$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/114fb1ce-40a4-3f8d-a640-027c3341fe19.roa File: 114fb1ce-40a4-3f8d-a640-027c3341fe19.roa (raw, json) Hash identifier: EvdmTTJ8b7qf8LUndXjXRFibKS4WLgJ1ZlP/r+dLeTg= Subject key identifier: 1E:33:80:2E:72:72:F7:C6:84:3B:E0:88:DC:9D:AC:06:50:95:9B:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A95907FDAD8C2CF61D780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/114fb1ce-40a4-3f8d-a640-027c3341fe19.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 36625 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:95:90:7f:da:d8:c2:cf:61:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=605f76f1-a04a-460e-b955-4be3c5d4d56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:32:59:1f:56:55:da:d5:63:82:5d:36:30: 74:3c:af:98:71:16:bd:e4:ee:a3:e7:de:2d:f7:10: af:98:27:46:7d:6b:97:3b:c2:4c:0c:35:89:f6:bc: 4e:a3:78:6f:94:f6:7e:49:73:8e:e8:f8:cc:9d:9b: 7a:c1:b4:59:3c:3e:d6:7d:b3:71:6f:0b:87:3c:f5: 86:69:59:d3:7b:f2:d9:b1:80:41:30:11:15:4d:b8: 75:be:a4:72:59:f6:3a:30:f7:85:64:32:f0:05:29: d4:ae:9a:5f:71:96:ac:a3:0c:8e:35:dc:18:1d:fe: 4e:97:ee:ea:27:9f:f2:7c:c9:89:f8:a8:03:0b:cb: db:18:24:32:e9:a1:1d:dd:86:d6:4a:e0:53:29:bb: 73:cc:88:21:eb:67:96:ef:4e:4c:22:04:5d:c5:cb: a3:0e:09:cb:9c:4d:1b:34:ab:28:8b:11:9e:a3:07: cd:d4:68:49:a3:84:58:fb:32:c5:ea:3f:c1:28:7f: c8:77:ab:4e:da:fc:b3:14:59:20:6a:ac:f0:cd:20: 37:7c:25:81:09:bb:12:cd:9c:82:8d:bb:77:1b:07: ad:b6:40:79:e9:85:90:26:37:ee:26:1b:29:3b:d9: 4c:0e:d8:fc:f6:7d:8a:1d:f2:ab:b2:df:a5:13:5e: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:33:80:2E:72:72:F7:C6:84:3B:E0:88:DC:9D:AC:06:50:95:9B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/114fb1ce-40a4-3f8d-a640-027c3341fe19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:75:c9:98:d4:60:f6:76:91:d3:0a:d6:37:94:96:86:7b:84: 5e:be:fc:6a:eb:e3:a1:dc:08:1a:44:2b:e0:94:94:28:8e:e2: 27:2e:e3:c1:71:08:7d:44:2f:9b:50:2d:b5:2b:2b:36:7b:f0: 1c:19:99:55:69:40:ad:72:80:1a:e6:d2:1f:84:0d:da:22:fc: 7a:b6:98:1d:89:25:ac:e4:0b:b6:e7:e5:03:88:37:9c:b6:c4: d1:f1:3f:d3:f7:0f:4e:15:b9:d2:2b:24:de:66:9b:fa:0d:ec: b4:0f:c8:a6:fb:ef:45:05:fc:da:fa:30:5b:e6:e6:3c:13:e4: f4:aa:46:4e:87:76:17:ab:c9:a1:79:55:5d:44:00:65:91:ca: c4:dd:a5:5f:2d:c3:6c:04:65:00:35:44:25:77:03:46:a6:01: 16:65:62:34:45:59:c9:b2:d7:86:44:a3:a7:bb:92:fa:58:ec: 8f:a6:07:4c:79:0e:3f:08:6e:2f:93:94:d6:57:7a:e4:da:50: b5:ec:d5:be:6c:4e:59:76:09:fd:3d:ff:af:e8:6c:5b:63:49: f1:8d:e2:40:c7:26:02:97:92:ba:11:d7:5d:16:aa:33:b9:27: de:af:25:3d:80:7a:2c:19:52:91:70:8c:26:67:5a:52:5c:a9: 47:6c:70:98 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epWQf9rYws9h14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NjA1Zjc2ZjEtYTA0YS00NjBlLWI5NTUtNGJlM2M1ZDRkNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOgyWR9WVdrVY4JdNjB0PK+YcRa95O6j594t 9xCvmCdGfWuXO8JMDDWJ9rxOo3hvlPZ+SXOO6PjMnZt6wbRZPD7WfbNxbwuHPPWG aVnTe/LZsYBBMBEVTbh1vqRyWfY6MPeFZDLwBSnUrppfcZasowyONdwYHf5Ol+7q J5/yfMmJ+KgDC8vbGCQy6aEd3YbWSuBTKbtzzIgh62eW705MIgRdxcujDgnLnE0b NKsoixGeowfN1GhJo4RY+zLF6j/BKH/Id6tO2vyzFFkgaqzwzSA3fCWBCbsSzZyC jbt3GwettkB56YWQJjfuJhspO9lMDtj89n2KHfKrst+lE16aaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB4zgC5ycvfGhDvgiNydrAZQlZvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTE0ZmIxY2UtNDBhNC0z ZjhkLWE2NDAtMDI3YzMzNDFmZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAodcmY1GD2dpHTCtY3lJaGe4Revvxq6+Oh3Aga RCvglJQojuInLuPBcQh9RC+bUC21Kys2e/AcGZlVaUCtcoAa5tIfhA3aIvx6tpgd iSWs5Au25+UDiDectsTR8T/T9w9OFbnSKyTeZpv6Dey0D8im++9FBfza+jBb5uY8 E+T0qkZOh3YXq8mheVVdRABlkcrE3aVfLcNsBGUANUQldwNGpgEWZWI0RVnJsteG RKOnu5L6WOyPpgdMeQ4/CG4vk5TWV3rk2lC17NW+bE5Zdgn9Pf+v6GxbY0nxjeJA xyYCl5K6EdddFqozuSferyU9gHosGVKRcIwmZ1pSXKlHbHCY -----END CERTIFICATE-----Generated at Sat Jun 7 04:24:31 2025 by rpki-client