$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c8b71de-c6c6-317f-82a3-bf241164fd23.roa File: 6c8b71de-c6c6-317f-82a3-bf241164fd23.roa (raw, json) Hash identifier: J5tbTVUx12mjBUV0iOi1SHEivm06xCcVpVPc3Qv+/rU= Subject key identifier: C7:77:B4:90:5E:42:FE:75:DD:1D:37:0C:62:9F:B3:F5:5E:E6:AA:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A96894FCB600A9C7520C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c8b71de-c6c6-317f-82a3-bf241164fd23.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 36630 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:96:89:4f:cb:60:0a:9c:75:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=45d94e0f-96bf-4c62-91d0-59c04d7e3247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:f6:b7:e0:37:f7:28:87:5c:c1:05:e2:0d: 63:f6:9b:cf:54:4d:41:75:2f:29:af:31:a1:8c:19: b7:27:fb:73:9f:12:27:5f:7c:7f:d1:81:4a:48:cd: 61:e2:0f:86:7c:26:72:82:1d:32:dd:90:bd:b2:8f: fe:c9:29:02:8f:4c:b2:7a:70:18:a6:da:52:85:02: a9:27:e4:4d:fc:f8:c3:3c:ae:25:f1:0b:cc:9c:ac: f5:e0:e8:e9:9c:e4:09:d2:f8:a2:91:eb:20:ce:f5: bb:31:62:21:eb:7a:5d:82:f8:2b:8c:c9:c0:80:ad: c8:a7:ad:2e:4d:4c:d6:b9:f9:1c:50:16:e6:90:e0: c7:e9:6f:ce:b7:0c:ee:4d:69:68:e4:0d:de:75:a6: 5e:e4:be:3a:20:99:fe:e1:eb:6f:ae:9c:fa:f6:95: 7d:45:d9:83:bb:ba:e4:da:ac:b5:8a:e8:a8:22:8f: 3c:d8:57:9a:5a:b1:f9:cc:4c:3c:8f:59:cf:b7:27: eb:77:c6:17:09:10:44:c4:ac:08:af:af:3b:38:85: 18:2f:1c:c7:4a:87:10:f7:5d:43:c6:38:b2:d6:98: 21:78:be:84:c5:e9:e1:30:09:da:17:9d:e6:ca:be: c1:fc:13:89:0f:f0:cc:b3:ee:4a:ad:3f:01:5b:73: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:B4:90:5E:42:FE:75:DD:1D:37:0C:62:9F:B3:F5:5E:E6:AA:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c8b71de-c6c6-317f-82a3-bf241164fd23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e4:e4:7f:1e:d3:60:e8:ef:ec:de:5c:9c:a5:19:1a:ee:b5: e6:b8:dc:b8:04:2a:6f:45:fe:52:14:2d:34:8c:7a:94:4d:1f: 23:0f:9a:f7:59:16:1e:92:16:02:cf:93:58:ac:ed:0e:79:42: 04:20:82:9e:e8:85:99:b8:f9:6c:40:02:54:8d:61:e8:36:e6: 55:66:62:59:6b:63:3e:ec:ab:27:81:6a:5f:48:99:77:5a:1a: 46:9e:38:30:57:24:f1:f7:93:2d:32:ec:fa:94:a0:91:d5:68: 34:55:a7:80:2f:79:3f:60:58:d5:b4:f2:6f:45:cd:a2:f7:a6: 93:06:4b:c3:45:8f:63:dd:79:89:8a:91:50:03:e4:a0:b4:e4: ee:91:56:e6:7f:e4:8e:59:97:b5:80:05:f0:35:6b:8a:40:db: 26:4e:7b:f3:cf:0b:41:70:69:93:2b:3f:9f:30:eb:e5:bc:72: e9:8e:fb:20:6d:88:bc:ee:aa:da:9b:e7:c0:0a:c0:88:a6:a4: 04:45:d0:db:8c:a9:a2:bf:3e:62:e8:f7:4e:0c:92:64:03:a0: c5:26:22:97:b7:af:68:3d:9b:9e:4f:d6:75:b2:1f:06:51:69: 70:bf:b5:ac:68:ae:63:45:26:60:43:dc:8a:ab:13:e2:6b:36: 69:59:c8:81 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epaJT8tgCpx1IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDVkOTRlMGYtOTZiZi00YzYyLTkxZDAtNTljMDRkN2UzMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG72t+A39yiHXMEF4g1j9pvPVE1BdS8przGh jBm3J/tznxInX3x/0YFKSM1h4g+GfCZygh0y3ZC9so/+ySkCj0yyenAYptpShQKp J+RN/PjDPK4l8QvMnKz14OjpnOQJ0viikesgzvW7MWIh63pdgvgrjMnAgK3Ip60u TUzWufkcUBbmkODH6W/OtwzuTWlo5A3edaZe5L46IJn+4etvrpz69pV9RdmDu7rk 2qy1iuioIo882FeaWrH5zEw8j1nPtyfrd8YXCRBExKwIr687OIUYLxzHSocQ911D xjiy1pgheL6ExenhMAnaF53myr7B/BOJD/DMs+5KrT8BW3Po6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMd3tJBeQv513R03DGKfs/Ve5qpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM4YjcxZGUtYzZjNi0z MTdmLTgyYTMtYmYyNDExNjRmZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBe5OR/HtNg6O/s3lycpRka7rXmuNy4BCpvRf5S FC00jHqUTR8jD5r3WRYekhYCz5NYrO0OeUIEIIKe6IWZuPlsQAJUjWHoNuZVZmJZ a2M+7KsngWpfSJl3WhpGnjgwVyTx95MtMuz6lKCR1Wg0VaeAL3k/YFjVtPJvRc2i 96aTBkvDRY9j3XmJipFQA+SgtOTukVbmf+SOWZe1gAXwNWuKQNsmTnvzzwtBcGmT Kz+fMOvlvHLpjvsgbYi87qram+fACsCIpqQERdDbjKmivz5i6PdODJJkA6DFJiKX t69oPZueT9Z1sh8GUWlwv7WsaK5jRSZgQ9yKqxPiazZpWciB -----END CERTIFICATE-----Generated at Sun Jun 15 17:53:05 2025 by rpki-client