$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa File: 31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa (raw, json) Hash identifier: PzH5NR67ZJCR6ql+pfUuGzC6wOvq3U9jMLPMsTWXc1M= Subject key identifier: 89:3D:27:81:15:0A:59:1B:D7:6E:10:16:C6:3E:24:2A:F7:3C:44:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9765EFE69F56824AD330 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396585 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:97:65:ef:e6:9f:56:82:4a:d3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=41fc9d4a-8323-4263-8d68-7c61de118807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:32:6c:db:56:06:91:ca:12:47:aa:2e:30: 44:17:7c:01:61:fd:ce:d1:13:c0:1f:b5:a9:91:89: 01:06:4e:d9:7b:5e:34:1a:d3:c5:88:80:95:4a:a0: 0c:aa:b4:86:b4:bf:59:2c:8b:9b:04:e2:06:d2:e4: c9:06:bd:65:12:28:93:46:77:40:2a:ba:d4:3a:da: fd:24:62:fc:d2:c4:82:47:89:0a:79:1f:91:bd:55: 2e:39:bb:c0:b7:6a:5d:2e:27:a8:40:26:a2:e7:9f: 2d:1c:64:47:1f:67:85:3d:17:ca:76:29:46:11:87: 34:73:24:c4:43:9b:da:4d:91:0e:29:70:51:a2:a3: 90:75:b2:ee:06:0e:47:4c:8a:f1:74:a2:e7:a8:39: 54:b6:ec:85:5d:8f:d1:ad:d1:25:f7:62:9b:95:bd: 8d:4f:c5:2f:65:f5:b7:f7:2a:01:80:e9:b8:01:4a: 7d:e0:99:52:a7:c3:36:db:c1:52:59:fb:0b:67:f1: 32:c7:df:53:fb:26:d0:e4:d8:1a:b2:ef:06:76:1c: f7:7e:91:9f:d0:b1:99:f0:90:b3:c1:9a:72:80:04: d8:08:8e:58:f2:fd:b1:fd:f3:62:51:a3:04:30:86: 59:3d:13:49:8b:26:82:66:5b:0b:17:28:fc:51:b5: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3D:27:81:15:0A:59:1B:D7:6E:10:16:C6:3E:24:2A:F7:3C:44:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9d:64:63:65:a5:b3:a1:98:34:9f:9f:29:b6:e2:6e:3c:ae: d8:b8:93:5c:48:7f:a1:04:40:b8:2f:af:e7:09:7d:74:e7:bc: 7b:7b:11:d3:d3:4f:98:29:ac:fa:c6:ed:97:2a:66:cc:c9:c1: b0:f1:76:5b:43:1c:ae:a0:31:cb:f8:06:6a:ed:2e:40:53:72: 48:e9:82:25:2a:c6:45:3b:90:49:e6:ab:fb:c5:cb:20:a6:f1: db:cc:2c:73:a4:4f:07:30:8c:81:d9:1a:00:14:3a:8a:c1:94: 83:e7:49:0e:ca:0f:6e:e9:29:6c:87:13:25:f3:f3:6c:ab:4a: e4:dc:6a:bc:2c:8c:a9:66:02:0c:fc:50:4e:73:25:a3:c2:4c: 55:dd:44:be:58:96:08:f6:a5:9d:f0:b9:c2:c3:43:12:e1:dd: dc:73:53:63:a0:f9:ab:ae:67:64:e9:76:3e:47:a8:13:31:7d: da:38:21:57:06:e3:30:18:e8:51:3d:96:48:e3:41:a8:a5:37: 75:5f:fd:64:8d:ae:33:d8:19:3c:96:bc:62:e5:b9:04:22:04: e4:2d:09:d5:7d:45:ac:6c:0f:45:5b:a7:e6:aa:4b:e5:b6:88: 9a:f7:13:cd:17:21:5e:91:58:23:a1:a6:dc:09:3c:4a:63:31: 73:4b:6b:0c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epdl7+afVoJK0zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDFmYzlkNGEtODMyMy00MjYzLThkNjgtN2M2MWRlMTE4ODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVMybNtWBpHKEkeqLjBEF3wBYf3O0RPAH7Wp kYkBBk7Ze140GtPFiICVSqAMqrSGtL9ZLIubBOIG0uTJBr1lEiiTRndAKrrUOtr9 JGL80sSCR4kKeR+RvVUuObvAt2pdLieoQCai558tHGRHH2eFPRfKdilGEYc0cyTE Q5vaTZEOKXBRoqOQdbLuBg5HTIrxdKLnqDlUtuyFXY/RrdEl92Kblb2NT8UvZfW3 9yoBgOm4AUp94JlSp8M228FSWfsLZ/Eyx99T+ybQ5Ngasu8Gdhz3fpGf0LGZ8JCz wZpygATYCI5Y8v2x/fNiUaMEMIZZPRNJiyaCZlsLFyj8UbVmmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIk9J4EVClkb124QFsY+JCr3PEQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzFmMmExOGUtYTU4Yi0z ZTg4LWJlOWEtMTQ1M2NmNGQxNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBAnWRjZaWzoZg0n58ptuJuPK7YuJNcSH+hBEC4 L6/nCX1057x7exHT00+YKaz6xu2XKmbMycGw8XZbQxyuoDHL+AZq7S5AU3JI6YIl KsZFO5BJ5qv7xcsgpvHbzCxzpE8HMIyB2RoAFDqKwZSD50kOyg9u6SlshxMl8/Ns q0rk3Gq8LIypZgIM/FBOcyWjwkxV3US+WJYI9qWd8LnCw0MS4d3cc1NjoPmrrmdk 6XY+R6gTMX3aOCFXBuMwGOhRPZZI40GopTd1X/1kja4z2Bk8lrxi5bkEIgTkLQnV fUWsbA9FW6fmqkvltoia9xPNFyFekVgjoabcCTxKYzFzS2sM -----END CERTIFICATE-----Generated at Fri Jun 6 19:16:53 2025 by rpki-client