$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa File: 5def59c5-37b7-3c90-bfa1-36532b4634f2.roa (raw, json) Hash identifier: YyEB8EOAK1AuFf4Ya/8dpnONxIMhTVcPVuunpbtRauM= Subject key identifier: 8E:DC:09:2B:FE:D1:28:F0:CC:22:0B:05:D7:1E:A5:F4:02:7C:08:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9A3782658486196AE280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 36618 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9a:37:82:65:84:86:19:6a:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=67a53f09-983c-42a1-bfab-4833b7744790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:de:9b:9a:5e:1c:16:81:e6:4e:7e:8f:91: 65:3a:fe:35:41:34:57:23:db:e0:7c:25:c9:a8:34: 04:66:de:87:12:b0:6d:d9:36:d2:cd:ac:c2:f4:34: d7:33:69:f3:dc:1f:2c:b8:b4:29:b7:2b:62:65:5d: e8:5e:d8:93:c8:f0:a5:46:05:71:d0:ca:c8:ec:a6: 51:8a:31:40:3c:8b:cf:c7:d0:6f:76:11:c7:18:39: 71:57:42:7a:4b:e6:28:be:07:e8:3a:b5:74:f5:f3: 73:34:88:44:38:62:ea:c5:53:23:dd:1f:f9:b2:6e: 7b:2f:2c:3e:ae:9c:34:85:3a:38:48:67:b1:d6:75: dd:ab:a2:ad:9b:aa:0d:08:d9:96:98:f9:c9:90:c4: 15:78:26:07:13:37:ae:0b:25:6f:d9:a5:c7:20:4d: d2:e6:1c:bb:0a:19:48:83:18:eb:0b:d7:fa:77:aa: 44:e7:ba:d7:fe:78:64:27:4f:27:4c:98:53:5e:66: 1b:ac:22:42:ed:fa:c2:8a:45:33:f1:83:a4:6e:de: b2:0f:9a:9e:02:1b:8a:b1:bc:f2:fd:fd:3f:1f:6b: 76:73:4b:10:76:42:16:f3:66:30:b1:7f:e5:05:3d: fc:c4:59:a3:a1:b5:2f:a8:85:fe:f5:26:af:9e:c9: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DC:09:2B:FE:D1:28:F0:CC:22:0B:05:D7:1E:A5:F4:02:7C:08:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1d:a2:fa:12:1c:c8:8f:19:5c:72:07:0d:df:f5:6a:d5:53: c3:f1:9d:2e:42:88:79:f3:9f:c7:e9:94:8b:c3:cf:07:32:19: cd:2f:ad:c1:dc:cc:0d:3a:fc:07:d5:d6:95:f0:db:c7:64:c0: d9:2f:2a:1c:46:d0:7a:3e:d1:8e:9a:43:80:21:4e:17:70:10: 6e:aa:87:2d:12:c3:87:fd:3b:40:dc:25:81:80:88:67:d2:36: ef:40:3c:f2:29:67:6f:90:e8:d5:0d:b7:ea:fe:ef:84:39:ee: 1b:4f:41:fc:5e:a8:1a:ec:66:70:f8:10:ed:5f:61:26:4b:9b: e6:f6:e3:cb:a2:55:63:e6:29:24:3f:12:be:6d:de:d8:4c:23: 60:cd:64:03:10:01:df:17:b1:64:fc:31:38:51:27:0c:61:2c: 2d:da:e6:69:aa:27:d8:b7:54:9e:9b:24:ac:11:b8:aa:6a:56: ca:de:ef:6a:7a:ab:48:73:eb:81:7d:92:c8:1f:6f:ef:1f:12: 31:37:48:b6:3a:ab:4d:5c:fe:e6:97:6a:88:37:a2:ed:51:1f: d3:46:b9:c5:db:b4:0d:a3:be:46:a4:d6:61:14:b4:bd:7e:68: c0:0d:e8:78:60:bc:3f:fe:08:ee:0e:43:6c:f9:63:6c:ac:15: c7:14:5d:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epo3gmWEhhlq4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NjdhNTNmMDktOTgzYy00MmExLWJmYWItNDgzM2I3NzQ0NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU7em5peHBaB5k5+j5FlOv41QTRXI9vgfCXJ qDQEZt6HErBt2TbSzazC9DTXM2nz3B8suLQptytiZV3oXtiTyPClRgVx0MrI7KZR ijFAPIvPx9BvdhHHGDlxV0J6S+YovgfoOrV09fNzNIhEOGLqxVMj3R/5sm57Lyw+ rpw0hTo4SGex1nXdq6Ktm6oNCNmWmPnJkMQVeCYHEzeuCyVv2aXHIE3S5hy7ChlI gxjrC9f6d6pE57rX/nhkJ08nTJhTXmYbrCJC7frCikUz8YOkbt6yD5qeAhuKsbzy /f0/H2t2c0sQdkIW82YwsX/lBT38xFmjobUvqIX+9SavnskhfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI7cCSv+0SjwzCILBdcepfQCfAhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWRlZjU5YzUtMzdiNy0z YzkwLWJmYTEtMzY1MzJiNDYzNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASHaL6EhzIjxlccgcN3/Vq1VPD8Z0uQoh585/H 6ZSLw88HMhnNL63B3MwNOvwH1daV8NvHZMDZLyocRtB6PtGOmkOAIU4XcBBuqoct EsOH/TtA3CWBgIhn0jbvQDzyKWdvkOjVDbfq/u+EOe4bT0H8Xqga7GZw+BDtX2Em S5vm9uPLolVj5ikkPxK+bd7YTCNgzWQDEAHfF7Fk/DE4UScMYSwt2uZpqifYt1Se mySsEbiqalbK3u9qeqtIc+uBfZLIH2/vHxIxN0i2OqtNXP7ml2qIN6LtUR/TRrnF 27QNo75GpNZhFLS9fmjADeh4YLw//gjuDkNs+WNsrBXHFF21 -----END CERTIFICATE-----Generated at Sat Jun 7 21:50:25 2025 by rpki-client