$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa File: 2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa (raw, json) Hash identifier: 9j7lITNRFxR1kNUL1zTVKx2uAwyF6CouVq7kYyh/DIA= Subject key identifier: C9:D9:E6:68:0B:55:6C:3E:22:62:EB:1E:4B:31:5A:F8:83:7F:00:F3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9D427841CFA8CAEF1518 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396570 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9d:42:78:41:cf:a8:ca:ef:15:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=dbde72b2-08dc-465d-b225-6573cec5033c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:a5:08:35:8a:77:5d:cb:d4:f8:68:82:fc: 3f:1a:b9:7b:f4:4e:e8:92:c2:a7:59:b5:c3:1e:22: 95:9c:fe:e8:a3:82:1b:8d:f3:03:d8:73:dc:09:d1: b4:89:f4:c4:b8:ca:46:7c:0e:db:a6:d9:eb:e4:c8: 90:eb:a3:5a:b9:67:46:11:25:9b:45:7a:2f:f0:8e: 07:4b:cc:00:e6:7f:86:f3:b5:8c:e1:93:0c:5e:17: 57:e8:d4:fc:8c:26:5a:fb:46:70:1b:10:7f:e8:a0: d4:78:0b:2b:01:f0:4c:e0:10:cc:df:bd:70:ba:20: d2:6f:53:50:f1:5f:9d:6c:e5:0c:e0:9b:6c:fe:31: d2:ce:d2:d4:11:e1:cd:c6:71:90:82:28:2e:3d:0e: 31:6c:32:ac:15:d2:35:25:a4:2b:b7:a6:95:bc:ea: 89:e3:31:ff:d4:91:e1:a4:4b:ac:ff:da:05:c6:dc: e9:85:38:c1:fc:73:57:34:ad:82:09:62:e4:c7:3a: de:91:c2:45:2a:6a:19:f4:37:a8:52:6f:f8:a7:d9: 90:2d:3e:ee:fb:21:c8:17:01:42:4a:29:dd:dc:3a: c9:db:aa:ec:9e:e3:52:18:eb:73:23:66:4c:f5:8a: 03:8d:2f:b6:69:32:60:35:38:4a:05:c7:5e:f6:98: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D9:E6:68:0B:55:6C:3E:22:62:EB:1E:4B:31:5A:F8:83:7F:00:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8b:a9:e6:39:97:15:39:a6:bf:32:69:ed:3b:3d:e9:ce:86: 4a:0e:9f:04:1d:0f:99:83:92:ed:12:08:8e:2e:3a:98:2b:bb: 8c:17:01:5a:44:37:c4:30:20:80:47:99:7e:68:7c:a4:98:c4: 24:f5:4f:8c:1e:3c:d3:2a:e9:09:58:06:8d:09:75:75:76:9f: fa:0b:67:d1:ee:ab:c9:86:7d:c1:5a:15:91:2b:e5:26:0c:74: 6e:74:8d:4c:60:0d:11:a7:04:95:3a:e8:91:31:6c:cd:d3:51: 34:31:40:df:c9:15:2e:66:ce:75:65:d0:5f:37:f9:7d:27:a7: 26:4b:86:7b:8b:ac:db:4c:d5:5b:74:e2:26:8a:e0:cf:7a:d2: 7e:49:f4:6a:6a:54:e7:07:4a:36:0c:8f:97:b3:c3:a3:86:ca: 1f:da:66:51:50:ba:ef:42:81:b8:d4:08:c8:d5:81:72:c4:6e: 14:38:f6:5d:cc:93:10:3a:41:6d:36:4c:44:a2:b5:e8:ad:02: 2b:3c:22:a9:3a:7d:da:95:c1:ef:fc:c9:e3:db:08:e5:7d:46: 9c:db:75:50:92:e3:6c:ba:a8:8b:01:7b:c9:6f:33:b4:17:ab: ec:f0:d6:12:6e:03:09:3b:9d:cf:08:76:d8:10:39:f3:b6:c3: 37:94:23:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4ep1CeEHPqMrvFRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGJkZTcyYjItMDhkYy00NjVkLWIyMjUtNjU3M2NlYzUwMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsymlCDWKd13L1Phogvw/Grl79E7oksKnWbXD HiKVnP7oo4IbjfMD2HPcCdG0ifTEuMpGfA7bptnr5MiQ66NauWdGESWbRXov8I4H S8wA5n+G87WM4ZMMXhdX6NT8jCZa+0ZwGxB/6KDUeAsrAfBM4BDM371wuiDSb1NQ 8V+dbOUM4Jts/jHSztLUEeHNxnGQgiguPQ4xbDKsFdI1JaQrt6aVvOqJ4zH/1JHh pEus/9oFxtzphTjB/HNXNK2CCWLkxzrekcJFKmoZ9DeoUm/4p9mQLT7u+yHIFwFC Sind3DrJ26rsnuNSGOtzI2ZM9YoDjS+2aTJgNThKBcde9pjXbwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMnZ5mgLVWw+ImLrHksxWviDfwDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmVkMGZmMWMtYmYyOS0z OGJiLWIyMjktYjgxZTA0ZTFhYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7i6nmOZcVOaa/MmntOz3pzoZKDp8EHQ+Zg5Lt EgiOLjqYK7uMFwFaRDfEMCCAR5l+aHykmMQk9U+MHjzTKukJWAaNCXV1dp/6C2fR 7qvJhn3BWhWRK+UmDHRudI1MYA0RpwSVOuiRMWzN01E0MUDfyRUuZs51ZdBfN/l9 J6cmS4Z7i6zbTNVbdOImiuDPetJ+SfRqalTnB0o2DI+Xs8Ojhsof2mZRULrvQoG4 1AjI1YFyxG4UOPZdzJMQOkFtNkxEorXorQIrPCKpOn3alcHv/Mnj2wjlfUac23VQ kuNsuqiLAXvJbzO0F6vs8NYSbgMJO53PCHbYEDnztsM3lCPx -----END CERTIFICATE-----Generated at Sat Jun 7 04:21:54 2025 by rpki-client