$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2117d8f6-cb4f-30e5-8cb3-c3d2c7faacbe.roa File: 2117d8f6-cb4f-30e5-8cb3-c3d2c7faacbe.roa (raw, json) Hash identifier: MZrCAoDeLYLUz7cS3HFnx01YNe7UTBXxEfeF4aWd/vY= Subject key identifier: 97:2E:C9:19:B5:E7:43:44:03:68:DE:F7:37:21:78:48:41:3F:AE:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A971AA0EB8418BD82E480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2117d8f6-cb4f-30e5-8cb3-c3d2c7faacbe.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396605 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:97:1a:a0:eb:84:18:bd:82:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=a25d9ffc-b4d1-4857-abf1-22befef2835b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:a7:40:34:be:73:c7:e6:2e:c8:de:e4:37: 33:aa:51:5d:c2:07:62:69:ae:84:79:fc:9d:34:30: 13:59:b6:dc:d5:69:8f:33:34:88:bc:53:ef:1b:a2: 56:8e:04:d1:05:63:c6:be:42:be:44:4b:d8:2c:f8: 92:ad:b4:8b:a4:64:26:10:b4:57:07:ac:2e:f7:c7: b0:c0:dc:3e:52:85:98:27:75:94:7d:d4:90:6d:be: 41:c7:f4:b0:87:d5:b8:b5:a7:d3:cb:62:34:ce:71: 20:69:7c:75:5c:b2:f9:9b:56:fc:7e:d0:92:ac:3f: bd:da:b3:4c:d9:79:c6:cb:f8:34:06:c3:1d:44:cf: c7:01:b3:71:0d:17:b0:5a:15:cc:17:14:a1:90:45: 58:a7:ec:6a:11:82:e9:1e:08:e8:19:b8:e5:36:29: db:34:79:8c:30:4e:7f:dc:28:64:fa:b7:f9:b4:9b: eb:ab:2a:46:62:5d:7c:c6:66:8b:f1:24:96:cb:62: b7:01:6c:d3:97:ab:dd:a9:a2:61:5c:72:6f:49:f4: 45:0d:87:9d:88:5b:3b:8c:e3:90:26:76:73:0a:ce: 7d:4d:86:76:c8:43:c5:08:25:ce:a5:b8:19:4a:2b: b0:82:51:e1:f3:47:38:2b:29:56:50:18:d2:9a:11: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2E:C9:19:B5:E7:43:44:03:68:DE:F7:37:21:78:48:41:3F:AE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2117d8f6-cb4f-30e5-8cb3-c3d2c7faacbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e5:c5:e8:2d:c4:84:6e:59:61:90:0c:0b:05:aa:38:e2:ca: 46:5c:d8:fe:e4:89:4f:f6:e1:fc:73:42:15:2f:d4:6e:c9:d5: 27:38:52:bf:57:e7:f9:eb:df:0e:39:f2:a0:fb:34:ab:d4:6d: c1:f0:a6:af:10:d7:a7:c3:d6:30:e5:b8:86:d9:17:77:6f:19: de:70:d0:82:34:11:f7:2a:fc:c2:3f:e8:ee:d9:e3:87:9a:68: 34:5d:00:21:a6:6a:37:60:1b:0e:a5:d8:1c:c5:c5:f6:9c:e8: df:37:b4:04:d7:ec:de:ba:4d:27:53:f6:5b:18:2b:95:88:fc: dc:4d:75:ff:0a:bd:a0:ce:14:9e:35:1b:cb:9c:ee:a3:2e:71: 02:47:36:5d:de:7d:6f:fd:5a:3e:76:a7:28:88:0f:ef:6f:c7: a4:d9:02:4d:d0:e3:97:42:9a:19:82:49:a1:27:76:74:35:70: 32:96:61:c8:13:bd:33:05:e3:c8:86:3d:18:eb:96:17:dc:55: 3c:ce:16:02:20:cf:51:8f:a6:6b:39:94:38:bb:d6:5a:d8:d1: 98:88:9a:4e:59:9a:40:97:eb:1f:ff:5c:71:e2:96:5c:1e:88: b7:f8:2f:d6:59:43:a1:d3:70:f2:74:89:21:40:88:eb:84:06: a2:b6:61:c8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epcaoOuEGL2C5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YTI1ZDlmZmMtYjRkMS00ODU3LWFiZjEtMjJiZWZlZjI4MzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXmnQDS+c8fmLsje5DczqlFdwgdiaa6Eefyd NDATWbbc1WmPMzSIvFPvG6JWjgTRBWPGvkK+REvYLPiSrbSLpGQmELRXB6wu98ew wNw+UoWYJ3WUfdSQbb5Bx/Swh9W4tafTy2I0znEgaXx1XLL5m1b8ftCSrD+92rNM 2XnGy/g0BsMdRM/HAbNxDRewWhXMFxShkEVYp+xqEYLpHgjoGbjlNinbNHmMME5/ 3Chk+rf5tJvrqypGYl18xmaL8SSWy2K3AWzTl6vdqaJhXHJvSfRFDYediFs7jOOQ JnZzCs59TYZ2yEPFCCXOpbgZSiuwglHh80c4KylWUBjSmhGfKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJcuyRm150NEA2je9zcheEhBP65TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjExN2Q4ZjYtY2I0Zi0z MGU1LThjYjMtYzNkMmM3ZmFhY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCE5cXoLcSEbllhkAwLBao44spGXNj+5IlP9uH8 c0IVL9RuydUnOFK/V+f5698OOfKg+zSr1G3B8KavENenw9Yw5biG2Rd3bxnecNCC NBH3KvzCP+ju2eOHmmg0XQAhpmo3YBsOpdgcxcX2nOjfN7QE1+zeuk0nU/ZbGCuV iPzcTXX/Cr2gzhSeNRvLnO6jLnECRzZd3n1v/Vo+dqcoiA/vb8ek2QJN0OOXQpoZ gkmhJ3Z0NXAylmHIE70zBePIhj0Y65YX3FU8zhYCIM9Rj6ZrOZQ4u9Za2NGYiJpO WZpAl+sf/1xx4pZcHoi3+C/WWUOh03DydIkhQIjrhAaitmHI -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:05 2025 by rpki-client