$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa File: 2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa (raw, json) Hash identifier: Z1bMLNctMgTgkne6qg1Y0OSgjouRt2Ied4JBuPyE7GE= Subject key identifier: 9F:73:D6:CF:C9:23:77:E1:79:9E:1B:86:28:EF:85:9B:B6:F0:0F:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A146589B637464A26227E4B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:89:b6:37:46:4a:26:22:7e:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=bafc41d5-4511-4706-a567-0e85f6cb08d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:ed:5a:d6:73:2e:de:ae:d2:f5:f5:5a:93: a8:24:d9:20:29:0d:39:55:1e:e4:57:83:1f:6b:4d: 78:4f:96:89:d5:ab:c0:01:24:c2:3f:96:e9:1f:65: e9:7b:0e:71:35:69:2d:6b:7c:92:5a:8a:61:0e:68: 87:15:4f:62:5b:09:36:a0:f0:0c:b7:29:73:70:7d: ed:a1:b7:08:fb:c5:45:03:20:78:34:5b:e8:8b:29: bd:c8:b9:94:00:e8:ac:83:2c:7b:04:b7:06:83:78: a7:98:5d:85:72:5c:4f:73:c1:06:d7:fa:b9:dc:fa: 7f:dc:43:ec:7a:5d:d0:47:4a:14:d0:34:46:5c:92: c0:93:2b:e1:3a:b7:43:4f:28:1b:8e:d3:43:a6:e2: 02:63:ec:51:f6:4e:9f:71:7b:80:a0:26:73:1f:e9: d0:72:0d:78:a6:26:73:fb:b1:aa:6c:87:3e:a5:7c: 7a:07:d5:c5:5f:bc:22:cd:f9:fd:ef:08:4f:8b:6f: 9d:66:63:77:58:dc:74:6c:bc:56:d4:e3:55:ac:41: 41:2a:a1:ae:9b:5c:4e:8c:b3:21:22:f0:d7:17:cd: 45:0e:5c:55:27:39:f3:08:d8:61:c2:a4:76:e2:05: 05:10:9f:5f:d5:23:aa:dc:84:db:54:8d:f1:ca:36: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:73:D6:CF:C9:23:77:E1:79:9E:1B:86:28:EF:85:9B:B6:F0:0F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:69:9c:34:95:78:02:6c:28:4c:cc:73:2a:ee:ae:b2:f0:94: e6:d4:6f:37:b9:aa:32:ee:7b:35:23:55:e6:78:e8:1c:d1:cd: d9:e9:ec:d3:c6:17:4d:fe:a7:7b:34:e2:86:a9:68:9f:d0:93: f1:94:f9:92:c2:29:ed:bb:f4:d3:0a:c2:45:07:64:a9:0c:36: 3a:2f:b7:fc:83:4d:91:2d:73:f2:e5:2d:ec:d7:78:65:7b:35: 8c:5d:9d:be:e1:b4:24:5f:38:6d:8f:09:50:f5:c9:43:7b:18: 03:0e:4c:16:f7:d8:35:b6:bf:fc:8e:94:9a:6e:2b:49:f0:62: e0:f3:ed:9d:73:6a:3c:0e:0f:11:f6:df:2b:e1:b4:f9:b3:29: f6:81:b5:5f:25:07:5a:fd:70:f0:b6:5b:ff:c0:ff:53:ee:2e: 68:5c:d8:42:1d:f4:c0:5d:c2:00:6e:d5:08:2a:2d:97:e8:bd: 13:f3:ee:0f:70:ed:6b:ca:33:b0:6a:3b:a2:54:47:81:a2:77: a8:3c:84:97:60:63:23:75:fe:8a:e5:e6:e7:9f:64:ad:74:73: 17:4d:a9:e0:f6:36:16:b3:de:e9:f8:be:fa:0f:32:85:3f:12: c2:88:bc:6c:78:72:00:2a:a8:5a:03:4a:5a:5f:d3:60:e9:7a: 73:66:73:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZYm2N0ZKJiJ+S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YmFmYzQxZDUtNDUxMS00NzA2LWE1NjctMGU4NWY2Y2IwOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfLtWtZzLt6u0vX1WpOoJNkgKQ05VR7kV4Mf a014T5aJ1avAASTCP5bpH2Xpew5xNWkta3ySWophDmiHFU9iWwk2oPAMtylzcH3t obcI+8VFAyB4NFvoiym9yLmUAOisgyx7BLcGg3inmF2FclxPc8EG1/q53Pp/3EPs el3QR0oU0DRGXJLAkyvhOrdDTygbjtNDpuICY+xR9k6fcXuAoCZzH+nQcg14piZz +7GqbIc+pXx6B9XFX7wizfn97whPi2+dZmN3WNx0bLxW1ONVrEFBKqGum1xOjLMh IvDXF81FDlxVJznzCNhhwqR24gUFEJ9f1SOq3ITbVI3xyjYY+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9z1s/JI3fheZ4bhijvhZu28A/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQ2ODE2ODEtZjQ1Mi0z YjIwLWJhOWYtYjFjYmY5MGEwZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADdpnDSVeAJsKEzMcyrurrLwlObUbze5qjLuezUjVeZ46BzRzdnp 7NPGF03+p3s04oapaJ/Qk/GU+ZLCKe279NMKwkUHZKkMNjovt/yDTZEtc/LlLezX eGV7NYxdnb7htCRfOG2PCVD1yUN7GAMOTBb32DW2v/yOlJpuK0nwYuDz7Z1zajwO DxH23yvhtPmzKfaBtV8lB1r9cPC2W//A/1PuLmhc2EId9MBdwgBu1QgqLZfovRPz 7g9w7WvKM7BqO6JUR4Gid6g8hJdgYyN1/orl5uefZK10cxdNqeD2Nhaz3un4vvoP MoU/EsKIvGx4cgAqqFoDSlpf02DpenNmc7g= -----END CERTIFICATE-----Generated at Sun Jun 15 15:11:10 2025 by rpki-client