$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96fa6797-c6d7-38fb-ab66-134cd7699874.roa File: 96fa6797-c6d7-38fb-ab66-134cd7699874.roa (raw, json) Hash identifier: BB2uUd6MxExG03JtP5DgCdxw8dtRAAUYUIPOpFxJCDE= Subject key identifier: 13:37:D1:1F:E2:00:92:D2:65:9B:2C:C4:91:45:DF:24:F7:1C:88:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A00DAEEE389DD201448AC21E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96fa6797-c6d7-38fb-ab66-134cd7699874.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:ee:e3:89:dd:20:14:48:ac:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=6a585ea2-47a5-4d9d-a404-3cc9c394a83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:55:f0:3f:d7:f5:62:fb:ad:99:43:2e:ea: a5:55:0b:20:7a:75:33:a3:a0:bd:b0:19:99:da:13: ea:00:8f:3b:a7:64:28:29:31:b6:1a:a7:27:3f:a9: d7:5f:05:ff:99:8c:55:ab:7e:08:15:f4:e2:fb:c4: f7:6f:53:f6:fa:94:a9:34:c8:0c:f6:2d:7b:f7:15: 18:2a:17:40:f6:e6:e6:a3:4f:4f:73:26:f3:a5:58: c7:3d:6c:7c:da:35:2e:46:9e:ce:2e:a3:4b:26:b1: 85:02:2a:91:5d:c5:6b:02:62:c6:4f:76:1e:9c:e6: e7:8b:ee:2a:d5:99:27:da:f6:f8:d4:96:19:fc:86: f6:9a:21:ba:84:6a:2a:8f:c2:aa:ed:37:1d:54:29: 08:cc:ef:e6:2e:9e:cc:5a:fb:e7:be:60:52:01:c2: 16:eb:1f:f6:c9:1f:5f:25:65:07:18:60:83:70:f5: 84:c5:73:cf:f9:87:ca:ef:25:cc:1c:74:9c:75:8e: 70:cd:73:9f:16:2e:c9:e4:a5:65:97:fb:f1:cf:7e: ee:0f:b1:de:d1:36:72:08:b9:96:24:81:41:bb:68: 55:cc:24:41:f0:ba:c6:68:9d:77:84:70:cd:d1:6c: ac:23:4f:3a:4c:c9:7a:05:eb:06:b4:b3:1d:9a:1b: 70:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:37:D1:1F:E2:00:92:D2:65:9B:2C:C4:91:45:DF:24:F7:1C:88:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96fa6797-c6d7-38fb-ab66-134cd7699874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:60::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:5f:7e:ca:2a:33:9f:f8:3c:4c:ab:28:75:95:a0:64:93:02: 88:df:2d:90:f5:c3:82:d7:98:5e:02:ab:24:fc:16:58:e2:44: dd:c3:85:a4:ab:c8:d1:1d:08:4d:d9:de:08:c0:19:44:fa:c9: f6:9f:95:70:b8:5d:07:b2:92:75:d3:31:88:cb:af:d8:29:c9: 7b:74:dd:34:30:a5:7d:a2:30:11:bd:ab:46:62:5b:d4:51:6f: b5:a2:b6:ee:44:0c:c0:ba:73:9c:8f:5a:36:b8:c4:f3:28:23: c5:96:4b:96:72:d5:8e:10:e7:d7:62:91:35:f4:6e:de:05:98: b9:2f:c1:9c:94:de:f3:06:79:f5:a5:f8:99:61:8a:de:55:c5: 70:d8:c2:21:dc:ee:09:1f:e0:9e:7c:05:d5:d7:a3:ed:4b:e4: 3a:69:cd:71:14:25:5c:8f:9d:7c:a2:4e:6b:72:1e:d0:d8:a2: a5:fd:a1:c7:09:7a:5b:b8:70:c5:20:a0:4a:92:32:80:4f:55: e0:d0:bf:57:ef:80:4c:56:26:41:73:79:df:e7:3e:28:ce:8f: f9:cb:74:65:22:f5:fb:69:fb:bd:44:33:f0:b2:86:70:80:03: 28:ad:26:0f:40:9c:c5:fa:55:56:1a:98:8d:f7:cd:25:cc:60: 09:3e:85:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2u7jid0gFEisIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NmE1ODVlYTItNDdhNS00ZDlkLWE0MDQtM2NjOWMzOTRhODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZBV8D/X9WL7rZlDLuqlVQsgenUzo6C9sBmZ 2hPqAI87p2QoKTG2GqcnP6nXXwX/mYxVq34IFfTi+8T3b1P2+pSpNMgM9i179xUY KhdA9ubmo09PcybzpVjHPWx82jUuRp7OLqNLJrGFAiqRXcVrAmLGT3YenObni+4q 1Zkn2vb41JYZ/Ib2miG6hGoqj8Kq7TcdVCkIzO/mLp7MWvvnvmBSAcIW6x/2yR9f JWUHGGCDcPWExXPP+YfK7yXMHHScdY5wzXOfFi7J5KVll/vxz37uD7He0TZyCLmW JIFBu2hVzCRB8LrGaJ13hHDN0WysI086TMl6BesGtLMdmhtwHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBM30R/iAJLSZZssxJFF3yT3HIgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTZmYTY3OTctYzZkNy0z OGZiLWFiNjYtMTM0Y2Q3Njk5ODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5ffsoqM5/4PEyrKHWVoGSTAojfLZD1w4LXmF4CqyT8FljiRN3D haSryNEdCE3Z3gjAGUT6yfaflXC4XQeyknXTMYjLr9gpyXt03TQwpX2iMBG9q0Zi W9RRb7Witu5EDMC6c5yPWja4xPMoI8WWS5Zy1Y4Q59dikTX0bt4FmLkvwZyU3vMG efWl+Jlhit5VxXDYwiHc7gkf4J58BdXXo+1L5DppzXEUJVyPnXyiTmtyHtDYoqX9 occJelu4cMUgoEqSMoBPVeDQv1fvgExWJkFzed/nPijOj/nLdGUi9ftp+71EM/Cy hnCAAyitJg9AnMX6VVYamI33zSXMYAk+hTI= -----END CERTIFICATE-----Generated at Sun Jun 15 17:43:26 2025 by rpki-client