$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa File: 9449775a-db61-31cd-b34d-9168a384b676.roa (raw, json) Hash identifier: MEC3v5AFbk7t0Pyc2O7xleUbfNQk6InhfXmYl1xftIA= Subject key identifier: EC:79:C8:5F:34:E8:81:EE:1A:17:77:96:1D:B2:96:E5:92:A9:21:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9D14FAC72E0B1AED7800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396540 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9d:14:fa:c7:2e:0b:1a:ed:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=999ce2fa-ee63-412b-9938-ecebdca3ecbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:ed:35:cc:07:68:00:09:71:f4:a4:6d:c8: 31:fd:0c:13:e5:99:99:5a:93:21:37:14:a9:ef:a5: b8:96:7e:cd:53:92:b2:82:33:d4:29:73:61:14:6d: 76:61:4d:9d:55:4d:6d:88:4b:2a:49:c8:e4:b0:af: da:d0:d9:08:ab:be:22:84:20:cb:c4:c0:0e:6b:90: 7e:22:1a:45:f6:3f:bc:cb:23:ba:52:da:46:14:f0: 6e:98:31:f7:fd:93:8d:bd:a1:18:e2:cc:86:39:a4: b6:bd:73:44:fa:a5:25:cc:25:bc:3c:2e:e2:10:2c: 62:6b:49:48:87:28:9b:11:2d:0e:c7:7f:6f:a2:be: 6f:55:a9:72:c6:73:f5:ab:9f:7d:cd:66:49:e9:f9: 94:96:97:36:a9:bd:99:7f:04:65:c6:67:b3:d3:18: dc:4a:37:c7:8e:14:6b:23:c6:72:ac:6f:d1:3e:06: a1:37:6f:f1:e3:25:bd:ff:26:7b:de:18:5c:a7:74: 9d:f6:38:20:78:a5:ce:63:d5:36:58:c9:0d:a0:d4: fd:3d:f7:63:a5:c8:1f:88:00:69:6f:99:fb:1a:ae: 91:99:28:dd:f6:0a:77:83:3d:27:66:b7:ca:4e:37: 60:d4:f7:ce:7d:a8:bf:36:37:07:dc:50:d5:22:f6: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:79:C8:5F:34:E8:81:EE:1A:17:77:96:1D:B2:96:E5:92:A9:21:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:75:3b:22:21:38:e1:50:7d:dc:da:68:96:d5:5c:af:e8:6b: c5:9d:87:41:3b:e8:de:7c:41:9e:22:0f:e6:b5:0a:38:50:56: 37:60:3f:f7:ae:7f:fe:5c:d9:8e:18:2f:6a:f3:22:88:ca:ca: f6:fd:08:7b:56:6e:6a:c0:f6:85:65:93:4d:03:bc:81:06:fc: f0:5e:9e:f5:5b:38:f7:77:94:1c:9a:64:15:b7:68:4a:8b:34: 64:7e:70:6d:e8:6b:b8:8d:28:87:06:a4:fd:ff:93:dc:21:48: 74:4f:91:48:69:a3:19:f7:75:e9:4d:e5:6a:b6:08:e4:62:c4: 01:24:d9:a1:5c:ba:40:04:4d:8d:79:4a:50:d9:ef:8f:92:5c: f8:c7:cf:9a:7a:af:f0:9c:2e:d9:07:d3:b6:1e:b2:34:fc:51: e8:73:4d:20:f4:7b:63:78:00:33:89:6c:00:8f:d0:ed:28:36: 56:4c:e1:9b:b3:97:97:b9:0f:53:65:c7:c1:86:2b:6e:85:05: 26:e2:aa:55:9a:05:69:62:05:84:98:ec:16:5f:f3:f6:87:23: 7e:de:e0:c6:ac:1e:b4:65:3b:d4:58:36:07:a3:2a:a1:f1:71: e3:08:d2:29:dc:07:b0:28:51:7e:ba:81:39:13:5b:0c:42:f1: d1:11:24:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4ep0U+scuCxrteAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk OTk5Y2UyZmEtZWU2My00MTJiLTk5MzgtZWNlYmRjYTNlY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjbtNcwHaAAJcfSkbcgx/QwT5ZmZWpMhNxSp 76W4ln7NU5KygjPUKXNhFG12YU2dVU1tiEsqScjksK/a0NkIq74ihCDLxMAOa5B+ IhpF9j+8yyO6UtpGFPBumDH3/ZONvaEY4syGOaS2vXNE+qUlzCW8PC7iECxia0lI hyibES0Ox39vor5vValyxnP1q599zWZJ6fmUlpc2qb2ZfwRlxmez0xjcSjfHjhRr I8ZyrG/RPgahN2/x4yW9/yZ73hhcp3Sd9jggeKXOY9U2WMkNoNT9PfdjpcgfiABp b5n7Gq6RmSjd9gp3gz0nZrfKTjdg1PfOfai/NjcH3FDVIvYaSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOx5yF806IHuGhd3lh2yluWSqSF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQ0OTc3NWEtZGI2MS0z MWNkLWIzNGQtOTE2OGEzODRiNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7dTsiITjhUH3c2miW1Vyv6GvFnYdBO+jefEGe Ig/mtQo4UFY3YD/3rn/+XNmOGC9q8yKIysr2/Qh7Vm5qwPaFZZNNA7yBBvzwXp71 Wzj3d5QcmmQVt2hKizRkfnBt6Gu4jSiHBqT9/5PcIUh0T5FIaaMZ93XpTeVqtgjk YsQBJNmhXLpABE2NeUpQ2e+Pklz4x8+aeq/wnC7ZB9O2HrI0/FHoc00g9HtjeAAz iWwAj9DtKDZWTOGbs5eXuQ9TZcfBhituhQUm4qpVmgVpYgWEmOwWX/P2hyN+3uDG rB60ZTvUWDYHoyqh8XHjCNIp3AewKFF+uoE5E1sMQvHRESQQ -----END CERTIFICATE-----Generated at Sun Jun 15 16:17:57 2025 by rpki-client