$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90db7b0a-2078-38f7-9d7b-d81a349bb258.roa File: 90db7b0a-2078-38f7-9d7b-d81a349bb258.roa (raw, json) Hash identifier: fFYoPpG1P3BLjmaRR99Cbe+EZ/cpcKtuwyrCPvsXuH8= Subject key identifier: 52:0A:F2:EF:07:92:AD:BA:D2:AB:52:3F:45:96:19:C9:CA:15:78:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9D323B82096277D52F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90db7b0a-2078-38f7-9d7b-d81a349bb258.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396575 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9d:32:3b:82:09:62:77:d5:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=47f0f330-42a7-4f29-9cf4-bfd477c8a247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:a0:18:f9:65:0b:0b:c2:f5:32:48:57:7b: df:1a:23:3b:4b:f3:22:79:d6:09:dd:3f:3c:d5:e2: 1e:3f:eb:24:64:8b:38:60:b5:99:b6:d5:cb:c4:a9: fc:9b:4e:c5:0a:31:5a:18:f6:bb:4f:64:6c:aa:2c: f6:26:b5:22:59:60:54:f0:c1:d1:08:63:5c:ff:3f: 0e:2e:f7:1c:0d:1b:99:96:bd:bf:d0:cd:79:21:6d: 9a:4d:35:60:06:3f:92:bd:0c:8c:44:75:0c:1c:79: 59:f5:94:7f:ea:01:a0:90:6f:4a:06:a7:5e:79:17: 2e:b0:eb:c0:59:ea:87:59:f4:bd:61:d2:35:ba:86: 2d:45:96:ca:95:a6:08:b6:e5:46:cc:0f:5f:7d:c0: e6:c2:16:e4:5d:2a:b0:cc:08:9c:b2:d5:21:cb:4d: f5:97:57:f0:a8:61:ae:55:1c:c6:fd:2e:eb:8f:ff: e6:e5:1f:c5:43:11:1f:d1:f5:4b:a4:20:5f:29:14: 25:37:cc:67:cb:61:0e:53:1f:75:25:33:1a:a1:32: 9b:1a:36:cb:e3:6b:78:b9:fd:07:2a:4c:0b:63:9f: 39:0a:dc:06:cb:57:b9:63:b5:4b:39:02:a2:87:8f: 57:b8:ec:34:4b:8f:49:f8:fa:5c:23:8d:cd:fc:f1: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0A:F2:EF:07:92:AD:BA:D2:AB:52:3F:45:96:19:C9:CA:15:78:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90db7b0a-2078-38f7-9d7b-d81a349bb258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ed:73:f4:2f:3d:15:46:59:1f:c8:9a:f0:03:75:a3:e1:2b: 1d:03:15:ef:32:8e:bb:f6:89:ce:4e:0e:15:38:e2:3e:b5:50: 0b:10:8a:a8:2a:3e:82:46:e0:fe:2f:37:99:06:6a:dc:dd:10: da:a0:bd:1c:d8:a8:cc:c1:e5:0a:ec:9b:83:98:53:15:14:70: cc:f7:be:c1:6a:44:62:fb:da:6e:5c:46:d7:76:47:2d:7b:04: 7d:5a:2a:aa:06:21:68:d9:f0:03:e5:ca:0b:df:4e:67:0b:94: d5:32:9c:58:2c:ab:43:80:68:f3:35:32:55:58:0c:ad:4f:b5: 97:e3:7f:77:0a:cd:ef:62:e0:3b:fc:72:e0:fb:af:6c:79:d3: c2:f3:56:34:92:f4:db:b3:5b:7f:eb:98:69:e5:68:20:00:05: a6:2c:f3:0c:53:d7:9e:4a:97:b8:08:85:42:a9:65:3d:37:2f: 7a:32:43:2c:01:3e:5d:6d:3b:46:2c:2e:d1:f3:78:c4:4f:81: 0e:bb:11:ad:ba:8f:c2:d6:0d:89:86:af:72:62:7a:e0:92:36: 4f:cd:c2:b9:1e:80:83:40:7a:8b:06:8c:5e:28:4f:ba:5f:08: f4:29:e3:35:b0:b8:96:b8:e2:0e:bb:a1:b0:a0:d5:2c:7b:db: 87:d2:3f:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4ep0yO4IJYnfVL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDdmMGYzMzAtNDJhNy00ZjI5LTljZjQtYmZkNDc3YzhhMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu2gGPllCwvC9TJIV3vfGiM7S/MiedYJ3T88 1eIeP+skZIs4YLWZttXLxKn8m07FCjFaGPa7T2Rsqiz2JrUiWWBU8MHRCGNc/z8O LvccDRuZlr2/0M15IW2aTTVgBj+SvQyMRHUMHHlZ9ZR/6gGgkG9KBqdeeRcusOvA WeqHWfS9YdI1uoYtRZbKlaYItuVGzA9ffcDmwhbkXSqwzAicstUhy031l1fwqGGu VRzG/S7rj//m5R/FQxEf0fVLpCBfKRQlN8xny2EOUx91JTMaoTKbGjbL42t4uf0H KkwLY585CtwGy1e5Y7VLOQKih49XuOw0S49J+PpcI43N/PFVBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFIK8u8Hkq260qtSP0WWGcnKFXjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBkYjdiMGEtMjA3OC0z OGY3LTlkN2ItZDgxYTM0OWJiMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAT7XP0Lz0VRlkfyJrwA3Wj4SsdAxXvMo679onO Tg4VOOI+tVALEIqoKj6CRuD+LzeZBmrc3RDaoL0c2KjMweUK7JuDmFMVFHDM977B akRi+9puXEbXdkctewR9WiqqBiFo2fAD5coL305nC5TVMpxYLKtDgGjzNTJVWAyt T7WX4393Cs3vYuA7/HLg+69sedPC81Y0kvTbs1t/65hp5WggAAWmLPMMU9eeSpe4 CIVCqWU9Ny96MkMsAT5dbTtGLC7R83jET4EOuxGtuo/C1g2Jhq9yYnrgkjZPzcK5 HoCDQHqLBoxeKE+6Xwj0KeM1sLiWuOIOu6GwoNUse9uH0j9p -----END CERTIFICATE-----Generated at Sun Jun 15 17:51:14 2025 by rpki-client