$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa File: dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa (raw, json) Hash identifier: lx/bRlUOn+tW7bvNwJZ25Ej7dsRCLdgP/4UYAqk49O0= Subject key identifier: A2:5B:D0:18:BB:67:DD:3C:8A:CC:D3:3B:B4:41:6F:F5:3D:C2:C3:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A98ECD0D91D2FA27ED800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 397196 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:98:ec:d0:d9:1d:2f:a2:7e:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=dab4de96-0f5b-43de-b5d8-b15df8ca2a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:33:05:be:c1:d4:f1:5d:eb:0a:b0:ab:9d: ba:8d:8a:23:90:2c:6e:d2:88:a8:33:0a:69:35:93: 6b:56:3f:19:4f:db:c2:f6:4b:73:8a:2b:87:e4:ec: 55:4c:ec:0d:c9:66:70:4f:d6:1b:44:d4:33:6e:14: c9:8e:ce:4b:da:74:e6:5e:f8:b6:42:a8:d1:5c:f4: 63:6f:54:db:40:6e:13:65:ca:da:ca:15:20:ec:14: f3:62:16:47:fa:ca:c2:99:93:6e:17:84:b3:94:81: 39:46:f6:c0:5c:41:77:1b:7b:7f:85:a2:bb:5d:6e: 88:dd:57:6d:48:cf:2d:fc:6e:71:02:a4:a8:79:cb: 0d:45:b7:8f:d2:76:25:4b:a0:57:52:0d:f3:4f:dc: 7c:ec:b3:be:85:21:c2:43:7b:b6:de:c3:6d:f9:05: c3:d0:8b:1e:71:6d:26:b2:a7:3b:86:26:03:5f:1f: 1f:87:d2:85:aa:90:fd:31:4a:ea:e8:f1:44:87:5f: 69:f0:84:4c:d0:f8:a5:01:fb:82:8e:3b:b5:ee:9a: 41:96:c9:52:0e:b0:eb:c1:d0:5f:bb:62:3f:15:a5: 96:ad:6e:eb:bc:1a:b8:29:62:11:42:bd:da:46:dc: c8:4f:ee:11:f7:43:7e:c9:f1:cb:36:06:75:4e:ee: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5B:D0:18:BB:67:DD:3C:8A:CC:D3:3B:B4:41:6F:F5:3D:C2:C3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4e:de:46:3c:64:0b:6e:b0:da:b7:2a:4b:75:78:1b:fa:1f: 9f:b5:b6:0c:e8:9f:98:4e:40:7e:42:79:77:77:61:1c:ef:cf: 2f:e3:2b:8d:7c:14:ee:a7:19:fa:46:8b:94:d1:b4:c5:43:02: 7c:88:d3:82:32:73:8c:b4:41:db:d9:39:45:33:7a:43:2d:b4: ae:8a:34:e1:25:66:1a:9a:3d:5c:7b:4e:77:d4:16:bd:b5:4c: 82:62:42:6d:3b:03:1f:49:7f:60:49:94:a0:b2:94:15:56:34: fd:4c:d7:3e:12:9d:64:40:f8:d6:fb:dc:8d:04:b5:c4:2b:17: d6:d3:42:8d:9c:5f:f2:51:b9:a2:c0:af:54:74:3b:fe:52:a7: 23:7c:f6:b7:67:8f:c4:11:0e:5c:b7:0a:16:c4:4a:de:43:9c: 68:8f:73:b6:bb:35:a5:20:53:6d:c8:f7:0c:6b:a7:34:d0:eb: 59:39:bb:48:f3:17:9d:e5:0d:da:83:09:64:9e:41:74:eb:ca: bd:24:e8:f7:ee:9c:f2:54:af:3b:34:1e:8a:d7:9d:10:3c:5e: 32:3d:0f:19:34:b8:05:2a:1e:c3:14:fd:f1:00:a0:f2:ab:fc: ca:88:5a:cd:14:a9:d8:83:04:b7:d8:6a:8b:8c:af:24:e4:d6: e9:5c:93:89 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epjs0NkdL6J+2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGFiNGRlOTYtMGY1Yi00M2RlLWI1ZDgtYjE1ZGY4Y2EyYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2wzBb7B1PFd6wqwq526jYojkCxu0oioMwpp NZNrVj8ZT9vC9ktziiuH5OxVTOwNyWZwT9YbRNQzbhTJjs5L2nTmXvi2QqjRXPRj b1TbQG4TZcrayhUg7BTzYhZH+srCmZNuF4SzlIE5RvbAXEF3G3t/haK7XW6I3Vdt SM8t/G5xAqSoecsNRbeP0nYlS6BXUg3zT9x87LO+hSHCQ3u23sNt+QXD0IsecW0m sqc7hiYDXx8fh9KFqpD9MUrq6PFEh19p8IRM0PilAfuCjju17ppBlslSDrDrwdBf u2I/FaWWrW7rvBq4KWIRQr3aRtzIT+4R90N+yfHLNgZ1Tu4IdwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKJb0Bi7Z908iszTO7RBb/U9wsMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVjMDdlYjMtZjA0ZC0z YTRjLTlkNTItNmYyOTI3NDcyYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAuTt5GPGQLbrDatypLdXgb+h+ftbYM6J+YTkB+ Qnl3d2Ec788v4yuNfBTupxn6RouU0bTFQwJ8iNOCMnOMtEHb2TlFM3pDLbSuijTh JWYamj1ce0531Ba9tUyCYkJtOwMfSX9gSZSgspQVVjT9TNc+Ep1kQPjW+9yNBLXE KxfW00KNnF/yUbmiwK9UdDv+UqcjfPa3Z4/EEQ5ctwoWxEreQ5xoj3O2uzWlIFNt yPcMa6c00OtZObtI8xed5Q3agwlknkF068q9JOj37pzyVK87NB6K150QPF4yPQ8Z NLgFKh7DFP3xAKDyq/zKiFrNFKnYgwS32GqLjK8k5NbpXJOJ -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:54 2025 by rpki-client