$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50306b6c-db39-32d6-9e2c-9d8acfedda1f.roa File: 50306b6c-db39-32d6-9e2c-9d8acfedda1f.roa (raw, json) Hash identifier: UIOEs5Q54IbssyR7qhrgiwauLVBuc2qk54RXsh3vF9g= Subject key identifier: 86:E1:F7:AE:AB:C8:9D:82:F2:9A:06:8C:0A:E8:8C:C2:E4:D0:4E:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9CB9E05F46D197376980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50306b6c-db39-32d6-9e2c-9d8acfedda1f.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396599 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9c:b9:e0:5f:46:d1:97:37:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=71393960-19b5-44bc-8aac-78e986f7b12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:be:73:7f:ed:e9:35:3f:d8:35:dc:46:1e:bd: aa:e4:7a:53:f6:e0:07:88:52:0e:7a:3b:13:59:38: 99:95:52:60:f2:88:d5:d1:ef:56:f7:7e:d1:60:cb: 5a:b4:ac:6c:8b:88:22:d1:df:c7:84:82:78:93:f6: a4:45:4a:ad:5c:9a:35:fb:3b:5e:40:ea:c6:34:9d: 9e:04:5c:0d:4d:8b:a3:11:d4:6a:50:e1:b7:df:0d: aa:fa:db:cd:0e:2f:32:62:0d:bb:84:ab:21:97:7f: 76:71:bb:ae:e3:df:da:18:23:72:d3:c8:cc:45:a0: 4e:fc:04:30:d2:46:27:a4:28:ff:6d:46:de:26:3e: bf:5b:4f:1d:b3:e1:f6:e7:6a:5f:ee:dc:1d:c6:72: 25:db:80:1a:f6:b9:df:e3:4f:97:33:cf:42:98:ca: 9a:f0:57:ee:a3:4e:bd:60:65:08:f3:91:9e:7f:7a: b8:36:76:cc:c4:e5:1c:3c:b5:1f:9a:55:88:b5:45: d7:ca:d2:af:b8:c2:b0:a7:89:4e:89:da:45:f5:09: 34:66:72:a1:96:fa:6e:b8:a5:dd:e4:f7:ae:d2:30: f9:6c:40:8c:f5:94:87:09:a9:18:51:c0:7c:3a:b1: 28:05:39:f5:8b:2a:eb:54:dc:66:5f:ec:04:68:0c: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E1:F7:AE:AB:C8:9D:82:F2:9A:06:8C:0A:E8:8C:C2:E4:D0:4E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50306b6c-db39-32d6-9e2c-9d8acfedda1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2b:ec:f4:9c:49:d3:e1:69:a6:53:f6:f2:52:42:98:df:f9: 5d:75:dd:e1:9a:44:6e:92:d9:f9:47:37:74:76:00:b9:29:b2: a5:33:10:2f:3f:75:9c:8b:c5:a3:12:ce:21:2d:b1:ed:73:d7: 75:53:84:54:07:d1:88:81:4b:88:27:bc:3c:b7:b5:47:54:5b: 32:f7:71:33:2b:f2:7d:f1:4a:a5:10:68:a9:71:5b:51:71:c4: 8e:68:70:48:2d:38:11:4b:aa:1f:7c:50:81:e8:51:ae:3f:bd: af:58:db:36:f4:a6:6c:b0:04:19:16:2a:da:ca:1a:b9:a0:e0: 02:b6:4e:3f:4f:e1:a2:84:5f:7e:5f:8c:55:4c:b9:4d:5a:c2: 4a:d8:7a:d0:7f:35:cc:f8:39:eb:32:12:00:be:08:30:1a:14: 29:20:ed:3b:13:b3:c0:bd:d1:21:85:37:1e:71:12:47:ae:6d: be:23:58:d5:78:65:7b:12:26:28:11:af:51:6e:6c:85:fb:aa: a6:2e:49:ea:64:13:8f:12:28:cd:e5:46:a1:ef:af:49:38:6a: ca:95:c4:4e:a3:24:c7:f3:1d:0d:ba:60:74:26:fb:53:a3:4a: a5:ab:22:ed:61:08:c3:39:ca:7a:95:d6:66:3f:c1:dd:95:5c: 11:3e:34:6e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epy54F9G0Zc3aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NzEzOTM5NjAtMTliNS00NGJjLThhYWMtNzhlOTg2ZjdiMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL5zf+3pNT/YNdxGHr2q5HpT9uAHiFIOejsT WTiZlVJg8ojV0e9W937RYMtatKxsi4gi0d/HhIJ4k/akRUqtXJo1+zteQOrGNJ2e BFwNTYujEdRqUOG33w2q+tvNDi8yYg27hKshl392cbuu49/aGCNy08jMRaBO/AQw 0kYnpCj/bUbeJj6/W08ds+H252pf7twdxnIl24Aa9rnf40+XM89CmMqa8Ffuo069 YGUI85Gef3q4NnbMxOUcPLUfmlWItUXXytKvuMKwp4lOidpF9Qk0ZnKhlvpuuKXd 5Peu0jD5bECM9ZSHCakYUcB8OrEoBTn1iyrrVNxmX+wEaAyfHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIbh966ryJ2C8poGjArojMLk0E5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTAzMDZiNmMtZGIzOS0z MmQ2LTllMmMtOWQ4YWNmZWRkYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnK+z0nEnT4WmmU/byUkKY3/lddd3hmkRuktn5 Rzd0dgC5KbKlMxAvP3Wci8WjEs4hLbHtc9d1U4RUB9GIgUuIJ7w8t7VHVFsy93Ez K/J98UqlEGipcVtRccSOaHBILTgRS6offFCB6FGuP72vWNs29KZssAQZFirayhq5 oOACtk4/T+GihF9+X4xVTLlNWsJK2HrQfzXM+DnrMhIAvggwGhQpIO07E7PAvdEh hTcecRJHrm2+I1jVeGV7EiYoEa9RbmyF+6qmLknqZBOPEijN5Uah769JOGrKlcRO oyTH8x0NumB0JvtTo0qlqyLtYQjDOcp6ldZmP8HdlVwRPjRu -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:04 2025 by rpki-client