6:57:1D:76:65:CC:DE:97:3E:1C:41:4B:0B:25:33:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A411067D7FA122745BF0917C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1efea82-a990-3358-9be0-3d445409db1e.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396554 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:67:d7:fa:12:27:45:bf:09:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=d764ef9f-9f57-4f50-9311-5f7a414beed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:26:42:3c:cf:5a:10:29:4f:6c:48:41:b6: 40:94:71:27:f9:03:67:8a:5f:f1:22:98:0f:4e:d6: 4a:10:a4:60:7c:5d:85:33:8b:49:57:24:ab:11:e2: f5:22:73:1c:a9:2f:a2:ea:96:82:5a:04:79:a2:bf: d8:e7:64:50:e0:e9:90:a1:ee:ce:66:b0:4f:5a:0c: af:d8:54:35:ba:38:fb:28:d4:f7:78:a4:b6:8a:ee: eb:65:c8:03:bb:c8:84:16:c9:f1:a8:6a:52:c4:bd: 6c:db:aa:33:48:24:89:3e:1c:ec:33:1a:81:14:ac: 5a:52:18:59:a8:f1:6c:81:32:78:e2:56:e9:30:67: da:59:f3:78:83:d3:f3:f4:c7:4a:41:de:e1:58:ff: 1b:ef:43:81:90:2a:01:d4:bc:0e:f5:7a:78:bc:aa: 87:2a:f7:10:ed:09:43:6d:4e:4d:2f:f6:d7:70:97: 70:41:4b:e6:29:3a:10:d9:12:ad:13:5c:d1:c6:3b: 95:54:d5:a2:49:30:4a:36:98:f8:e7:be:b7:f8:8c: e7:88:dc:2d:39:d2:1b:d7:80:65:ad:bd:c3:32:f8: fd:b5:58:3c:6e:5a:0b:a2:74:1e:03:9b:2c:a2:94: f2:51:f2:cd:48:d8:94:ea:00:5e:e3:bd:1f:c4:cd: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:18:3A:E6:57:1D:76:65:CC:DE:97:3E:1C:41:4B:0B:25:33:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1efea82-a990-3358-9be0-3d445409db1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:16:a7:99:de:e7:93:5e:75:d9:b3:63:ee:ee:c0:92:c7:14: 2e:47:89:47:9c:73:65:68:c4:fb:b6:98:59:8f:99:a1:9e:d9: 6b:18:d6:49:e4:23:27:b1:f0:4f:a7:6b:dd:fe:ff:ed:38:e2: 4f:fe:e1:b4:ca:7d:93:28:00:f8:1e:42:e5:47:19:09:c7:67: 16:fa:d6:fc:4c:65:05:9a:c5:59:c2:b1:39:d9:73:85:0f:cf: 64:9a:0b:33:9c:5b:7f:76:ed:b9:58:1d:1f:19:e3:60:b9:3a: 21:18:83:31:f3:a8:ca:00:08:e0:68:dd:d3:41:ed:99:25:17: b4:cd:47:90:36:1c:85:45:23:4c:d3:2f:0e:66:8c:76:b9:aa: 0e:f7:50:da:fd:94:38:d5:78:b1:31:38:27:5e:12:3c:94:15: a4:ee:7d:46:b7:bd:8a:07:87:b6:7d:3d:f0:b0:98:0f:a3:be: a2:80:80:7d:e9:71:44:6f:dd:4d:56:20:6e:03:1d:24:31:fe: 86:81:f3:42:24:73:4b:03:e2:aa:1d:19:c8:40:f2:de:47:c7: e0:4f:da:8e:49:a7:ad:b4:c6:6d:e5:71:fb:6f:ef:1d:4b:74: 2f:35:50:a0:0e:45:f0:b0:5b:1c:81:cd:98:85:0c:12:ee:68: 64:5f:46:2a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpBEGfX+hInRb8JF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDc2NGVmOWYtOWY1Ny00ZjUwLTkzMTEtNWY3YTQxNGJlZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxQmQjzPWhApT2xIQbZAlHEn+QNnil/xIpgP TtZKEKRgfF2FM4tJVySrEeL1InMcqS+i6paCWgR5or/Y52RQ4OmQoe7OZrBPWgyv 2FQ1ujj7KNT3eKS2iu7rZcgDu8iEFsnxqGpSxL1s26ozSCSJPhzsMxqBFKxaUhhZ qPFsgTJ44lbpMGfaWfN4g9Pz9MdKQd7hWP8b70OBkCoB1LwO9Xp4vKqHKvcQ7QlD bU5NL/bXcJdwQUvmKToQ2RKtE1zRxjuVVNWiSTBKNpj45763+IzniNwtOdIb14Bl rb3DMvj9tVg8bloLonQeA5ssopTyUfLNSNiU6gBe470fxM3DBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEVlGDrmVx12Zczelz4cQUsLJTOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTFlZmVhODItYTk5MC0z MzU4LTliZTAtM2Q0NDU0MDlkYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAiFqeZ3ueTXnXZs2Pu7sCSxxQuR4lHnHNlaMT7 tphZj5mhntlrGNZJ5CMnsfBPp2vd/v/tOOJP/uG0yn2TKAD4HkLlRxkJx2cW+tb8 TGUFmsVZwrE52XOFD89kmgsznFt/du25WB0fGeNguTohGIMx86jKAAjgaN3TQe2Z JRe0zUeQNhyFRSNM0y8OZox2uaoO91Da/ZQ41XixMTgnXhI8lBWk7n1Gt72KB4e2 fT3wsJgPo76igIB96XFEb91NViBuAx0kMf6GgfNCJHNLA+KqHRnIQPLeR8fgT9qO SaettMZt5XH7b+8dS3QvNVCgDkXwsFscgc2YhQwS7mhkX0Yq -----END CERTIFICATE-----Generated at Sun Jun 29 23:56:34 2025 by rpki-client