$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa File: 529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa (raw, json) Hash identifier: DVByhvGcqkbjdl3iUQNk7wbiGeLtE/7iAjXDfSRdFy8= Subject key identifier: 6B:9D:E0:A9:F8:D3:E2:19:B6:09:56:F8:53:C0:3F:21:91:DF:7E:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201E3979E323C90E2ACE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:39:79:e3:23:c9:0e:2a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=168a2154-b771-472b-85bd-6b8c29bd3648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:f3:17:72:6e:97:4c:53:7e:b1:ae:aa:e8: b2:4b:a6:71:c6:04:aa:09:8b:90:ad:b9:19:96:32: d5:06:84:b8:b3:54:03:32:99:53:80:46:1a:55:6d: fd:f3:ba:23:15:68:48:7e:3e:f2:24:ce:5b:75:f9: 79:64:82:43:4f:59:88:5b:e8:e4:0a:99:56:4f:ee: aa:c7:04:7a:0f:08:f9:ad:c1:94:d7:5c:2f:45:2b: f3:ae:03:02:72:11:6f:b0:f4:d7:41:3d:4d:66:9e: d5:0b:66:d9:84:75:3d:8a:38:4c:e8:b7:36:3d:77: 17:0f:a2:42:0b:73:4c:10:d5:bc:ca:73:54:d9:1d: 20:98:35:d4:6c:58:f9:09:14:8f:00:34:07:9e:33: c0:e3:8f:58:55:1c:00:4c:66:65:27:2e:16:ba:eb: bc:2c:b2:df:1c:f7:96:c5:39:aa:0f:9e:fd:e9:99: 8d:4b:76:df:61:5d:8c:f4:80:52:49:30:d9:90:26: c2:0b:4c:3d:3a:e0:d4:77:7f:db:97:80:df:d9:96: 27:ab:d9:5f:04:93:81:f3:6b:dc:7c:95:f9:74:cd: e5:14:59:6b:6c:a1:ae:e3:ed:09:fc:c9:e0:bc:95: 7b:20:dc:01:17:99:b2:ec:94:53:e5:1c:3e:e8:b6: 11:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9D:E0:A9:F8:D3:E2:19:B6:09:56:F8:53:C0:3F:21:91:DF:7E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:18::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5a:5b:13:44:2c:ff:d3:65:f7:53:2d:bf:e3:e4:fd:8b:f1: bc:eb:fc:e8:39:2f:03:51:55:28:3e:f7:2a:9c:2d:03:5a:cb: d1:e1:04:ff:b0:95:34:ba:c0:2e:ea:cf:15:0f:93:b2:d1:31: 99:84:99:d4:1e:92:e3:85:e0:b9:b1:96:b9:9e:be:f6:2f:d0: 2d:4d:ff:83:e8:51:e5:42:85:f6:33:07:31:3d:56:38:10:2b: 1b:73:fc:40:22:48:06:88:7b:e6:0e:1d:16:5c:a8:d5:cd:28: 89:85:a2:5c:98:c9:68:b0:69:1a:4b:07:da:e4:4f:8c:8f:7d: b9:3f:b2:9a:5b:a5:df:6a:88:bc:57:4d:65:63:fa:78:f8:8f: c9:4f:6f:2c:43:12:48:a8:96:a8:a0:ef:80:0d:1c:8d:48:d3: a0:f2:28:c3:93:db:95:42:9f:ab:2a:ca:90:30:35:12:7a:45: 01:64:8a:b6:4f:04:b7:a6:75:ce:b1:6d:e6:9c:a4:c8:d2:c4: d2:b4:34:dd:f0:bf:2a:24:47:70:53:f4:9a:23:4d:51:3d:2d: fd:cd:cb:6b:9e:51:dc:6f:5e:d5:66:5d:6f:09:e7:33:7d:4a: f8:a4:ea:44:8e:a2:94:12:46:63:bb:42:0f:97:09:01:4f:f9: b3:60:20:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB45eeMjyQ4qzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MTY4YTIxNTQtYjc3MS00NzJiLTg1YmQtNmI4YzI5YmQzNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcXzF3Jul0xTfrGuquiyS6ZxxgSqCYuQrbkZ ljLVBoS4s1QDMplTgEYaVW3987ojFWhIfj7yJM5bdfl5ZIJDT1mIW+jkCplWT+6q xwR6Dwj5rcGU11wvRSvzrgMCchFvsPTXQT1NZp7VC2bZhHU9ijhM6Lc2PXcXD6JC C3NMENW8ynNU2R0gmDXUbFj5CRSPADQHnjPA449YVRwATGZlJy4Wuuu8LLLfHPeW xTmqD5796ZmNS3bfYV2M9IBSSTDZkCbCC0w9OuDUd3/bl4Df2ZYnq9lfBJOB82vc fJX5dM3lFFlrbKGu4+0J/MngvJV7INwBF5my7JRT5Rw+6LYR8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGud4Kn40+IZtglW+FPAPyGR3374MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI5Y2MyMGMtOTllNS0z ZjA4LWE3NWUtOWM5ODJmNjdiMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF5aWxNELP/TZfdTLb/j5P2L8bzr/Og5LwNRVSg+9yqcLQNay9Hh BP+wlTS6wC7qzxUPk7LRMZmEmdQekuOF4LmxlrmevvYv0C1N/4PoUeVChfYzBzE9 VjgQKxtz/EAiSAaIe+YOHRZcqNXNKImFolyYyWiwaRpLB9rkT4yPfbk/sppbpd9q iLxXTWVj+nj4j8lPbyxDEkiolqig74ANHI1I06DyKMOT25VCn6sqypAwNRJ6RQFk irZPBLemdc6xbeacpMjSxNK0NN3wvyokR3BT9JojTVE9Lf3Ny2ueUdxvXtVmXW8J 5zN9Svik6kSOopQSRmO7Qg+XCQFP+bNgIE8= -----END CERTIFICATE-----Generated at Mon Jun 16 04:36:45 2025 by rpki-client