$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa File: fc8e2196-6576-3640-a470-60d801270824.roa (raw, json) Hash identifier: tT3T5Rb6i25pIQVOYQPLXa9wsBt6AvQUXJmOD74i/BQ= Subject key identifier: 16:D0:61:52:B8:9A:5D:5A:EB:D7:9E:F9:12:7E:51:FA:AD:D1:68:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A549B2C8D64D7CC230F829340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 36632 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2c:8d:64:d7:cc:23:0f:82:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=c8e86430-1341-4232-85d4-08c5aa29a69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:d8:ac:d0:e9:2f:d0:27:e6:c9:0e:1a:d4: fa:41:8c:b6:df:33:ec:d8:0a:92:6c:8b:aa:cb:7a: 40:49:36:94:2a:b3:28:55:27:a2:db:c2:df:63:a0: d7:b9:56:3d:ba:0e:df:85:fe:aa:f1:5a:31:9b:c3: 6d:af:3e:fa:cf:cc:5d:33:10:1e:02:ac:18:1d:d8: 09:82:77:ee:f1:8c:64:55:e6:51:52:81:a7:72:13: d2:95:a8:27:5a:38:2c:a0:b5:93:18:4c:3f:c7:d4: 64:f4:73:aa:c1:83:41:b4:3b:8d:1b:39:77:e0:40: 9a:c9:16:05:e9:6a:74:50:3f:98:8c:2d:49:ca:be: d3:6a:00:eb:eb:f1:40:97:12:d1:51:64:74:5c:63: d2:77:f0:56:6e:11:88:6c:ee:c1:cc:f8:56:c9:46: 40:42:56:31:d6:db:67:b8:df:14:7e:4c:e2:36:d4: 20:46:2b:9e:5b:d2:06:c6:aa:a2:cf:2b:7f:30:63: 90:dc:49:ca:0e:f6:02:81:71:dd:2c:29:2c:f2:f8: c6:c3:40:9d:c2:2e:b9:3f:61:89:14:15:c1:a1:27: ad:2a:27:06:60:59:bb:2b:b0:b6:b2:27:45:0e:51: 49:8a:4a:59:60:3a:84:a3:a7:d0:e5:17:e7:17:f4: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D0:61:52:B8:9A:5D:5A:EB:D7:9E:F9:12:7E:51:FA:AD:D1:68:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:31:8e:dd:37:31:3a:c2:2c:6b:a6:d3:f8:c2:c0:40:67:f9: 60:14:3c:df:ab:eb:fc:9d:3e:24:b8:a2:07:64:ed:7c:ec:4e: bb:4b:dc:80:2d:90:b1:d9:1d:be:58:94:22:df:39:1f:0d:c3: 5b:c2:a5:2a:04:73:c5:be:ee:19:fe:83:0b:8f:f1:ac:2d:5c: 23:d4:7b:19:14:e9:10:73:d3:ae:fc:64:9f:d1:55:ca:82:1b: 43:b2:aa:78:25:33:31:1f:c5:66:3a:8e:50:16:96:15:1f:32: 10:c4:a5:65:29:95:2d:c4:16:bb:0f:ce:e1:97:96:ad:c5:73: 3b:14:c9:80:43:e7:5d:39:8a:3e:73:25:d7:e6:f1:b4:f4:14: db:5d:8d:82:b8:7e:0a:97:02:3b:e8:45:fd:47:34:b9:5c:1d: 88:71:27:74:03:da:5a:80:8e:a5:be:20:e2:25:e6:d0:ce:3a: fa:84:c5:a7:30:5a:64:e3:d3:8c:a1:17:71:5d:14:8a:c4:00: 4c:05:96:65:61:cc:ad:e7:3c:ad:8e:59:d1:2f:04:f2:13:b5: 77:54:62:b2:d2:95:d2:c6:18:53:71:a8:d3:3f:03:a7:60:e9: a5:f5:dc:7e:0a:2e:cd:18:35:ef:a0:43:7f:42:06:0b:94:fe: 80:bb:f7:bc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpUmyyNZNfMIw+Ck0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk YzhlODY0MzAtMTM0MS00MjMyLTg1ZDQtMDhjNWFhMjlhNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+zYrNDpL9An5skOGtT6QYy23zPs2AqSbIuq y3pASTaUKrMoVSei28LfY6DXuVY9ug7fhf6q8Voxm8Ntrz76z8xdMxAeAqwYHdgJ gnfu8YxkVeZRUoGnchPSlagnWjgsoLWTGEw/x9Rk9HOqwYNBtDuNGzl34ECayRYF 6Wp0UD+YjC1Jyr7TagDr6/FAlxLRUWR0XGPSd/BWbhGIbO7BzPhWyUZAQlYx1ttn uN8UfkziNtQgRiueW9IGxqqizyt/MGOQ3EnKDvYCgXHdLCks8vjGw0Cdwi65P2GJ FBXBoSetKicGYFm7K7C2sidFDlFJikpZYDqEo6fQ5RfnF/QbYQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBbQYVK4ml1a69ee+RJ+Ufqt0Wj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM4ZTIxOTYtNjU3Ni0z NjQwLWE0NzAtNjBkODAxMjcwODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAiMY7dNzE6wixrptP4wsBAZ/lgFDzfq+v8nT4k uKIHZO187E67S9yALZCx2R2+WJQi3zkfDcNbwqUqBHPFvu4Z/oMLj/GsLVwj1HsZ FOkQc9Ou/GSf0VXKghtDsqp4JTMxH8VmOo5QFpYVHzIQxKVlKZUtxBa7D87hl5at xXM7FMmAQ+ddOYo+cyXX5vG09BTbXY2CuH4KlwI76EX9RzS5XB2IcSd0A9pagI6l viDiJebQzjr6hMWnMFpk49OMoRdxXRSKxABMBZZlYcyt5zytjlnRLwTyE7V3VGKy 0pXSxhhTcajTPwOnYOml9dx+Ci7NGDXvoEN/QgYLlP6Au/e8 -----END CERTIFICATE-----Generated at Tue Jul 1 13:56:06 2025 by rpki-client