$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa File: 9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa (raw, json) Hash identifier: CNLP65q9lg0fCL3Vmc3vrMunbCALXI9IKI5fQ29GsSM= Subject key identifier: 2A:62:DA:26:56:70:63:E1:CC:BE:7D:F7:7C:A5:A1:BC:4A:56:83:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A99C14EBB22F7B0EDC740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 20431 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:99:c1:4e:bb:22:f7:b0:ed:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=0aefbf9a-b09f-4168-8e99-63764dfb6c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:d6:87:2a:42:cb:9e:59:2f:5c:3c:79:e7: 56:f2:6a:35:47:5a:bb:18:4a:ba:70:53:aa:17:72: 5a:1c:53:de:00:99:66:d4:47:1e:49:9d:3b:ed:e2: 27:78:b0:cd:cf:e2:01:c2:51:fe:31:0e:5c:19:38: f5:14:08:8d:07:02:3b:38:4f:a5:5f:57:34:99:c0: 34:2e:8d:d8:26:4e:b0:b3:7d:e6:eb:6d:b4:0a:1f: 5a:6f:3c:d9:2a:70:a7:1b:f8:af:42:2a:d8:51:9d: 9d:02:6b:85:e1:c6:0c:7f:9c:84:5e:0e:5c:8f:a7: 0b:7e:48:a8:c0:57:b2:39:0c:cd:95:2e:80:8d:f3: 16:a2:ff:02:1d:6d:16:62:0f:99:c4:cd:8b:9e:36: 8e:59:b7:53:96:4c:6f:ab:67:1d:b2:c5:6d:5f:95: df:f9:a8:98:6b:52:a1:fb:bf:c6:0e:f6:4f:71:45: c0:75:d3:5e:ed:03:42:b8:39:e0:6a:f7:8a:65:f9: 99:b4:a1:45:6f:44:db:45:d1:b5:d6:b0:86:9e:01: dd:27:92:c7:aa:07:7e:3d:d4:69:0c:c0:bd:47:ee: b4:f8:c7:5e:a1:64:f3:28:1e:02:11:b1:38:dd:cb: 10:26:3a:6c:d1:9a:9d:c0:38:66:4a:08:44:a5:54: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:62:DA:26:56:70:63:E1:CC:BE:7D:F7:7C:A5:A1:BC:4A:56:83:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6d:03:f5:84:3b:9a:f5:fc:4a:a1:c4:38:25:d1:83:8d:71: 0a:be:e8:5c:09:4c:f6:da:ca:5f:29:c9:a2:9e:da:a8:96:41: 38:26:bb:d4:cd:b7:b0:9a:76:c4:4c:7f:9d:30:3d:8d:95:0f: f0:ad:f7:e9:c9:1d:1e:44:51:ad:02:08:03:f7:62:57:47:be: eb:bb:ac:8e:52:20:df:b0:72:16:14:d2:aa:6d:d6:09:bb:c7: a6:59:85:8a:45:97:88:11:51:9b:d2:ac:19:a9:11:6a:6d:76: ee:04:b8:3c:6e:c6:91:b0:a9:e0:0d:17:a5:fb:e5:de:e4:ae: 69:a4:1f:bc:43:34:64:79:0b:12:1f:6b:20:7e:03:a8:e3:33: 90:46:d3:1a:0a:aa:95:71:1c:a7:e2:6b:6a:8e:e2:58:51:25: 62:4a:e3:ff:cb:47:4d:77:6e:17:5f:c3:08:00:ac:65:11:b3: 5a:82:53:cd:6c:3b:bf:99:56:66:20:ce:97:1d:b2:c4:34:3e: 8e:c2:de:41:f8:a3:f7:c9:9d:40:74:ba:08:5d:bf:7a:b0:1d: 3a:a2:ec:53:58:c5:1a:cd:2b:cd:d2:4b:a4:6c:99:d9:aa:b0: 7f:f8:3b:22:67:af:1e:66:f3:02:ad:b7:c4:9c:85:24:ce:b7: 5b:3c:0f:42 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epnBTrsi97Dtx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MGFlZmJmOWEtYjA5Zi00MTY4LThlOTktNjM3NjRkZmI2YzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cvWhypCy55ZL1w8eedW8mo1R1q7GEq6cFOq F3JaHFPeAJlm1EceSZ077eIneLDNz+IBwlH+MQ5cGTj1FAiNBwI7OE+lX1c0mcA0 Lo3YJk6ws33m6220Ch9abzzZKnCnG/ivQirYUZ2dAmuF4cYMf5yEXg5cj6cLfkio wFeyOQzNlS6AjfMWov8CHW0WYg+ZxM2LnjaOWbdTlkxvq2cdssVtX5Xf+aiYa1Kh +7/GDvZPcUXAddNe7QNCuDngaveKZfmZtKFFb0TbRdG11rCGngHdJ5LHqgd+PdRp DMC9R+60+MdeoWTzKB4CEbE43csQJjps0ZqdwDhmSghEpVQYlwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCpi2iZWcGPhzL5993ylobxKVoNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWMwYWI5ZTQtMWJjNi0z ZTkxLTg1MTgtNmNlZDY4YTIxMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjbQP1hDua9fxKocQ4JdGDjXEKvuhcCUz22spf KcmintqolkE4JrvUzbewmnbETH+dMD2NlQ/wrffpyR0eRFGtAggD92JXR77ru6yO UiDfsHIWFNKqbdYJu8emWYWKRZeIEVGb0qwZqRFqbXbuBLg8bsaRsKngDRel++Xe 5K5ppB+8QzRkeQsSH2sgfgOo4zOQRtMaCqqVcRyn4mtqjuJYUSViSuP/y0dNd24X X8MIAKxlEbNaglPNbDu/mVZmIM6XHbLEND6Owt5B+KP3yZ1AdLoIXb96sB06ouxT WMUazSvN0kukbJnZqrB/+DsiZ68eZvMCrbfEnIUkzrdbPA9C -----END CERTIFICATE-----Generated at Sat Jun 7 04:28:34 2025 by rpki-client