$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa File: 0b6863c5-524e-3ada-b1f8-b23b96a42035.roa (raw, json) Hash identifier: 8XVowpKsHI3GzYM0qp+/SrRX/zPZLuw+YZpXCub4Nr0= Subject key identifier: 3E:87:12:CE:51:22:FE:90:C9:79:50:A0:F5:A7:C9:1E:9A:2C:DE:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A965D66346D4E4FD27460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 397200 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:96:5d:66:34:6d:4e:4f:d2:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=1a58ca1c-3179-4836-9380-f0d95a651b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:8c:f5:be:ec:1c:a3:f1:a2:f2:63:c4:1a: 73:9e:80:8a:3d:9b:23:e7:c4:9c:0e:4e:a4:a9:6e: e5:ce:22:4e:7d:c3:21:0c:62:ca:60:a2:d7:c5:56: dc:8f:b6:21:54:4f:54:1b:1d:90:f6:1a:8d:4c:14: 9e:98:48:92:05:c8:88:5d:7a:42:34:b7:10:23:6d: 12:51:64:0d:a7:a5:12:bb:f6:eb:2b:33:bc:f6:94: 78:83:74:4d:ea:a3:cb:c6:60:c3:57:25:cc:8d:81: 40:34:04:2b:11:75:21:f2:5d:13:0c:5e:9c:ca:bc: a8:b6:d2:9c:6d:ca:8d:b8:31:95:c8:26:2e:39:8f: e8:2d:b2:4d:26:55:1b:e1:dd:28:44:08:fc:d0:10: 66:5b:bf:a9:13:cc:00:57:65:eb:c6:66:7e:e6:0a: df:53:83:94:1e:e0:66:0e:83:e4:8e:72:b6:cc:5a: cf:a9:49:d1:4b:81:37:f9:60:7e:f4:3c:dd:05:f7: a3:1c:01:12:f7:a6:a8:7a:e1:ed:1d:54:9b:89:06: a7:39:97:ed:98:38:c7:6f:3c:e9:37:d2:a0:ac:52: c4:ef:74:26:c1:25:bb:41:db:db:91:97:9b:8f:05: c0:12:8f:92:af:fb:c5:60:42:7c:43:eb:d1:38:5e: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:87:12:CE:51:22:FE:90:C9:79:50:A0:F5:A7:C9:1E:9A:2C:DE:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d8:2a:06:f5:ef:5f:f1:e3:cc:24:40:1b:2d:7a:c0:1f:1a: 47:d9:a5:f2:dc:cb:ec:cf:8c:00:9b:69:df:5c:57:5c:d9:f6: 22:b3:be:2a:0d:3c:05:18:88:1b:57:fd:ef:cf:af:d0:83:04: 40:ac:f6:80:63:de:13:c4:51:8c:bd:62:a4:92:75:a3:94:cf: e3:ba:6b:29:97:cc:0e:5e:f7:85:6e:da:e4:dc:a9:f7:ae:b0: e0:eb:f0:1c:c6:11:a7:0a:d9:ab:dc:f1:a0:0f:67:81:7c:1c: 14:71:05:f6:f9:c0:d3:f1:0b:46:9c:c9:fc:c3:86:0d:b3:95: 67:a1:15:0b:d3:48:8a:37:89:bc:53:d2:b7:79:e3:e8:21:4c: 58:35:5e:51:7f:b3:ed:18:5a:62:de:6d:7d:1c:22:49:e3:fa: 53:8f:7e:61:99:9f:12:82:d8:2b:da:e8:b7:58:bb:d6:d1:54: ba:94:fd:47:27:e4:d2:e5:37:9e:17:78:cd:25:b9:b1:95:35: de:2c:9f:6a:9b:76:04:95:0c:8e:65:96:ab:92:18:13:f5:c7: 70:9a:2e:c3:44:df:35:44:e7:cc:11:c4:b9:ad:c2:4e:24:dd: 02:2a:e5:26:4e:03:19:9f:eb:25:db:ba:1a:eb:67:69:a8:a1: f6:cf:e3:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epZdZjRtTk/SdGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MWE1OGNhMWMtMzE3OS00ODM2LTkzODAtZjBkOTVhNjUxYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujKM9b7sHKPxovJjxBpznoCKPZsj58ScDk6k qW7lziJOfcMhDGLKYKLXxVbcj7YhVE9UGx2Q9hqNTBSemEiSBciIXXpCNLcQI20S UWQNp6USu/brKzO89pR4g3RN6qPLxmDDVyXMjYFANAQrEXUh8l0TDF6cyryottKc bcqNuDGVyCYuOY/oLbJNJlUb4d0oRAj80BBmW7+pE8wAV2XrxmZ+5grfU4OUHuBm DoPkjnK2zFrPqUnRS4E3+WB+9DzdBfejHAES96aoeuHtHVSbiQanOZftmDjHbzzp N9KgrFLE73QmwSW7QdvbkZebjwXAEo+Sr/vFYEJ8Q+vROF7FzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD6HEs5RIv6QyXlQoPWnyR6aLN5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI2ODYzYzUtNTI0ZS0z YWRhLWIxZjgtYjIzYjk2YTQyMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAS2CoG9e9f8ePMJEAbLXrAHxpH2aXy3Mvsz4wA m2nfXFdc2fYis74qDTwFGIgbV/3vz6/QgwRArPaAY94TxFGMvWKkknWjlM/jumsp l8wOXveFbtrk3Kn3rrDg6/AcxhGnCtmr3PGgD2eBfBwUcQX2+cDT8QtGnMn8w4YN s5VnoRUL00iKN4m8U9K3eePoIUxYNV5Rf7PtGFpi3m19HCJJ4/pTj35hmZ8Sgtgr 2ui3WLvW0VS6lP1HJ+TS5TeeF3jNJbmxlTXeLJ9qm3YElQyOZZarkhgT9cdwmi7D RN81ROfMEcS5rcJOJN0CKuUmTgMZn+sl27oa62dpqKH2z+Ot -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:36 2025 by rpki-client