$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3ba27ab-03c3-32f3-a552-752ad678622d.roa File: f3ba27ab-03c3-32f3-a552-752ad678622d.roa (raw, json) Hash identifier: zSLexzHk/owF/k9o8tQPQR/OsaiYyel+DJldVUmBw78= Subject key identifier: 1A:0F:6A:AA:4C:15:78:C9:09:06:ED:BE:9E:61:B4:40:2D:80:DA:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2F130AFF1C3ECEF62B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3ba27ab-03c3-32f3-a552-752ad678622d.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 27544 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2f:13:0a:ff:1c:3e:ce:f6:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=1e69ae58-dc37-4b5a-b8e6-e66cf7378b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:8c:58:34:9e:38:99:65:a3:6d:47:d3:0e: 35:f8:d0:5c:83:aa:05:2a:1c:5f:59:81:01:32:5d: 73:c9:50:d6:b3:3b:f8:6f:9d:66:e9:ee:7f:fd:93: ba:73:52:d6:86:f5:67:68:bd:38:81:43:a1:00:82: 7e:0a:e0:1f:4d:b2:2a:49:24:a3:1b:ba:03:42:5e: 55:4e:64:00:61:07:50:07:48:94:e3:bc:c9:64:13: 4d:1a:c6:55:94:77:6d:1a:09:6f:d4:32:94:38:7e: 70:16:fa:b8:40:68:04:77:fe:98:12:0d:06:06:e2: c2:66:72:7b:02:ce:ae:1b:8b:65:ff:67:b5:ed:15: a0:04:6f:ed:4b:04:eb:2d:b2:86:61:ec:a7:9c:9c: a3:2d:79:c4:1b:c5:3f:87:85:f9:75:8f:89:8d:98: bd:db:f8:78:6b:c4:a6:28:89:11:f8:40:5a:74:9b: 25:b4:48:94:b8:dd:29:a6:90:2c:6d:d5:12:21:f2: c9:1a:12:04:75:f6:21:2a:e3:85:85:a4:37:ce:f3: 49:4b:91:23:b9:ec:fa:c7:52:b7:14:c2:1c:ab:a5: 2b:89:59:21:d4:0b:f5:44:4e:ad:43:c0:39:c8:b2: f1:57:97:b9:1b:38:48:80:ef:8d:18:31:58:cc:d2: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0F:6A:AA:4C:15:78:C9:09:06:ED:BE:9E:61:B4:40:2D:80:DA:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3ba27ab-03c3-32f3-a552-752ad678622d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:81:47:17:ca:64:d0:62:9e:a3:39:e6:86:aa:2d:f0:f4:99: 81:4e:82:73:1a:1c:1e:57:f3:7a:b3:53:10:d1:1d:ce:81:3f: 0f:8a:57:ec:f5:9d:d5:e6:fa:b4:61:5a:e2:49:d0:1f:16:ce: ff:17:be:34:ca:ad:86:79:67:b7:f8:62:56:e2:67:24:5d:08: 15:43:a8:bd:e4:d7:e7:d2:69:04:00:7b:06:dd:77:57:f4:e9: e9:a2:2c:39:bc:fa:8d:bf:d6:df:7e:9d:f1:4c:a3:96:ae:f3: cc:8c:a2:ca:23:c4:93:d5:22:46:db:72:36:b9:b8:60:60:05: e4:39:98:25:9f:8a:b1:62:36:a5:e2:41:6e:1b:97:5b:cb:c8: 4c:d3:c7:85:18:c7:1e:44:7b:48:77:91:c8:df:67:74:05:4e: 37:1e:57:e9:3e:aa:6b:ea:18:31:6c:c6:5a:75:7f:53:64:f3: 4c:31:a9:5f:24:a9:7d:2a:1f:ad:6a:e4:e9:94:7d:44:7c:2a: 3d:b7:da:07:42:18:95:22:3f:c7:b1:ae:94:c3:34:54:93:7f: 33:83:f9:01:1b:44:1c:f4:f5:dd:8e:6f:90:44:48:dd:ae:65: 58:d0:b1:51:e8:58:8b:f2:be:d1:77:ea:f2:83:b5:35:1c:4f: cc:55:03:0a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmy8TCv8cPs72K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MWU2OWFlNTgtZGMzNy00YjVhLWI4ZTYtZTY2Y2Y3Mzc4Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgiMWDSeOJllo21H0w41+NBcg6oFKhxfWYEB Ml1zyVDWszv4b51m6e5//ZO6c1LWhvVnaL04gUOhAIJ+CuAfTbIqSSSjG7oDQl5V TmQAYQdQB0iU47zJZBNNGsZVlHdtGglv1DKUOH5wFvq4QGgEd/6YEg0GBuLCZnJ7 As6uG4tl/2e17RWgBG/tSwTrLbKGYeynnJyjLXnEG8U/h4X5dY+JjZi92/h4a8Sm KIkR+EBadJsltEiUuN0pppAsbdUSIfLJGhIEdfYhKuOFhaQ3zvNJS5Ejuez6x1K3 FMIcq6UriVkh1Av1RE6tQ8A5yLLxV5e5GzhIgO+NGDFYzNIQnwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBoPaqpMFXjJCQbtvp5htEAtgNqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjNiYTI3YWItMDNjMy0z MmYzLWE1NTItNzUyYWQ2Nzg2MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBrgUcXymTQYp6jOeaGqi3w9JmBToJzGhweV/N6 s1MQ0R3OgT8Pilfs9Z3V5vq0YVriSdAfFs7/F740yq2GeWe3+GJW4mckXQgVQ6i9 5Nfn0mkEAHsG3XdX9Onpoiw5vPqNv9bffp3xTKOWrvPMjKLKI8ST1SJG23I2ubhg YAXkOZgln4qxYjal4kFuG5dby8hM08eFGMceRHtId5HI32d0BU43HlfpPqpr6hgx bMZadX9TZPNMMalfJKl9Kh+tauTplH1EfCo9t9oHQhiVIj/Hsa6UwzRUk38zg/kB G0Qc9PXdjm+QREjdrmVY0LFR6FiL8r7Rd+ryg7U1HE/MVQMK -----END CERTIFICATE-----Generated at Sun Jun 29 23:56:38 2025 by rpki-client