$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa File: 6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa (raw, json) Hash identifier: lg3ADmIpfSUpFa3t1A2WgdMAoxYsDgvXAOgc4JNNIME= Subject key identifier: 20:BA:28:3D:A1:B8:A5:33:77:FF:A2:2C:1E:A8:93:1D:FC:48:24:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A98C64FC0F66803D72D20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 20172 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:98:c6:4f:c0:f6:68:03:d7:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=90d08575-9c44-414d-afdd-977dc6a80a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:76:33:72:e7:99:f5:f5:99:2f:a1:21:20:5e: f0:9a:9f:f9:0f:d1:a1:64:56:d9:05:02:0e:45:c4: 3e:e2:eb:2d:02:6b:1d:6c:69:74:82:d2:5d:6e:e4: ce:ee:ef:4d:9a:a4:3b:c8:f2:cc:ee:14:ed:32:d1: 91:2d:7d:69:e1:ab:61:3c:81:69:74:a4:e5:bf:4f: db:9f:47:88:59:0a:d6:68:c0:9c:ea:f1:a4:9b:7d: aa:33:85:a3:64:1d:49:46:8d:70:00:f8:5a:e9:f6: 94:7d:8a:84:15:6c:18:45:38:ff:a6:92:cd:dc:3d: ee:ca:ab:2f:5f:5e:3c:2d:27:0e:73:9e:6d:6e:e4: 0d:64:14:d4:ed:58:48:85:36:9e:d8:6f:2e:a3:1c: c2:84:f6:a9:fa:69:74:08:3b:c5:da:61:f6:81:ff: 9b:c9:a9:3f:a5:e9:70:8c:0f:b6:e9:87:00:d7:70: 83:22:d7:9e:d2:16:3e:b2:06:de:0b:72:bd:12:0b: 81:6e:de:b9:19:57:b6:8b:85:41:76:03:06:9d:bc: 67:13:9d:02:6b:7a:94:43:2e:d0:27:80:17:c7:bc: 12:8d:00:20:bd:34:7c:1f:e7:66:60:6c:ae:7e:12: 90:81:1b:e1:a7:9b:8b:1b:fe:05:73:74:6c:0b:c1: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BA:28:3D:A1:B8:A5:33:77:FF:A2:2C:1E:A8:93:1D:FC:48:24:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:67:96:24:c1:de:8c:ea:45:99:01:8d:24:54:ee:7c:f8:24: 76:0c:8f:58:b8:0b:2b:bf:d4:0c:6b:5e:44:f8:25:6f:74:29: b1:30:a3:9d:34:56:4c:11:6f:c5:bf:50:69:f2:3e:b1:fc:e7: 3b:b2:8d:54:2a:31:2e:c7:a7:ad:16:cd:94:20:75:63:2e:bc: a5:12:16:a0:4e:97:86:bd:b3:fb:ea:89:f9:d5:6a:30:89:5a: 98:fe:ab:11:16:97:d2:5f:2b:13:40:27:38:30:26:e4:8c:4c: ce:9b:63:32:4d:31:da:3c:69:aa:29:b4:18:57:4c:a0:71:f1: 04:0b:c2:92:65:dd:bc:3d:c9:a5:59:29:be:ae:de:fc:9f:49: d4:50:c9:28:36:c3:af:88:10:45:ca:90:a7:79:e6:ff:49:bb: 4e:46:31:b2:de:c9:42:36:19:a6:be:cb:47:75:32:c7:ca:44: 6d:42:a3:90:e2:2a:b6:b4:4d:11:aa:11:56:11:0c:b8:9e:ea: 4b:bd:7e:dd:13:1e:69:a1:cd:8d:8f:70:53:c1:db:af:1d:1b: 4b:24:ed:f8:61:16:b3:51:93:f9:ac:1a:83:6f:a5:cd:35:e6: 97:f8:5a:49:7c:00:a9:75:b6:a4:38:dc:34:1b:67:26:a4:09: f3:2b:a0:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epjGT8D2aAPXLSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk OTBkMDg1NzUtOWM0NC00MTRkLWFmZGQtOTc3ZGM2YTgwYTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXYzcueZ9fWZL6EhIF7wmp/5D9GhZFbZBQIO RcQ+4ustAmsdbGl0gtJdbuTO7u9NmqQ7yPLM7hTtMtGRLX1p4athPIFpdKTlv0/b n0eIWQrWaMCc6vGkm32qM4WjZB1JRo1wAPha6faUfYqEFWwYRTj/ppLN3D3uyqsv X148LScOc55tbuQNZBTU7VhIhTae2G8uoxzChPap+ml0CDvF2mH2gf+byak/pelw jA+26YcA13CDItee0hY+sgbeC3K9EguBbt65GVe2i4VBdgMGnbxnE50Ca3qUQy7Q J4AXx7wSjQAgvTR8H+dmYGyufhKQgRvhp5uLG/4Fc3RsC8EXQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCC6KD2huKUzd/+iLB6okx38SCSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmY4ZmUyYWItOWE0NC0z MWM1LTgwOWItYjU4YjgyYjQxMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCIZ5Ykwd6M6kWZAY0kVO58+CR2DI9YuAsrv9QM a15E+CVvdCmxMKOdNFZMEW/Fv1Bp8j6x/Oc7so1UKjEux6etFs2UIHVjLrylEhag TpeGvbP76on51WowiVqY/qsRFpfSXysTQCc4MCbkjEzOm2MyTTHaPGmqKbQYV0yg cfEEC8KSZd28PcmlWSm+rt78n0nUUMkoNsOviBBFypCneeb/SbtORjGy3slCNhmm vstHdTLHykRtQqOQ4iq2tE0RqhFWEQy4nupLvX7dEx5poc2Nj3BTwduvHRtLJO34 YRazUZP5rBqDb6XNNeaX+FpJfACpdbakONw0G2cmpAnzK6AY -----END CERTIFICATE-----Generated at Sat Jun 7 04:16:56 2025 by rpki-client