$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa File: bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa (raw, json) Hash identifier: uzP+9tJM2b2iFhF5uyTdwMl3RKkvB9WPOjUVNAShtQ8= Subject key identifier: 2F:6D:82:AB:58:6A:9C:F2:56:07:47:24:71:49:9E:20:00:83:A6:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A95D4D406D743CAC8A900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396614 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:95:d4:d4:06:d7:43:ca:c8:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=ce98a8c2-192a-44ec-94bb-f2b7db85c261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:f8:cf:42:27:ab:e9:b3:5f:6a:6f:a8:90: f8:25:89:07:e1:c8:b3:6a:44:ad:bb:fa:ac:88:e5: 47:3a:bf:a7:57:07:42:08:93:fa:b1:41:08:da:9f: 9d:5b:fa:70:51:06:f1:30:27:a8:32:76:8c:ba:61: 8f:72:5d:bc:e7:67:a4:54:ce:51:46:49:39:ab:d6: f6:c6:a5:53:26:46:84:f9:82:5a:81:24:cf:26:aa: 9e:76:c6:fa:0b:a7:f8:60:a1:63:10:9e:62:12:86: 41:a4:a8:83:8d:f0:e8:f6:00:a4:70:db:c0:1a:14: 9c:17:71:09:b5:70:46:27:79:6a:81:a9:0d:24:ec: b0:62:6a:58:29:01:24:ba:24:0c:ca:cc:f5:d7:b5: 59:89:37:16:fd:23:d1:dc:ac:cc:5c:eb:3f:53:83: 72:c7:1a:2a:b8:40:b0:a7:59:f5:ac:4c:c1:a6:22: 82:a8:62:e1:f6:ac:2b:9b:6c:18:a5:2a:70:a6:fa: 2d:62:11:a2:b8:06:4c:33:0b:aa:ea:31:45:ca:33: 82:61:c2:46:d5:41:88:68:5e:1c:65:b6:42:a3:8e: 44:49:c3:72:db:32:dd:5b:fc:d1:13:e8:9b:9e:a6: 33:88:73:87:a2:04:98:e2:12:ed:e6:6e:9b:88:7f: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6D:82:AB:58:6A:9C:F2:56:07:47:24:71:49:9E:20:00:83:A6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5d:6c:ab:3d:e2:fa:94:3b:db:a8:f4:30:ec:0c:bd:8d:70: 76:97:b0:4e:25:a7:91:82:cb:45:2d:89:47:af:62:7c:28:ea: 77:34:5b:55:dd:bd:5f:99:ea:1d:81:b1:44:84:19:fa:b6:77: 28:ea:b7:11:41:81:5f:fb:c4:a9:39:ea:dc:7a:51:6c:b7:14: b2:a3:90:88:ce:12:15:4b:6a:7c:4c:59:b2:d3:5f:ec:53:1c: 76:5e:60:a8:01:60:c7:9b:ff:da:de:7a:1d:3c:e5:8e:bb:e4: 22:4b:83:2f:b1:ea:75:60:07:3b:c6:7f:1e:83:ea:d8:6f:3b: 66:76:0a:b9:03:5e:f3:d3:5c:b7:82:ce:4d:ef:d8:a0:d0:01: fe:a1:50:5d:a1:6d:5e:66:75:bb:cf:20:69:02:42:12:8f:99: 59:e2:53:4f:42:e3:54:b9:b3:42:e0:7b:a3:fe:24:4c:29:e8: 50:a0:59:96:37:97:da:c7:9e:34:87:25:84:af:c2:05:08:64: 15:63:1d:39:f9:b4:e2:19:60:de:5f:57:c0:2f:f2:b6:dd:7b: 5e:33:2f:4c:49:e3:7d:21:f6:6b:ee:90:1d:31:60:ff:a7:8d: 2f:8d:9b:a1:ff:17:b8:c0:8e:78:d3:16:c7:a9:20:2a:34:0b: da:61:15:5c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epXU1AbXQ8rIqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk Y2U5OGE4YzItMTkyYS00NGVjLTk0YmItZjJiN2RiODVjMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKT4z0Inq+mzX2pvqJD4JYkH4cizakStu/qs iOVHOr+nVwdCCJP6sUEI2p+dW/pwUQbxMCeoMnaMumGPcl2852ekVM5RRkk5q9b2 xqVTJkaE+YJagSTPJqqedsb6C6f4YKFjEJ5iEoZBpKiDjfDo9gCkcNvAGhScF3EJ tXBGJ3lqgakNJOywYmpYKQEkuiQMysz117VZiTcW/SPR3KzMXOs/U4NyxxoquECw p1n1rEzBpiKCqGLh9qwrm2wYpSpwpvotYhGiuAZMMwuq6jFFyjOCYcJG1UGIaF4c ZbZCo45EScNy2zLdW/zRE+ibnqYziHOHogSY4hLt5m6biH+93wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC9tgqtYapzyVgdHJHFJniAAg6aPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ2YmExYWMtOGJjYy0z OWQ1LTkwYWUtODIwY2Y3OTI0MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATXWyrPeL6lDvbqPQw7Ay9jXB2l7BOJaeRgstF LYlHr2J8KOp3NFtV3b1fmeodgbFEhBn6tnco6rcRQYFf+8SpOercelFstxSyo5CI zhIVS2p8TFmy01/sUxx2XmCoAWDHm//a3nodPOWOu+QiS4Mvsep1YAc7xn8eg+rY bztmdgq5A17z01y3gs5N79ig0AH+oVBdoW1eZnW7zyBpAkISj5lZ4lNPQuNUubNC 4Huj/iRMKehQoFmWN5fax540hyWEr8IFCGQVYx05+bTiGWDeX1fAL/K23XteMy9M SeN9IfZr7pAdMWD/p40vjZuh/xe4wI540xbHqSAqNAvaYRVc -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:39 2025 by rpki-client