$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa File: 856387e4-e5ae-315d-9de8-d0d7211acdb2.roa (raw, json) Hash identifier: IhrmLVTx7odfIl+z+mLlDuVzaT/TXFKM7WGQ9McQoH8= Subject key identifier: 88:04:B2:A0:28:2E:9D:E3:AD:B9:23:DE:6D:87:65:D6:EB:2B:8B:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A96D7E731B4DE1CC776D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396567 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:96:d7:e7:31:b4:de:1c:c7:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=bb1baefd-ce27-49d7-87db-c46956a901d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:76:7e:b7:5f:07:53:56:dd:4e:09:0b:be: 22:09:78:01:a3:9e:e8:d9:e4:d7:cb:3f:d3:2e:7a: 55:98:f3:76:3b:14:c6:96:3c:3f:4a:2e:c5:73:71: e1:d7:64:14:87:f4:1b:99:fa:37:35:f8:16:85:d9: cd:d9:fe:35:6b:89:54:72:f4:ed:a4:a2:2c:ef:f2: 8e:5b:e9:c0:8d:d3:a2:fe:36:a7:13:89:48:fd:55: be:da:a9:d2:b0:09:2c:97:71:64:3f:f2:5b:d7:dd: 0e:84:f0:b8:03:1c:be:80:01:37:38:40:bb:f0:ee: e2:09:5a:de:e9:4e:7c:90:3b:46:ec:83:23:16:dc: 5e:8e:f3:67:f1:93:c5:f4:53:7c:f7:73:65:59:71: 98:da:08:a9:b6:25:5b:e7:68:16:68:5a:6d:69:ce: 07:94:bf:a6:3d:3e:f8:d1:6e:e8:4c:89:56:e5:f6: 58:ca:18:cd:52:5d:1e:13:80:0a:57:17:ff:33:c3: 85:b7:26:1c:52:45:85:75:eb:b2:12:99:a8:51:3e: d7:44:1a:a6:58:c6:32:42:c8:a8:3c:39:c0:58:29: 2e:67:b9:88:c2:42:94:96:c2:a6:54:12:f1:08:8e: f1:8c:bd:43:3b:f3:00:37:dc:27:95:8a:84:70:cc: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:B2:A0:28:2E:9D:E3:AD:B9:23:DE:6D:87:65:D6:EB:2B:8B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ac:93:bc:67:44:f4:a6:95:eb:78:c9:0d:e4:9b:09:16:34: 53:be:1e:77:30:6c:ec:aa:fd:f6:e9:83:07:72:23:c4:a3:6a: a9:a0:1b:98:f9:0c:a7:5c:ed:73:4d:f2:de:d4:ee:39:f7:68: 2d:cc:d2:51:dc:c4:4a:1f:7b:19:8c:34:e1:88:9e:c4:e3:7a: b6:65:33:ec:8d:2a:83:4e:cf:b3:d4:e5:1a:d9:35:16:63:89: bb:2a:90:74:a7:84:e1:31:de:a0:85:1c:0b:61:64:32:50:f0: 67:78:16:c9:95:ef:02:cd:34:48:26:ae:25:97:a2:be:d9:a1: 95:7f:9a:75:27:6f:c9:c4:19:cb:b9:33:84:e3:5f:22:68:54: 9e:77:bc:5f:5c:3d:f7:a4:04:72:60:b8:f8:7c:f3:00:a0:af: 40:2f:84:a8:91:09:a3:f8:0a:78:62:e6:97:41:ac:16:0d:b0: c2:0c:e7:07:df:6b:09:5d:7b:97:cf:4d:0a:1e:d9:77:47:32: 7b:2c:14:cc:b2:8e:c2:ca:6f:79:8a:f7:24:50:9b:ce:dc:9d: ce:a3:f0:b8:97:a4:8e:8e:17:d1:38:73:93:0b:c6:84:b7:c9: 77:ec:e0:e7:6c:8a:a8:e0:a7:0c:86:fd:0b:ab:05:a3:c6:4d: 00:f9:94:bf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epbX5zG03hzHdtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YmIxYmFlZmQtY2UyNy00OWQ3LTg3ZGItYzQ2OTU2YTkwMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR12frdfB1NW3U4JC74iCXgBo57o2eTXyz/T LnpVmPN2OxTGljw/Si7Fc3Hh12QUh/Qbmfo3NfgWhdnN2f41a4lUcvTtpKIs7/KO W+nAjdOi/janE4lI/VW+2qnSsAksl3FkP/Jb190OhPC4Axy+gAE3OEC78O7iCVre 6U58kDtG7IMjFtxejvNn8ZPF9FN893NlWXGY2giptiVb52gWaFptac4HlL+mPT74 0W7oTIlW5fZYyhjNUl0eE4AKVxf/M8OFtyYcUkWFdeuyEpmoUT7XRBqmWMYyQsio PDnAWCkuZ7mIwkKUlsKmVBLxCI7xjL1DO/MAN9wnlYqEcMxI5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIgEsqAoLp3jrbkj3m2HZdbrK4uaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2Mzg3ZTQtZTVhZS0z MTVkLTlkZTgtZDBkNzIxMWFjZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjrJO8Z0T0ppXreMkN5JsJFjRTvh53MGzsqv32 6YMHciPEo2qpoBuY+QynXO1zTfLe1O4592gtzNJR3MRKH3sZjDThiJ7E43q2ZTPs jSqDTs+z1OUa2TUWY4m7KpB0p4ThMd6ghRwLYWQyUPBneBbJle8CzTRIJq4ll6K+ 2aGVf5p1J2/JxBnLuTOE418iaFSed7xfXD33pARyYLj4fPMAoK9AL4SokQmj+Ap4 YuaXQawWDbDCDOcH32sJXXuXz00KHtl3RzJ7LBTMso7Cym95ivckUJvO3J3Oo/C4 l6SOjhfROHOTC8aEt8l37ODnbIqo4KcMhv0LqwWjxk0A+ZS/ -----END CERTIFICATE-----Generated at Sat Jun 7 11:54:55 2025 by rpki-client