$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa File: c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa (raw, json) Hash identifier: ufMXNXiGWIPEZsHNr7DFWxlXreJbOdOvwCr3DH3/aDY= Subject key identifier: EE:1A:07:83:34:ED:23:74:D4:CA:6B:C3:99:26:7B:EE:2C:2D:81:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9AD2030D23427BF7EE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 397194 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9a:d2:03:0d:23:42:7b:f7:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=a38d0676-6972-45f8-85db-4fbeb5178d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:7f:55:a7:2d:15:9b:05:bc:77:c7:c3:16: 04:d8:7b:f4:5c:56:14:ae:35:01:91:ee:64:65:11: d1:17:8b:a8:b3:73:f6:08:38:f6:e0:6f:f7:a6:c3: f7:fe:ba:f9:bd:63:2a:3e:c6:31:4b:e8:d0:4a:ef: f4:d2:74:f2:16:14:54:69:0f:d8:f8:6d:f2:5a:91: 03:00:e5:59:30:31:d0:a0:2d:e9:0e:54:58:db:6f: 59:1b:03:ca:f2:0f:05:0f:d1:0d:52:77:39:a8:65: b1:79:31:49:9c:6e:78:2a:de:d8:dd:4b:0f:5f:d0: c0:fc:f6:89:c5:c5:48:f5:3e:ac:0f:41:63:2a:94: 69:74:1f:32:f7:c6:6b:84:3e:c4:0f:9c:4a:61:ec: 7d:13:5a:d0:c0:b7:e8:0f:be:db:a0:4b:c4:d6:8b: 75:73:ba:d0:6b:42:e9:a0:2f:1f:4a:4a:39:a2:eb: c9:05:19:bb:e6:41:11:7e:84:7c:8d:c0:3c:8c:f3: 4f:e0:fa:d4:37:5f:d0:eb:eb:ac:79:ac:b8:82:65: 56:5c:62:37:90:9f:8a:0a:99:bb:da:0a:71:93:c1: 53:e6:59:c4:82:93:07:0d:e6:fc:48:4e:a9:78:2d: 4f:df:33:35:5a:94:96:2c:7d:df:ce:7b:68:67:9c: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1A:07:83:34:ED:23:74:D4:CA:6B:C3:99:26:7B:EE:2C:2D:81:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0f:8d:80:68:64:29:23:6f:b0:c1:62:28:6d:78:48:03:7f: a2:e8:41:30:f6:ee:31:4e:00:a6:76:34:26:4b:ac:a8:c9:79: 92:4a:66:d7:4b:e6:af:92:29:95:e9:83:26:3a:2d:f2:81:2d: 4a:6d:7e:8b:4a:2b:03:32:a9:e3:70:7a:f9:ee:ae:c7:7a:8d: 38:f3:52:1a:be:82:43:87:0b:eb:50:8f:a9:43:43:f0:87:96: 6e:30:f3:43:69:a8:e8:57:ba:2f:9d:e5:33:86:cf:31:c2:68: 9d:55:70:a0:d9:01:63:08:50:59:4f:f9:b6:45:7e:6a:f2:2f: 38:f5:79:95:24:86:7d:06:0a:9d:00:46:17:d5:dd:62:c7:91: 08:91:bc:dd:4f:d3:42:23:6f:f1:49:dd:ca:aa:54:fd:87:1f: 09:06:80:d3:10:e4:88:d9:c5:9e:23:42:4c:5a:9b:e9:16:0e: ae:29:eb:63:d1:c3:1d:69:a2:30:52:d4:3b:c0:ee:de:14:af: 25:a0:e7:39:e8:8b:99:32:75:ac:d9:77:70:cd:55:a0:52:be: 02:2b:66:d4:c6:44:19:20:8b:0e:9a:83:c4:86:d7:df:87:c8: ed:96:53:d5:b0:9f:db:33:2d:7d:ab:a1:e7:27:6a:ef:43:11: 4d:5e:bf:02 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4eprSAw0jQnv37gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YTM4ZDA2NzYtNjk3Mi00NWY4LTg1ZGItNGZiZWI1MTc4ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtch/VactFZsFvHfHwxYE2Hv0XFYUrjUBke5k ZRHRF4uos3P2CDj24G/3psP3/rr5vWMqPsYxS+jQSu/00nTyFhRUaQ/Y+G3yWpED AOVZMDHQoC3pDlRY229ZGwPK8g8FD9ENUnc5qGWxeTFJnG54Kt7Y3UsPX9DA/PaJ xcVI9T6sD0FjKpRpdB8y98ZrhD7ED5xKYex9E1rQwLfoD77boEvE1ot1c7rQa0Lp oC8fSko5ouvJBRm75kERfoR8jcA8jPNP4PrUN1/Q6+useay4gmVWXGI3kJ+KCpm7 2gpxk8FT5lnEgpMHDeb8SE6peC1P3zM1WpSWLH3fzntoZ5z31QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO4aB4M07SN01Mprw5kme+4sLYHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzU4NmM0ZjEtYjcwZC0z Y2E2LWE1YjgtMmE5M2MxZTUzNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9D42AaGQpI2+wwWIobXhIA3+i6EEw9u4xTgCm djQmS6yoyXmSSmbXS+avkimV6YMmOi3ygS1KbX6LSisDMqnjcHr57q7Heo0481Ia voJDhwvrUI+pQ0Pwh5ZuMPNDaajoV7ovneUzhs8xwmidVXCg2QFjCFBZT/m2RX5q 8i849XmVJIZ9BgqdAEYX1d1ix5EIkbzdT9NCI2/xSd3KqlT9hx8JBoDTEOSI2cWe I0JMWpvpFg6uKetj0cMdaaIwUtQ7wO7eFK8loOc56IuZMnWs2XdwzVWgUr4CK2bU xkQZIIsOmoPEhtffh8jtllPVsJ/bMy19q6HnJ2rvQxFNXr8C -----END CERTIFICATE-----Generated at Sat Jun 7 03:59:50 2025 by rpki-client