$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa File: a09a28bf-d9c9-33fd-820a-99762c1beb00.roa (raw, json) Hash identifier: W95NDloIsqwP2ivbnvMYGdsSW6+AJXovKDdCArrs7tY= Subject key identifier: 42:B3:81:0D:8B:3C:8C:81:C8:5F:99:9C:E0:C7:27:72:86:97:A8:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9908757C0352429CB080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396596 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:99:08:75:7c:03:52:42:9c:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=1fe051df-08a2-4f79-a6ea-4a659eaee0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:4f:60:52:36:06:77:a9:01:f3:b2:a9:0d: 70:eb:d3:d8:2c:e4:ed:bf:52:ec:00:34:df:23:b2: 44:12:17:6f:1d:4a:d1:63:40:82:30:72:79:bd:e1: a7:50:9e:32:79:8b:cf:04:ca:1c:24:ff:87:13:b8: c4:0d:1d:cf:01:33:20:92:15:f3:e2:14:3a:70:19: 96:26:94:f2:81:59:8f:39:48:be:a0:58:7a:b2:dc: a0:dd:95:70:ce:81:99:e7:94:c4:1e:89:94:0a:5f: d6:47:cf:fb:32:3c:7b:05:3b:b9:a2:b5:ce:80:24: 20:cf:9f:96:07:2e:b6:ca:80:33:c6:0f:82:73:a0: af:09:38:98:e6:c3:bb:71:67:e0:3e:c8:b7:b8:af: 4a:e4:58:1a:34:e9:39:37:bd:92:7c:84:dc:67:01: d9:96:af:79:54:b0:4b:ef:eb:e2:e2:31:20:a3:5d: 65:b8:50:65:ab:ac:1b:2f:64:19:36:0d:cc:d1:1e: 85:46:52:87:07:98:ae:ed:a8:22:b2:d1:32:25:77: bf:38:72:86:4c:d4:f7:4c:ba:91:b0:ed:03:f3:9f: 7e:be:ff:ea:9e:09:42:b0:00:88:0d:79:28:9b:01: 41:0e:aa:40:67:02:39:d1:51:77:64:9d:31:51:23: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B3:81:0D:8B:3C:8C:81:C8:5F:99:9C:E0:C7:27:72:86:97:A8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4e:5f:4c:d8:9e:67:f5:e6:ac:83:18:17:23:eb:48:a7:1f: 13:32:9f:e9:8a:dc:f5:02:1d:10:9c:52:33:cc:a0:e8:55:e1: 00:47:5e:e8:5d:58:fb:9c:47:b1:9c:29:82:e3:26:05:43:bd: 7f:51:fb:9c:29:28:19:93:94:72:c0:70:32:92:00:34:16:f6: 58:52:f2:a2:cd:e8:c7:0f:f0:1e:ae:4b:49:52:53:3f:d6:b5: fb:c0:c1:4f:b9:4a:0b:b0:ad:5f:e3:26:f5:c8:88:58:f6:23: ea:8c:dc:00:5d:2b:73:19:ca:d7:de:fa:0b:1b:e7:46:8a:ef: f7:f1:24:01:59:a6:e2:19:68:42:10:99:78:20:50:13:f2:65: 91:fb:e3:f3:0d:42:5b:2a:a2:03:86:22:ed:e8:0d:be:50:e2: 6f:2d:8f:62:5e:7d:42:6a:b6:f8:73:42:0c:03:05:6e:a7:30: 35:4c:89:32:4f:ce:47:b3:6f:9e:89:03:f6:21:1b:ab:24:94: dd:d8:12:ac:74:be:44:0a:f7:a4:93:49:f2:fd:49:24:de:ad: 46:0c:35:f0:38:85:61:9c:74:d1:05:9f:f3:5c:5f:9d:f7:af: 32:36:f5:b9:1a:f9:06:7b:bd:aa:e6:96:86:ea:01:f4:38:03: 8d:b2:91:83 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epkIdXwDUkKcsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MWZlMDUxZGYtMDhhMi00Zjc5LWE2ZWEtNGE2NTllYWVlMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzohPYFI2BnepAfOyqQ1w69PYLOTtv1LsADTf I7JEEhdvHUrRY0CCMHJ5veGnUJ4yeYvPBMocJP+HE7jEDR3PATMgkhXz4hQ6cBmW JpTygVmPOUi+oFh6styg3ZVwzoGZ55TEHomUCl/WR8/7Mjx7BTu5orXOgCQgz5+W By62yoAzxg+Cc6CvCTiY5sO7cWfgPsi3uK9K5FgaNOk5N72SfITcZwHZlq95VLBL 7+vi4jEgo11luFBlq6wbL2QZNg3M0R6FRlKHB5iu7agistEyJXe/OHKGTNT3TLqR sO0D859+vv/qnglCsACIDXkomwFBDqpAZwI50VF3ZJ0xUSPFmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEKzgQ2LPIyByF+ZnODHJ3KGl6g2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA5YTI4YmYtZDljOS0z M2ZkLTgyMGEtOTk3NjJjMWJlYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1Tl9M2J5n9easgxgXI+tIpx8TMp/pitz1Ah0Q nFIzzKDoVeEAR17oXVj7nEexnCmC4yYFQ71/UfucKSgZk5RywHAykgA0FvZYUvKi zejHD/AerktJUlM/1rX7wMFPuUoLsK1f4yb1yIhY9iPqjNwAXStzGcrX3voLG+dG iu/38SQBWabiGWhCEJl4IFAT8mWR++PzDUJbKqIDhiLt6A2+UOJvLY9iXn1Carb4 c0IMAwVupzA1TIkyT85Hs2+eiQP2IRurJJTd2BKsdL5ECvekk0ny/Ukk3q1GDDXw OIVhnHTRBZ/zXF+d968yNvW5GvkGe72q5paG6gH0OAONspGD -----END CERTIFICATE-----Generated at Sat Jun 7 11:48:19 2025 by rpki-client