$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa File: bf7da230-50ad-3769-8c60-561c844420a1.roa (raw, json) Hash identifier: LQmNCmyBDbzISgBoPAPoc4ZD9TLzZm3+BZTDMOPcIkg= Subject key identifier: F9:7F:C5:50:54:FF:2D:51:FF:9E:60:EC:9C:BE:E3:26:17:CB:2D:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D0274F6FD63934FA7400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396591 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:27:4f:6f:d6:39:34:fa:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=67e1f033-5d27-4d2c-affc-dc433fe1b186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:fd:80:cf:7e:31:76:6a:12:b1:f6:61:56: 47:22:46:9a:f2:3b:3a:dd:d2:23:70:a9:0c:a2:fa: 1e:6d:f5:bd:b7:f3:a3:38:22:b0:14:bd:e3:53:3e: d6:24:ee:ab:ca:67:8d:18:e9:78:34:56:79:ec:cd: fe:de:db:4b:cb:7b:25:5e:34:af:27:18:38:c1:77: e5:ed:05:75:af:da:1c:52:8c:ec:79:86:f0:f6:94: c6:0f:8f:d6:6c:5c:a3:2c:00:6b:28:aa:bc:d5:b2: 31:d2:53:d8:dd:85:3e:c5:89:f1:bb:30:58:f1:d2: 10:42:e5:4c:dc:16:af:a1:7f:8a:d4:f4:04:2d:b8: 33:c9:49:32:cf:73:b5:9a:c9:6a:d8:2f:f5:3e:bc: d2:4d:85:1c:40:62:56:57:67:ba:5a:16:06:85:48: 3f:83:17:52:5a:57:36:68:b1:04:29:8d:4f:e4:7c: c8:25:d4:59:68:2a:26:d3:76:82:de:ec:f8:22:0a: e4:a1:6d:57:df:3b:62:1a:2a:6b:da:55:70:d2:96: fd:a5:cd:95:2d:53:d3:95:8c:ff:df:ed:df:43:de: fb:a7:7f:43:d2:f9:eb:4d:89:65:93:29:ce:8f:70: fe:0a:a2:a8:4d:f8:b5:78:5f:a6:d2:7a:20:1b:9e: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:C5:50:54:FF:2D:51:FF:9E:60:EC:9C:BE:E3:26:17:CB:2D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf7da230-50ad-3769-8c60-561c844420a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6a:9a:84:94:f6:f6:7f:da:e8:71:41:23:04:dc:ef:e3:cb: 35:70:e2:71:59:0e:b4:b4:ad:a6:7d:df:67:1e:5a:9d:d7:72: 36:19:c5:11:cc:73:ad:b3:4a:0b:2b:1f:9a:d4:a3:78:7c:0f: 86:e6:5f:d1:33:7b:39:cd:12:23:0c:52:f9:d5:62:d2:21:de: 9b:be:4b:81:33:f0:bd:b7:2a:60:a4:fb:3f:f6:1f:93:3a:4f: 6d:6f:20:bf:94:2c:a0:5c:ca:29:88:aa:df:a2:38:6e:bd:ab: 34:cb:e5:3a:14:6f:66:92:80:9a:aa:88:55:db:46:46:65:61: a0:08:79:e5:55:df:02:91:3e:1c:55:d3:0b:df:71:fa:98:d5: 05:47:f6:57:0f:0e:38:17:14:66:13:da:7b:8e:8e:a5:1f:3e: 27:48:86:13:73:d2:69:70:fc:1f:15:45:11:2f:c5:ba:47:a1: 9c:41:99:91:e1:09:f6:a4:6e:08:3f:a0:43:b5:7b:7f:e2:c4: 7c:3a:cc:55:48:7e:77:18:b6:5c:92:56:65:8f:21:0e:39:a0: e8:3a:f9:5c:34:ff:5e:85:8e:15:33:f6:87:cb:3c:05:e5:1f: 87:f6:4c:40:6b:39:de:d2:5b:d3:ac:dd:f8:9b:33:d7:14:07: bd:c4:45:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9AnT2/WOTT6dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk NjdlMWYwMzMtNWQyNy00ZDJjLWFmZmMtZGM0MzNmZTFiMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtav9gM9+MXZqErH2YVZHIkaa8js63dIjcKkM ovoebfW9t/OjOCKwFL3jUz7WJO6rymeNGOl4NFZ57M3+3ttLy3slXjSvJxg4wXfl 7QV1r9ocUozseYbw9pTGD4/WbFyjLABrKKq81bIx0lPY3YU+xYnxuzBY8dIQQuVM 3BavoX+K1PQELbgzyUkyz3O1mslq2C/1PrzSTYUcQGJWV2e6WhYGhUg/gxdSWlc2 aLEEKY1P5HzIJdRZaCom03aC3uz4IgrkoW1X3ztiGipr2lVw0pb9pc2VLVPTlYz/ 3+3fQ977p39D0vnrTYllkynOj3D+CqKoTfi1eF+m0nogG55tSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPl/xVBU/y1R/55g7Jy+4yYXyy0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY3ZGEyMzAtNTBhZC0z NzY5LThjNjAtNTYxYzg0NDQyMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJqmoSU9vZ/2uhxQSME3O/jyzVw4nFZDrS0raZ932ceWp3XcjYZ xRHMc62zSgsrH5rUo3h8D4bmX9EzeznNEiMMUvnVYtIh3pu+S4Ez8L23KmCk+z/2 H5M6T21vIL+ULKBcyimIqt+iOG69qzTL5ToUb2aSgJqqiFXbRkZlYaAIeeVV3wKR PhxV0wvfcfqY1QVH9lcPDjgXFGYT2nuOjqUfPidIhhNz0mlw/B8VRREvxbpHoZxB mZHhCfakbgg/oEO1e3/ixHw6zFVIfncYtlySVmWPIQ45oOg6+Vw0/16FjhUz9ofL PAXlH4f2TEBrOd7SW9Os3fibM9cUB73ERRc= -----END CERTIFICATE-----Generated at Fri Jun 6 19:44:09 2025 by rpki-client