$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fff2e42-444b-3096-9b7f-260c3499f91c.roa File: 6fff2e42-444b-3096-9b7f-260c3499f91c.roa (raw, json) Hash identifier: 8x0XsLaWhjG5Y/JuoatAv2SKkRbcT0fLvfu8Rdppzz8= Subject key identifier: 79:49:DF:16:EC:64:31:CC:B7:80:08:4D:D0:29:79:CB:23:D2:5D:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD52A0E523D8249BD3700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fff2e42-444b-3096-9b7f-260c3499f91c.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396586 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d5:2a:0e:52:3d:82:49:bd:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0e56b558-036b-40ee-ac29-cfdbc268654f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:4f:0b:69:ba:6b:26:1d:2b:d6:dc:42:20: 08:66:44:08:16:8a:c2:02:7f:8e:e9:e7:de:de:4f: 5f:f0:1a:c8:6a:b2:69:67:be:15:82:de:0c:01:01: c0:b2:ef:8b:69:eb:5f:9e:c7:d0:23:37:40:25:34: 39:65:fb:af:b9:26:f8:e1:f0:66:ce:20:c8:31:2f: 84:fd:86:04:90:6a:b9:05:8f:0b:94:bc:47:83:95: 33:35:16:2e:9b:0f:78:bb:cf:8f:a6:21:95:e2:6b: f1:93:5d:f3:af:49:0b:89:4a:46:46:ec:5b:e5:5d: 4a:d4:f9:e4:a1:6d:f3:21:01:04:48:99:f8:fd:62: e0:53:78:c7:f6:04:76:7e:0e:a9:81:5e:72:b2:2f: 84:2f:c1:d3:b2:76:d1:96:1d:48:99:b9:6d:c1:96: 30:bf:18:82:10:a5:bf:de:8a:9d:05:f9:1d:81:03: 2a:f3:dd:85:56:32:4a:15:3a:8b:ea:ac:1a:e1:f2: 90:69:1e:f1:e9:8d:f4:42:ac:12:2d:cf:3a:3d:ee: 50:dd:83:11:07:eb:ca:26:ee:3b:bb:bd:f3:22:e5: e7:01:1e:e1:71:8c:a0:b4:0e:15:5f:1b:1e:f9:f5: 4a:a8:4b:be:6e:18:e9:5d:38:64:1d:1c:dc:5a:d5: 97:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:49:DF:16:EC:64:31:CC:B7:80:08:4D:D0:29:79:CB:23:D2:5D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fff2e42-444b-3096-9b7f-260c3499f91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2a:28:7c:84:62:7a:31:04:66:40:9c:22:37:63:14:05:0d: 8b:dd:f5:c2:90:87:5d:d0:9f:0b:27:cb:7e:7d:81:cd:82:29: 5b:6b:00:7f:7b:13:de:61:38:75:67:1f:0a:c4:eb:d7:89:3f: 8f:6e:c7:1d:75:a3:1b:6a:e1:ab:f6:a6:ee:63:2c:f9:6c:cf: ea:f3:df:55:69:06:93:22:ab:3c:2a:e2:17:4b:6a:cb:44:87: df:54:26:18:9b:6f:39:3b:81:51:86:6a:8e:99:e4:5b:59:68: 10:85:67:fd:c7:c9:b0:dd:1d:4f:90:a6:73:d1:e6:11:a2:2a: 9f:2f:22:98:9f:48:ed:f7:06:b7:ba:60:5a:cf:f0:0c:33:40: cf:3d:ba:22:52:c5:ce:04:54:ce:33:0b:79:31:f0:b2:5d:83: 48:7f:a1:f8:be:6b:d2:29:23:fb:6d:04:36:ca:81:14:7c:9a: cb:86:d3:80:3b:7c:8a:17:86:da:a4:3e:ee:65:75:a9:79:8b: 0d:f8:0a:97:0e:f2:5a:f6:2d:6e:69:18:0f:70:c7:72:73:0f: 5a:71:7f:9f:18:3d:42:67:84:6c:35:0e:fa:fe:30:5f:6a:42: 2b:47:b2:23:44:40:2c:64:2d:9c:67:6b:73:6a:61:e6:3b:ef: 87:f6:8c:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9UqDlI9gkm9NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGU1NmI1NTgtMDM2Yi00MGVlLWFjMjktY2ZkYmMyNjg2NTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQZPC2m6ayYdK9bcQiAIZkQIForCAn+O6efe 3k9f8BrIarJpZ74Vgt4MAQHAsu+LaetfnsfQIzdAJTQ5ZfuvuSb44fBmziDIMS+E /YYEkGq5BY8LlLxHg5UzNRYumw94u8+PpiGV4mvxk13zr0kLiUpGRuxb5V1K1Pnk oW3zIQEESJn4/WLgU3jH9gR2fg6pgV5ysi+EL8HTsnbRlh1ImbltwZYwvxiCEKW/ 3oqdBfkdgQMq892FVjJKFTqL6qwa4fKQaR7x6Y30QqwSLc86Pe5Q3YMRB+vKJu47 u73zIuXnAR7hcYygtA4VXxse+fVKqEu+bhjpXThkHRzcWtWXBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHlJ3xbsZDHMt4AITdApecsj0l0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmZmZjJlNDItNDQ0Yi0z MDk2LTliN2YtMjYwYzM0OTlmOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBQKih8hGJ6MQRmQJwiN2MUBQ2L3fXCkIdd0J8L J8t+fYHNgilbawB/exPeYTh1Zx8KxOvXiT+PbscddaMbauGr9qbuYyz5bM/q899V aQaTIqs8KuIXS2rLRIffVCYYm285O4FRhmqOmeRbWWgQhWf9x8mw3R1PkKZz0eYR oiqfLyKYn0jt9wa3umBaz/AMM0DPPboiUsXOBFTOMwt5MfCyXYNIf6H4vmvSKSP7 bQQ2yoEUfJrLhtOAO3yKF4bapD7uZXWpeYsN+AqXDvJa9i1uaRgPcMdycw9acX+f GD1CZ4RsNQ76/jBfakIrR7IjREAsZC2cZ2tzamHmO++H9oyv -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:23 2025 by rpki-client