$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa File: 394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa (raw, json) Hash identifier: cSsTi3XJZwLmTgFAQy0X1idCXehCVxdD3fV1Wj6lBKk= Subject key identifier: 06:87:6A:98:E4:B0:A5:67:D4:96:89:57:D1:3E:19:29:C6:9A:AC:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A99D1039E7F57D5FFA070 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396589 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:99:d1:03:9e:7f:57:d5:ff:a0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=cb0e7011-2067-4a82-a4dc-7dbee924e4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e9:6a:8b:d2:09:be:fc:3c:7f:c5:7f:03:f0: f7:7e:a2:26:60:15:75:c3:4f:98:ce:e2:30:15:1d: f0:72:d7:82:f4:ba:35:e6:6b:33:89:e5:07:83:51: 06:67:98:f9:82:30:ee:31:e7:71:17:e2:89:90:02: c4:2f:96:57:ce:0e:11:73:5a:48:35:6d:06:fc:58: 16:7e:10:02:52:15:de:0f:39:a2:26:36:e2:ed:be: 74:5b:11:c7:6c:31:6d:90:11:30:0a:10:31:f5:f1: 01:e8:47:f6:85:d1:1a:78:a6:22:04:73:f5:d2:b4: c8:9a:e0:d1:45:10:6b:f5:0b:77:87:d0:77:02:ea: 79:82:ed:c9:3c:16:6c:af:9d:42:1a:44:29:c9:0f: 9d:fd:de:fd:e5:b0:77:9f:56:13:80:c3:06:3b:62: ae:ac:7d:e1:67:ce:88:bd:03:08:48:35:1d:cd:28: ce:c6:f7:1d:41:9e:9d:e1:a2:b2:43:b1:65:b0:3e: c2:53:3a:69:62:84:fe:47:c0:93:de:6a:21:41:14: 54:a7:8c:35:0e:31:cf:4a:06:83:11:24:e1:23:55: 4f:98:cd:e7:2a:3f:d4:a5:42:33:cc:49:94:c9:a2: a4:4d:17:64:f9:1b:7a:e1:ba:af:c8:70:67:3b:9f: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:87:6A:98:E4:B0:A5:67:D4:96:89:57:D1:3E:19:29:C6:9A:AC:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1c:5f:03:10:f0:49:67:19:8a:0a:ab:1e:be:ca:cf:32:25: 2d:98:ba:65:ce:d9:ca:ac:e9:85:93:6d:1b:b2:c9:a8:63:69: 84:ff:69:77:2f:30:29:7b:26:0c:35:ff:f5:f3:0e:59:14:f3: bd:2b:e3:b7:e0:37:f0:d6:c8:c4:33:01:62:da:cd:0d:6f:60: cf:f8:d8:76:47:e9:57:2a:86:6c:c5:7b:93:29:c4:02:98:0c: 72:6f:ea:05:71:4e:a7:11:2c:f5:24:e2:e5:d3:36:19:5a:62: 30:26:1e:05:9c:61:ce:a8:63:5d:40:ef:59:88:77:1c:6e:12: ea:e5:55:a8:e0:b1:45:12:33:bc:91:be:bf:9a:bd:a7:66:60: 44:59:69:21:a2:a4:90:f4:44:ae:fb:2f:9e:23:0c:2a:a9:ff: c4:db:46:55:c6:07:a2:cb:69:92:4b:b6:29:6b:72:bc:71:69: a4:63:42:65:9b:57:d2:f4:74:b3:92:ba:3d:87:a2:5a:7b:e0: c0:b7:2b:8a:3b:2f:59:81:34:c7:5e:c8:70:ad:2c:39:8d:95: 4c:0f:4a:0a:09:05:81:db:87:8f:29:79:ba:0a:ab:f8:6f:9b: 8b:6c:7f:bc:72:22:98:88:db:25:33:80:56:8d:32:c8:50:10: 0b:1f:6f:e0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epnRA55/V9X/oHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk Y2IwZTcwMTEtMjA2Ny00YTgyLWE0ZGMtN2RiZWU5MjRlNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhulqi9IJvvw8f8V/A/D3fqImYBV1w0+YzuIw FR3wcteC9Lo15mszieUHg1EGZ5j5gjDuMedxF+KJkALEL5ZXzg4Rc1pINW0G/FgW fhACUhXeDzmiJjbi7b50WxHHbDFtkBEwChAx9fEB6Ef2hdEaeKYiBHP10rTImuDR RRBr9Qt3h9B3Aup5gu3JPBZsr51CGkQpyQ+d/d795bB3n1YTgMMGO2KurH3hZ86I vQMISDUdzSjOxvcdQZ6d4aKyQ7FlsD7CUzppYoT+R8CT3mohQRRUp4w1DjHPSgaD ESThI1VPmM3nKj/UpUIzzEmUyaKkTRdk+Rt64bqvyHBnO5818QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAaHapjksKVn1JaJV9E+GSnGmqzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk0Y2VmYzktNjFjNy0z Y2UxLWE2ZWMtZWEzY2ExODEzMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLHF8DEPBJZxmKCqsevsrPMiUtmLplztnKrOmF k20bssmoY2mE/2l3LzApeyYMNf/18w5ZFPO9K+O34Dfw1sjEMwFi2s0Nb2DP+Nh2 R+lXKoZsxXuTKcQCmAxyb+oFcU6nESz1JOLl0zYZWmIwJh4FnGHOqGNdQO9ZiHcc bhLq5VWo4LFFEjO8kb6/mr2nZmBEWWkhoqSQ9ESu+y+eIwwqqf/E20ZVxgeiy2mS S7Ypa3K8cWmkY0Jlm1fS9HSzkro9h6Jae+DAtyuKOy9ZgTTHXshwrSw5jZVMD0oK CQWB24ePKXm6Cqv4b5uLbH+8ciKYiNslM4BWjTLIUBALH2/g -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:55 2025 by rpki-client