$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa File: 436a1d15-6f74-3f87-b79e-821778eec721.roa (raw, json) Hash identifier: AzzXFVbl5oFkBIkggfjYfmHTy+qLU0QaAMvHzVojg/U= Subject key identifier: 45:80:A1:DA:A6:EF:78:98:61:78:F5:66:E0:DB:CA:8E:1C:8E:D2:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A96A8C4904D8469F53680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 36624 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:96:a8:c4:90:4d:84:69:f5:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=1597104a-5902-4e1f-9431-12246a4037d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ff:49:e9:f9:ba:6e:38:b5:0b:33:81:a2:c8: a8:b5:b2:52:c3:a2:af:5a:ed:f0:4c:cb:27:15:2f: 28:b0:e5:cf:f9:c6:c2:ce:a6:da:71:1c:31:ac:5f: 7e:b9:52:98:21:b5:4c:3d:b7:a8:a6:22:05:99:b1: 2c:0f:f9:85:f7:10:88:0a:75:81:01:61:ba:1c:b5: 7f:ad:a2:26:20:38:3d:b1:1d:9a:04:52:33:58:7a: 1a:d6:f3:41:04:68:fd:bc:52:1b:d1:42:52:62:a4: f4:a5:9b:5e:db:e4:f9:8f:0b:5a:12:d8:22:3b:fa: cf:9e:6b:cf:ce:fd:fc:6b:b7:4e:36:61:7c:44:23: d9:0d:e9:07:01:e4:10:7c:e7:51:5d:73:7d:0b:a2: 2d:ea:89:8b:5f:df:15:be:9b:76:13:87:53:33:2e: 3f:02:36:39:22:38:28:cc:7e:50:63:60:2d:13:f3: 23:1e:8a:bf:47:0a:46:c1:a7:60:ee:e2:6a:e1:9a: a8:57:b3:82:f8:c2:46:f7:d8:71:09:85:e8:52:e3: 86:ee:34:06:a8:b3:3f:3d:84:06:0b:a7:1c:01:b7: e6:e9:cd:22:e4:6e:c6:9f:3d:86:b4:08:78:1f:61: 7c:e1:76:6d:c9:34:35:80:f5:85:45:65:f2:b4:8f: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:A1:DA:A6:EF:78:98:61:78:F5:66:E0:DB:CA:8E:1C:8E:D2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:81:36:f2:8b:4c:92:f5:4d:d7:fe:b0:ea:a9:f2:04:45:e0: 6e:78:40:4a:eb:0c:52:9a:6c:78:b0:5e:91:72:b8:f4:4e:d4: f1:b2:5a:e1:d2:42:21:d4:1b:cc:05:f4:92:64:32:43:63:66: f5:1e:eb:f8:42:0a:9c:fc:18:ec:5d:7c:1b:4c:60:c2:5f:4f: 05:67:8a:86:75:69:2b:21:ca:7d:95:ad:a1:3b:0d:94:2c:56: 0a:d0:70:af:bc:8d:97:65:84:ac:5e:16:46:0a:9c:1f:bb:74: 4c:de:79:76:0f:5a:a5:fd:88:60:62:b1:a1:c3:ca:93:c8:0d: 3e:22:5b:fd:b4:bf:72:9d:38:1e:19:58:9d:60:38:15:a4:81: 7f:7a:f0:2e:da:40:35:3a:bc:e2:e5:0e:15:18:8b:c2:ec:65: 92:5b:a9:1b:59:a5:e8:fc:81:e4:d5:0c:7b:6b:a9:fd:98:a8: 61:d5:7c:39:ae:01:f3:d6:d6:f0:e7:e8:32:e0:24:be:ef:66: 66:1d:2a:71:4d:cd:90:1c:97:e4:d2:f4:3b:c4:a2:e1:ef:b6: 46:1e:8d:f1:8f:35:0e:8a:35:e9:ab:46:08:09:85:01:03:36: d3:7f:55:3f:94:4e:5f:73:ae:6f:04:b0:63:e4:54:55:41:1a: f0:40:5b:07 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epaoxJBNhGn1NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MTU5NzEwNGEtNTkwMi00ZTFmLTk0MzEtMTIyNDZhNDAzN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP9J6fm6bji1CzOBosiotbJSw6KvWu3wTMsn FS8osOXP+cbCzqbacRwxrF9+uVKYIbVMPbeopiIFmbEsD/mF9xCICnWBAWG6HLV/ raImIDg9sR2aBFIzWHoa1vNBBGj9vFIb0UJSYqT0pZte2+T5jwtaEtgiO/rPnmvP zv38a7dONmF8RCPZDekHAeQQfOdRXXN9C6It6omLX98Vvpt2E4dTMy4/AjY5Ijgo zH5QY2AtE/MjHoq/RwpGwadg7uJq4ZqoV7OC+MJG99hxCYXoUuOG7jQGqLM/PYQG C6ccAbfm6c0i5G7Gnz2GtAh4H2F84XZtyTQ1gPWFRWXytI/mhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEWAodqm73iYYXj1ZuDbyo4cjtIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDM2YTFkMTUtNmY3NC0z Zjg3LWI3OWUtODIxNzc4ZWVjNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAogTbyi0yS9U3X/rDqqfIEReBueEBK6wxSmmx4 sF6Rcrj0TtTxslrh0kIh1BvMBfSSZDJDY2b1Huv4Qgqc/BjsXXwbTGDCX08FZ4qG dWkrIcp9la2hOw2ULFYK0HCvvI2XZYSsXhZGCpwfu3RM3nl2D1ql/YhgYrGhw8qT yA0+Ilv9tL9ynTgeGVidYDgVpIF/evAu2kA1Orzi5Q4VGIvC7GWSW6kbWaXo/IHk 1Qx7a6n9mKhh1Xw5rgHz1tbw5+gy4CS+72ZmHSpxTc2QHJfk0vQ7xKLh77ZGHo3x jzUOijXpq0YICYUBAzbTf1U/lE5fc65vBLBj5FRVQRrwQFsH -----END CERTIFICATE-----Generated at Sun Jun 15 17:39:51 2025 by rpki-client