$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa File: 526b3a19-ab1a-36ab-b6ad-46405ac52802.roa (raw, json) Hash identifier: Nz815yfimaL9ItcR/FxrmKvIppsiB/H0Df+vuf+P6+M= Subject key identifier: E8:FD:2A:82:D1:C7:92:EE:56:F8:48:9A:B7:82:73:59:A0:A1:1B:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A97B9F78108CCD976AD60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396572 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:97:b9:f7:81:08:cc:d9:76:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=4c6e85ea-9e0c-457f-b93b-ab11d2b2d4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:f9:12:5b:aa:3c:bd:79:c3:a7:20:3b:00: fa:8c:e1:07:c5:24:8d:f8:04:80:18:e4:a7:10:f6: 04:83:fd:ef:af:84:d6:ef:ee:60:56:2a:4d:46:10: 91:e8:a4:e0:ae:ad:de:e9:8c:78:d5:fb:a4:16:ee: fc:48:25:8a:31:2b:19:0a:06:e3:8c:1c:a3:0b:43: f6:45:0b:5f:87:24:bb:cd:09:f0:9c:9b:0c:d3:0c: 8d:1c:33:96:71:48:dd:0f:52:b8:a3:04:98:c1:d1: 59:41:0d:16:51:d7:2f:73:e9:f6:3a:c7:0e:32:c9: 7f:d1:e4:b9:0a:19:00:b0:cf:f2:49:ec:25:1c:ac: 68:f2:f9:c6:ba:5a:bd:8a:4c:54:f3:07:be:ea:37: 66:8a:5c:8e:0c:5a:e8:2b:42:b2:8f:b7:38:f8:80: c6:9e:e0:d0:da:04:97:32:5e:9d:19:5b:a4:0e:1e: fa:fa:95:06:36:9f:24:96:40:39:ff:01:9c:b9:ff: 39:2d:b1:38:05:71:13:70:50:70:d6:52:2e:9f:d3: 5c:93:c3:92:6b:cc:25:a6:93:0f:a8:a4:7c:4d:37: 6d:dd:14:18:10:eb:dc:77:1d:fd:33:b1:75:17:35: 8f:34:e3:31:e0:22:fa:07:bb:24:6f:99:41:d9:1f: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:2A:82:D1:C7:92:EE:56:F8:48:9A:B7:82:73:59:A0:A1:1B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bf:90:49:03:09:b1:45:73:cf:97:61:40:47:f7:2d:d2:6a: e7:59:43:8e:fa:8c:fd:a1:09:40:d1:46:b7:8c:56:72:56:ef: f9:be:4d:60:0d:4b:e0:b7:bb:9b:63:fb:67:87:f0:fc:fd:6e: 15:2d:85:9a:a7:75:ed:4b:17:00:49:b7:b5:b7:8d:13:f8:f6: c1:05:b4:59:3c:91:da:51:aa:5b:bd:81:0e:1d:c0:05:5e:c9: 99:7f:eb:48:ce:2c:b3:09:9e:95:90:2f:e6:f9:e7:34:3d:ef: 21:e6:d4:2d:62:09:05:6e:1c:3a:6a:ae:c5:1d:40:7d:57:43: 73:ec:e0:f5:68:1f:10:59:6d:9f:c3:8a:24:1f:0f:67:9b:cb: ba:41:45:46:b6:f3:bd:04:82:cb:cc:f9:15:46:4e:a6:7d:d6: 14:1a:21:79:c7:d9:f3:c4:92:9d:c9:01:a5:92:74:90:57:94: c3:8b:e2:32:af:11:b7:d0:45:43:43:b2:91:b2:eb:a9:0b:48: e8:6d:28:e3:60:ed:a5:72:3a:da:34:d5:86:62:99:63:db:ca: 50:c8:cd:3e:db:44:15:88:a7:30:70:6e:98:4d:17:a3:da:a7: d6:4b:21:68:f9:47:97:fe:57:13:d5:c9:04:d6:28:a1:82:94: c3:70:5f:92 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epe594EIzNl2rWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NGM2ZTg1ZWEtOWUwYy00NTdmLWI5M2ItYWIxMWQyYjJkNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitv5EluqPL15w6cgOwD6jOEHxSSN+ASAGOSn EPYEg/3vr4TW7+5gVipNRhCR6KTgrq3e6Yx41fukFu78SCWKMSsZCgbjjByjC0P2 RQtfhyS7zQnwnJsM0wyNHDOWcUjdD1K4owSYwdFZQQ0WUdcvc+n2OscOMsl/0eS5 ChkAsM/ySewlHKxo8vnGulq9ikxU8we+6jdmilyODFroK0Kyj7c4+IDGnuDQ2gSX Ml6dGVukDh76+pUGNp8klkA5/wGcuf85LbE4BXETcFBw1lIun9Nck8OSa8wlppMP qKR8TTdt3RQYEOvcdx39M7F1FzWPNOMx4CL6B7skb5lB2R8OGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOj9KoLRx5LuVvhImreCc1mgoRu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI2YjNhMTktYWIxYS0z NmFiLWI2YWQtNDY0MDVhYzUyODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBYv5BJAwmxRXPPl2FAR/ct0mrnWUOO+oz9oQlA 0Ua3jFZyVu/5vk1gDUvgt7ubY/tnh/D8/W4VLYWap3XtSxcASbe1t40T+PbBBbRZ PJHaUapbvYEOHcAFXsmZf+tIziyzCZ6VkC/m+ec0Pe8h5tQtYgkFbhw6aq7FHUB9 V0Nz7OD1aB8QWW2fw4okHw9nm8u6QUVGtvO9BILLzPkVRk6mfdYUGiF5x9nzxJKd yQGlknSQV5TDi+IyrxG30EVDQ7KRsuupC0jobSjjYO2lcjraNNWGYplj28pQyM0+ 20QViKcwcG6YTRej2qfWSyFo+UeX/lcT1ckE1iihgpTDcF+S -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:17 2025 by rpki-client