$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b951d25b-fd57-30c1-bf27-d5775dcf7b77.roa File: b951d25b-fd57-30c1-bf27-d5775dcf7b77.roa (raw, json) Hash identifier: UknSQrodho+YPoptEYSsEpHei35lyu0I+n6aQMT4bw4= Subject key identifier: 16:19:73:2A:77:8C:78:83:97:BA:45:2E:8C:98:80:0C:27:05:CF:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9C1513503A90FEB05E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b951d25b-fd57-30c1-bf27-d5775dcf7b77.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 397193 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9c:15:13:50:3a:90:fe:b0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=b2903849-0817-4ccd-a476-07353fad741f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:61:9a:0c:12:d0:33:98:8d:65:b1:4a:fa: 07:f4:05:f1:3b:bb:b6:95:5f:28:6e:0f:10:27:7e: 0b:4e:89:1c:db:f6:5d:f8:a2:8c:50:b0:12:1a:0d: cb:55:dd:71:4f:0f:b4:93:aa:b7:35:39:d5:7e:b4: 9f:ee:8e:2c:9e:76:e0:fb:22:9a:51:5a:b9:6a:cf: b4:87:76:6c:d5:d4:c5:04:1c:a0:af:85:a3:ce:b7: df:2c:e2:7a:d7:b0:1d:dd:8d:d8:28:29:80:94:de: 76:c4:c3:42:5c:65:b6:93:70:ef:61:7b:33:91:af: be:5b:25:55:b0:1b:0e:d1:82:84:6a:9f:db:3f:bc: 08:04:51:94:73:48:30:68:0f:48:0e:f4:67:88:6c: 5e:62:93:02:88:a5:84:bc:c5:ce:73:6a:25:25:9f: e3:e0:0b:96:63:df:7d:b1:4b:e4:71:56:6b:49:36: 11:14:ce:e8:f5:aa:23:3b:bb:01:6c:6e:77:52:b1: 50:e8:64:1a:55:57:9c:f9:c2:42:61:58:c2:b5:71: 2b:b0:12:1f:26:02:a0:51:2e:eb:fb:7d:2a:5d:6c: e8:fb:51:8b:4b:a3:43:c0:59:8c:0a:ed:cc:79:7b: e8:d0:9b:77:bd:59:3a:96:b5:3c:2d:72:ab:19:e8: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:19:73:2A:77:8C:78:83:97:BA:45:2E:8C:98:80:0C:27:05:CF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b951d25b-fd57-30c1-bf27-d5775dcf7b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e5:c6:0f:19:b2:0c:d0:99:25:df:82:dd:cc:03:f1:43:e2: 88:2e:ef:96:63:72:2a:97:76:d9:47:07:f4:1c:a5:62:61:07: 34:cc:55:fb:3e:7e:c9:f3:75:27:d8:b7:b3:4d:5f:16:00:34: 32:af:9b:be:e4:02:27:50:ef:1e:60:5a:9e:ed:64:d1:c4:dd: 03:87:80:c7:0b:fe:b9:b2:1b:38:45:01:60:93:c7:40:c2:a8: 37:6a:e6:0a:6b:9c:fa:cf:3a:06:95:03:83:cf:e4:17:aa:94: d3:23:d3:af:ce:fa:33:f9:da:74:7a:10:32:1b:2d:34:e3:79: 08:19:1a:39:b6:62:b9:c0:5b:0b:dd:53:69:3f:14:61:10:2e: 84:8b:c5:83:d0:ac:ef:66:ee:d7:40:3d:b0:40:c9:3d:64:d2: eb:0d:64:5c:94:f7:67:9a:79:92:95:ef:a0:45:cd:a3:6a:77: dd:70:93:bd:5a:f7:ba:e5:e9:1e:a2:31:d4:93:7d:82:2a:2b: c1:c4:0b:e5:a0:2b:3f:fa:00:11:b8:49:db:6f:bb:a7:f7:83: 92:ff:79:55:af:30:4d:8e:88:f1:f6:d5:b6:c9:d5:ab:33:27: ec:78:94:60:6f:5c:4a:27:d3:b0:01:9f:3c:5d:51:1a:dd:4a: 67:b2:ca:19 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epwVE1A6kP6wXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YjI5MDM4NDktMDgxNy00Y2NkLWE0NzYtMDczNTNmYWQ3NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9RhmgwS0DOYjWWxSvoH9AXxO7u2lV8obg8Q J34LTokc2/Zd+KKMULASGg3LVd1xTw+0k6q3NTnVfrSf7o4snnbg+yKaUVq5as+0 h3Zs1dTFBBygr4WjzrffLOJ617Ad3Y3YKCmAlN52xMNCXGW2k3DvYXszka++WyVV sBsO0YKEap/bP7wIBFGUc0gwaA9IDvRniGxeYpMCiKWEvMXOc2olJZ/j4AuWY999 sUvkcVZrSTYRFM7o9aojO7sBbG53UrFQ6GQaVVec+cJCYVjCtXErsBIfJgKgUS7r +30qXWzo+1GLS6NDwFmMCu3MeXvo0Jt3vVk6lrU8LXKrGeiW5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBYZcyp3jHiDl7pFLoyYgAwnBc+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk1MWQyNWItZmQ1Ny0z MGMxLWJmMjctZDU3NzVkY2Y3Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBG5cYPGbIM0Jkl34LdzAPxQ+KILu+WY3Iql3bZ Rwf0HKViYQc0zFX7Pn7J83Un2LezTV8WADQyr5u+5AInUO8eYFqe7WTRxN0Dh4DH C/65shs4RQFgk8dAwqg3auYKa5z6zzoGlQODz+QXqpTTI9Ovzvoz+dp0ehAyGy00 43kIGRo5tmK5wFsL3VNpPxRhEC6Ei8WD0KzvZu7XQD2wQMk9ZNLrDWRclPdnmnmS le+gRc2janfdcJO9Wve65ekeojHUk32CKivBxAvloCs/+gARuEnbb7un94OS/3lV rzBNjojx9tW2ydWrMyfseJRgb1xKJ9OwAZ88XVEa3UpnssoZ -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:19 2025 by rpki-client