$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa File: b228ac62-7a79-352e-9c29-196e7a6f8297.roa (raw, json) Hash identifier: 6zV6FcecPssGNow1CY8VXqA3oMvxuo2KevlyYxJg0vA= Subject key identifier: CF:A0:1D:82:1E:13:D0:3C:74:3E:E6:04:0C:B7:ED:0E:D5:B0:52:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A959FA70882C2F44D6018 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 36622 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:95:9f:a7:08:82:c2:f4:4d:60:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=5463042c-bc14-4add-a8f0-234c0795e6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:aa:52:f6:a0:87:4a:09:22:53:d0:8a:98: 78:2b:e7:2c:5f:f3:1d:60:bf:66:2c:e0:8c:2f:1a: b0:0c:a9:c4:fe:3b:bd:f2:f1:e4:14:52:1e:99:1a: e2:9b:0b:15:e1:b2:0a:6b:7b:a1:d3:6f:fe:1f:35: d9:5a:13:8c:14:05:a1:00:c6:72:89:3e:0a:d6:e1: 23:8d:78:79:f8:3f:53:f7:10:77:79:54:ed:d9:14: 2e:21:ba:bc:e6:13:13:b2:36:6c:c2:07:52:1b:25: 6c:29:3a:fb:42:a9:da:56:37:6a:62:4f:36:83:ae: 61:32:8e:99:64:4f:df:2a:28:31:1a:2f:1b:99:3a: d4:c9:93:b8:09:df:08:c7:9d:ec:9b:55:5d:df:c8: 6c:c4:3c:b6:7e:5f:2f:9b:40:cb:4e:0d:0d:64:83: 25:fe:92:06:95:59:6d:83:64:0c:a9:b5:27:51:c5: 70:10:85:b5:0e:1e:1d:78:e3:ae:33:c5:39:66:f9: ef:87:43:46:60:57:57:c7:7d:38:7e:9c:e2:80:26: 59:ef:b2:3a:28:28:0c:a0:00:f5:f3:eb:40:a2:47: f0:61:91:6c:ef:45:0d:34:83:bc:ef:67:69:76:d4: e4:21:02:61:c2:d9:8f:b6:75:15:47:13:74:e6:3b: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A0:1D:82:1E:13:D0:3C:74:3E:E6:04:0C:B7:ED:0E:D5:B0:52:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:18:ec:d1:b8:94:73:57:61:20:ca:7a:4b:42:76:42:15:fe: 6b:64:0e:8a:75:f3:5f:6f:af:49:7a:69:4a:f1:62:5d:98:4f: e1:c2:07:fa:44:f9:70:d4:b2:da:e9:46:32:4d:d2:55:98:67: c8:a0:3a:14:ab:07:76:9f:49:36:16:7c:d6:58:45:5b:07:af: d4:a9:d5:99:63:9d:b2:42:79:57:59:3b:ab:93:73:c1:51:7b: 7b:28:7c:c4:7f:f5:67:e9:91:db:f6:68:99:48:1b:35:66:bf: 27:9e:b5:57:46:0b:9d:85:31:1f:17:4f:07:7c:9d:2f:ea:f5: da:d6:b1:a0:b0:31:45:5d:6c:ec:9e:7b:f0:de:8b:84:48:fd: d4:f5:32:0a:64:9f:77:6e:cf:be:9e:2f:79:cf:3f:91:ef:85: a1:73:07:75:b8:07:57:3a:89:11:c8:ff:b1:18:66:9f:a3:d6: 3d:74:a0:c3:96:3f:d2:5c:fd:ab:0b:4f:15:2d:09:ae:1a:55: 66:1b:d1:a3:0e:0f:ba:12:e0:fc:3a:aa:1f:ca:6a:02:5d:b0: d0:99:84:35:a9:21:8d:d3:4b:db:c7:e9:e4:63:98:b6:01:80: 63:24:f8:9f:d0:22:a3:00:cb:26:59:62:af:cc:9d:ae:a9:d6: c3:49:f8:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epWfpwiCwvRNYBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NTQ2MzA0MmMtYmMxNC00YWRkLWE4ZjAtMjM0YzA3OTVlNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUWqUvagh0oJIlPQiph4K+csX/MdYL9mLOCM LxqwDKnE/ju98vHkFFIemRrimwsV4bIKa3uh02/+HzXZWhOMFAWhAMZyiT4K1uEj jXh5+D9T9xB3eVTt2RQuIbq85hMTsjZswgdSGyVsKTr7QqnaVjdqYk82g65hMo6Z ZE/fKigxGi8bmTrUyZO4Cd8Ix53sm1Vd38hsxDy2fl8vm0DLTg0NZIMl/pIGlVlt g2QMqbUnUcVwEIW1Dh4deOOuM8U5Zvnvh0NGYFdXx304fpzigCZZ77I6KCgMoAD1 8+tAokfwYZFs70UNNIO872dpdtTkIQJhwtmPtnUVRxN05js72wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM+gHYIeE9A8dD7mBAy37Q7VsFJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIyOGFjNjItN2E3OS0z NTJlLTljMjktMTk2ZTdhNmY4Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdGOzRuJRzV2EgynpLQnZCFf5rZA6KdfNfb69J emlK8WJdmE/hwgf6RPlw1LLa6UYyTdJVmGfIoDoUqwd2n0k2FnzWWEVbB6/UqdWZ Y52yQnlXWTurk3PBUXt7KHzEf/Vn6ZHb9miZSBs1Zr8nnrVXRgudhTEfF08HfJ0v 6vXa1rGgsDFFXWzsnnvw3ouESP3U9TIKZJ93bs++ni95zz+R74Whcwd1uAdXOokR yP+xGGafo9Y9dKDDlj/SXP2rC08VLQmuGlVmG9GjDg+6EuD8OqofymoCXbDQmYQ1 qSGN00vbx+nkY5i2AYBjJPif0CKjAMsmWWKvzJ2uqdbDSfiR -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:04 2025 by rpki-client