$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00ec6797-c193-3963-ab04-5ccf20b134ad.roa File: 00ec6797-c193-3963-ab04-5ccf20b134ad.roa (raw, json) Hash identifier: PY9rpJHKSu+7SVxn3mv0/y6r1jdFZm9jSbHEdcOOJ5Y= Subject key identifier: 9F:62:89:DE:3E:80:5C:1B:3E:9B:F2:62:D9:FF:1E:CA:3F:ED:F9:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D0A8524BFCF0A921ED00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00ec6797-c193-3963-ab04-5ccf20b134ad.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396566 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:a8:52:4b:fc:f0:a9:21:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=d399180c-629d-4747-b455-13e4a37df7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:df:8a:ea:01:09:11:96:60:7c:ac:b0:9d: 9c:65:0a:67:35:35:40:87:e8:2c:34:fd:b8:44:cb: d2:ef:07:2c:c2:ac:19:e2:0d:5c:71:81:62:4a:05: 05:d4:e2:f8:88:66:62:5a:ab:b4:73:a9:fc:a7:36: 9d:fd:8a:04:c6:ba:54:16:7b:c5:8f:04:33:06:d3: 5b:1c:fd:48:64:48:be:32:59:e2:47:79:ca:4d:ad: 88:87:b5:a7:05:90:cc:f0:44:cd:68:29:aa:47:35: 84:01:59:51:c6:d2:ba:0a:61:14:f7:24:82:74:09: 37:32:c2:1b:b6:1b:93:a2:52:c3:eb:06:42:32:13: 3c:03:c5:e9:65:72:67:6b:d8:2d:86:ec:bd:18:03: 16:bd:c5:27:31:5a:fa:e4:6f:3d:06:af:ed:04:b6: fd:a2:46:dc:ea:6d:9a:4c:4e:7c:f8:8d:3c:0f:ac: 9c:f4:8b:d7:e3:02:b0:2f:c4:8d:67:39:ca:b0:7b: 22:14:b7:6c:59:86:b1:71:67:a9:60:af:fa:81:93: ab:31:42:5b:3b:eb:1d:a0:46:c3:1b:26:ce:03:f3: 6f:b0:c1:07:99:68:f5:86:5d:5f:30:46:61:1f:87: 30:df:49:5a:9a:b4:b4:34:c3:a3:1e:e0:78:15:20: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:89:DE:3E:80:5C:1B:3E:9B:F2:62:D9:FF:1E:CA:3F:ED:F9:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00ec6797-c193-3963-ab04-5ccf20b134ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e8:bc:c6:00:46:97:4c:33:2c:eb:a7:a6:c6:50:bf:fe:c2: 03:c2:7f:dd:8e:e1:9e:ed:50:92:f1:03:1e:2e:ec:24:ac:b4: b6:e8:fa:4f:18:0d:a1:66:3b:7f:b4:b8:2c:8c:f9:9d:59:08: 20:d3:26:e0:56:7a:32:82:13:e2:85:71:20:29:25:80:72:d2: 89:f3:18:78:9a:5d:83:b0:09:cb:9a:3e:58:a9:3b:1a:d1:de: da:f6:ec:73:b9:39:88:52:40:7c:8c:35:82:47:50:74:f2:14: d0:8a:ef:ee:8d:a7:19:93:a3:c8:7a:e9:93:41:49:ec:a7:f1: 61:1c:f9:ab:6b:a4:60:f6:d4:60:7e:6c:29:41:fb:f4:97:1d: cc:fb:7d:7d:f1:06:94:df:b6:15:26:b6:fb:4a:f6:b9:fb:7e: 18:05:2f:05:85:e3:3f:1d:2e:bc:9c:fa:18:f1:7a:a9:8e:3a: 9e:41:b1:9e:d7:df:cb:4d:3f:e1:f5:a6:60:7c:57:aa:d1:2b: 9e:61:fa:e3:5e:5f:eb:87:4e:e1:c5:0d:17:41:63:d2:89:e8: 5e:3e:50:d4:35:60:fe:8a:a2:a9:fa:d5:93:cb:87:93:1e:36: 87:08:47:84:55:db:d8:1c:10:8d:5b:99:b0:b0:6b:81:56:29: 8c:ee:75:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9CoUkv88Kkh7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk ZDM5OTE4MGMtNjI5ZC00NzQ3LWI0NTUtMTNlNGEzN2RmN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/XfiuoBCRGWYHyssJ2cZQpnNTVAh+gsNP24 RMvS7wcswqwZ4g1ccYFiSgUF1OL4iGZiWqu0c6n8pzad/YoExrpUFnvFjwQzBtNb HP1IZEi+MlniR3nKTa2Ih7WnBZDM8ETNaCmqRzWEAVlRxtK6CmEU9ySCdAk3MsIb thuTolLD6wZCMhM8A8XpZXJna9gthuy9GAMWvcUnMVr65G89Bq/tBLb9okbc6m2a TE58+I08D6yc9IvX4wKwL8SNZznKsHsiFLdsWYaxcWepYK/6gZOrMUJbO+sdoEbD GybOA/NvsMEHmWj1hl1fMEZhH4cw30lamrS0NMOjHuB4FSAtjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9iid4+gFwbPpvyYtn/Hso/7fkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDBlYzY3OTctYzE5My0z OTYzLWFiMDQtNWNjZjIwYjEzNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzovMYARpdMMyzrp6bGUL/+wgPCf92O4Z7tUJLxAx4u7CSstLbo +k8YDaFmO3+0uCyM+Z1ZCCDTJuBWejKCE+KFcSApJYBy0onzGHiaXYOwCcuaPlip OxrR3tr27HO5OYhSQHyMNYJHUHTyFNCK7+6NpxmTo8h66ZNBSeyn8WEc+atrpGD2 1GB+bClB+/SXHcz7fX3xBpTfthUmtvtK9rn7fhgFLwWF4z8dLryc+hjxeqmOOp5B sZ7X38tNP+H1pmB8V6rRK55h+uNeX+uHTuHFDRdBY9KJ6F4+UNQ1YP6Koqn61ZPL h5MeNocIR4RV29gcEI1bmbCwa4FWKYzudWs= -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:57 2025 by rpki-client