$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa File: cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa (raw, json) Hash identifier: vxMbvNs03ZThzMuwn9EgJut41e3Ywb5UJ+Of9zSYsI8= Subject key identifier: D5:53:5E:0D:4D:E4:E0:ED:52:1E:A6:97:AD:57:CE:53:9F:67:8A:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD00207450328B76F6080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396579 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d0:02:07:45:03:28:b7:6f:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=9a19dbce-884b-44a3-9b22-60b1ad76bc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:15:30:ad:2e:d2:aa:86:08:78:d1:39:1e:38: ad:3f:78:eb:8e:9c:3b:93:46:fc:b1:6d:ac:83:4e: 16:f9:e9:d3:22:08:27:49:fb:d9:51:77:0a:ac:14: 35:2e:d3:4a:96:66:6f:03:7e:20:e3:1c:99:0e:c4: ed:62:b3:71:07:97:b5:5c:ed:2a:8c:24:56:35:cf: 9a:96:b3:1b:33:b0:bf:b3:fa:3e:c4:a5:c1:a5:ad: e3:1e:8e:bc:d2:35:38:e9:ad:33:a0:fd:d1:f7:07: 8f:9d:2d:52:a9:b3:bb:96:a0:10:79:58:66:87:42: 5d:ea:a4:de:3b:4b:8f:f1:87:09:8c:6d:41:aa:31: 01:e4:bd:3f:29:ca:82:31:ac:7d:f3:2a:04:91:c6: ed:45:a0:64:62:cf:b2:8f:65:2c:ea:a1:10:46:cf: b9:cb:61:23:05:44:7f:06:0c:4d:d7:34:27:ad:2b: 00:ef:ae:f4:86:83:56:91:68:54:7f:87:91:40:64: 73:63:6b:78:b0:ee:ab:70:af:c3:45:5f:1e:25:ff: 51:60:f5:ee:2d:34:2e:59:ae:8e:06:2e:82:4a:2e: 5f:13:82:8a:5a:5e:43:25:40:62:f9:30:3e:a1:f6: 82:a5:c3:84:a8:92:e6:4d:50:d5:d6:31:65:9f:bd: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:53:5E:0D:4D:E4:E0:ED:52:1E:A6:97:AD:57:CE:53:9F:67:8A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d7:99:da:59:d2:52:50:c0:b9:ae:6b:07:ad:62:d6:5c:b9: df:1b:05:b3:f9:bc:e4:00:88:2d:cc:7c:76:e7:5c:c8:22:f9: 3e:c4:60:ff:90:b6:85:23:d7:4e:c7:7b:32:f8:74:6d:ab:85: ce:81:98:6c:7a:06:c0:f6:82:90:80:14:68:9f:e0:7c:81:2b: b5:df:6d:fc:7b:96:eb:f9:e6:dd:33:69:bb:4c:cc:12:45:3a: 38:ea:60:e1:2c:58:bc:74:ee:b1:4b:9b:1e:06:ec:24:52:eb: 89:37:c8:2c:3b:2e:20:86:41:33:3a:f5:61:34:a5:56:71:5a: 3c:8f:62:96:d8:f0:c0:49:fd:72:eb:70:9d:47:4b:a3:63:3a: c0:9f:30:b4:39:99:53:78:67:aa:bc:33:05:3b:68:b1:19:b1: cd:97:c8:2b:e5:81:b9:f3:56:4c:4a:72:91:e7:12:a2:86:f6: ff:1a:87:e1:72:44:ae:ea:57:49:34:bb:eb:e6:b0:81:ae:5f: d4:25:9b:2c:75:16:65:d6:28:0a:fe:dd:99:14:28:0c:78:ea: 15:a5:08:cc:73:d3:d8:1f:24:6a:27:07:80:c1:23:5c:41:d3: 11:7b:10:4c:8b:ef:66:3a:2c:4e:29:3d:bb:5d:b0:db:91:4d: d1:fe:cf:1b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9ACB0UDKLdvYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OWExOWRiY2UtODg0Yi00NGEzLTliMjItNjBiMWFkNzZiYzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BUwrS7SqoYIeNE5HjitP3jrjpw7k0b8sW2s g04W+enTIggnSfvZUXcKrBQ1LtNKlmZvA34g4xyZDsTtYrNxB5e1XO0qjCRWNc+a lrMbM7C/s/o+xKXBpa3jHo680jU46a0zoP3R9wePnS1SqbO7lqAQeVhmh0Jd6qTe O0uP8YcJjG1BqjEB5L0/KcqCMax98yoEkcbtRaBkYs+yj2Us6qEQRs+5y2EjBUR/ BgxN1zQnrSsA7670hoNWkWhUf4eRQGRzY2t4sO6rcK/DRV8eJf9RYPXuLTQuWa6O Bi6CSi5fE4KKWl5DJUBi+TA+ofaCpcOEqJLmTVDV1jFln71IKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNVTXg1N5ODtUh6ml61XzlOfZ4qxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxZTY0ZWQtZjhmOC0z NDE4LTkxMmYtZmFmZGQwNWYyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB915naWdJSUMC5rmsHrWLWXLnfGwWz+bzkAIgt zHx251zIIvk+xGD/kLaFI9dOx3sy+HRtq4XOgZhsegbA9oKQgBRon+B8gSu13238 e5br+ebdM2m7TMwSRTo46mDhLFi8dO6xS5seBuwkUuuJN8gsOy4ghkEzOvVhNKVW cVo8j2KW2PDASf1y63CdR0ujYzrAnzC0OZlTeGeqvDMFO2ixGbHNl8gr5YG581ZM SnKR5xKihvb/GofhckSu6ldJNLvr5rCBrl/UJZssdRZl1igK/t2ZFCgMeOoVpQjM c9PYHyRqJweAwSNcQdMRexBMi+9mOixOKT27XbDbkU3R/s8b -----END CERTIFICATE-----Generated at Sun Jun 15 16:07:26 2025 by rpki-client