$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa File: d0214da0-08fe-312f-ac14-78ada0560a35.roa (raw, json) Hash identifier: 6ASOvx32iUDQbBgkqSUr1v/B3eV7tDHJrHF70QCYEOo= Subject key identifier: 7E:55:54:C4:45:E4:5F:AA:AB:80:17:17:ED:C9:BF:21:42:99:85:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD1AD34F441593B6F2C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396552 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d1:ad:34:f4:41:59:3b:6f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=37470b11-ea98-4ea3-b9fc-ddb56db919c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:51:66:c6:dc:5e:40:83:d4:06:5e:c8:a4: e3:e2:3d:b5:59:05:60:a1:7f:89:b9:7b:9a:51:5a: b4:25:9a:8b:fc:1d:fc:2f:b4:bb:6b:0b:e9:ff:f7: 3e:33:f9:98:50:82:4d:58:b8:e5:f7:f3:ff:85:da: 0b:19:15:e2:42:aa:64:96:c6:28:26:8f:a9:c7:47: 6f:cf:6b:63:48:c2:5f:3e:5b:10:f2:16:a4:a1:96: 45:f6:57:c0:d3:d8:13:3b:d2:b7:62:c5:2e:6f:ed: a9:a2:dc:ce:a4:29:35:86:ba:b0:fc:a6:52:19:bb: 8f:5f:97:6d:cf:0d:8e:b5:58:76:4b:52:0c:95:1c: c8:cb:9e:24:f9:2f:af:f0:6f:60:63:ce:06:a0:3c: e4:3b:39:38:a3:41:be:f2:f6:9e:43:57:05:ca:39: 7c:a3:4c:54:6c:9a:01:45:d9:47:d0:cc:28:56:2a: a9:23:ac:e6:69:c0:b1:44:f2:15:13:57:54:40:6a: 01:6e:f8:52:dc:5b:8a:be:a4:e1:b4:28:bb:3c:38: d2:87:b4:3e:45:5e:eb:db:8d:fe:cd:2e:91:7d:30: 1f:6f:b5:02:b5:4d:47:db:63:7e:89:c3:87:db:98: 50:69:14:50:2b:39:7f:5d:78:c0:50:c9:c4:d5:7c: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:54:C4:45:E4:5F:AA:AB:80:17:17:ED:C9:BF:21:42:99:85:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:74:2d:6a:2a:41:2f:d8:fa:e8:92:8b:51:9c:bf:80:e5:f3: 53:65:f8:42:8d:12:e3:8b:8c:42:2f:ed:bb:fa:24:8f:77:2e: d3:a9:5f:d5:ea:b8:ee:b9:c0:61:62:9a:72:53:5e:6c:2f:d7: 91:da:40:b1:30:1b:94:77:b0:32:e9:9d:c3:40:61:9f:84:98: af:87:54:62:4d:bf:e5:a0:16:f0:28:88:9f:eb:2a:e4:42:fe: 11:2b:3c:cd:fa:33:2c:46:99:1e:d6:c9:f6:68:13:01:87:92: 42:e7:e7:11:69:84:cc:e9:80:a1:8f:87:12:90:cc:35:22:f4: f4:a7:42:05:58:7c:54:5c:18:95:1e:62:76:11:ef:2d:20:5e: 66:12:74:ea:b3:4b:fa:ff:6d:dd:84:d1:ff:21:6d:c2:9f:6e: eb:bf:6c:b1:b2:3d:15:54:42:35:ea:28:11:71:ab:52:7c:a4: c4:4a:06:3c:4f:79:c0:77:27:94:09:53:80:f1:0c:7d:c2:f7: d0:69:d3:f5:f7:eb:9b:12:44:ab:c9:a5:94:e6:67:a4:f5:b7: 79:1f:12:b9:cf:9e:ca:6d:21:98:c0:62:34:18:0a:13:90:f4: 6f:7d:8b:63:b1:2b:d8:b3:ab:eb:15:6b:ee:b2:94:de:52:eb: fb:a6:14:30 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9GtNPRBWTtvLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk Mzc0NzBiMTEtZWE5OC00ZWEzLWI5ZmMtZGRiNTZkYjkxOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPRRZsbcXkCD1AZeyKTj4j21WQVgoX+JuXua UVq0JZqL/B38L7S7awvp//c+M/mYUIJNWLjl9/P/hdoLGRXiQqpklsYoJo+px0dv z2tjSMJfPlsQ8hakoZZF9lfA09gTO9K3YsUub+2potzOpCk1hrqw/KZSGbuPX5dt zw2OtVh2S1IMlRzIy54k+S+v8G9gY84GoDzkOzk4o0G+8vaeQ1cFyjl8o0xUbJoB RdlH0MwoViqpI6zmacCxRPIVE1dUQGoBbvhS3FuKvqThtCi7PDjSh7Q+RV7r243+ zS6RfTAfb7UCtU1H22N+icOH25hQaRRQKzl/XXjAUMnE1XyRnQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH5VVMRF5F+qq4AXF+3JvyFCmYWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAyMTRkYTAtMDhmZS0z MTJmLWFjMTQtNzhhZGEwNTYwYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBCdC1qKkEv2ProkotRnL+A5fNTZfhCjRLji4xC L+27+iSPdy7TqV/V6rjuucBhYppyU15sL9eR2kCxMBuUd7Ay6Z3DQGGfhJivh1Ri Tb/loBbwKIif6yrkQv4RKzzN+jMsRpke1sn2aBMBh5JC5+cRaYTM6YChj4cSkMw1 IvT0p0IFWHxUXBiVHmJ2Ee8tIF5mEnTqs0v6/23dhNH/IW3Cn27rv2yxsj0VVEI1 6igRcatSfKTESgY8T3nAdyeUCVOA8Qx9wvfQadP19+ubEkSryaWU5mek9bd5HxK5 z57KbSGYwGI0GAoTkPRvfYtjsSvYs6vrFWvuspTeUuv7phQw -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:53 2025 by rpki-client