$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02b14ae6-4cd6-3c17-8d08-ed0607541012.roa File: 02b14ae6-4cd6-3c17-8d08-ed0607541012.roa (raw, json) Hash identifier: FHCQRD+RGjDEo1A5J6SbzKExtUw1dhSPWkaCnNAUHnc= Subject key identifier: 6C:9C:FA:5A:E2:1C:FD:F2:44:1D:3D:CB:3D:E1:20:B9:3B:DC:29:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D5A1B62955442E701D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02b14ae6-4cd6-3c17-8d08-ed0607541012.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 397202 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:a1:b6:29:55:44:2e:70:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=7404de0d-4c5d-44d6-b677-42c9a114b8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:48:97:14:1d:8c:24:56:e9:cb:21:88:9c: 39:cd:47:f9:b6:aa:9d:e9:48:a0:25:c6:31:8d:3e: b6:70:9e:b4:ee:e8:83:6f:c1:31:08:6e:fd:9a:4f: 11:f4:5a:11:66:bb:cb:b9:27:9f:fa:1e:7b:c4:4c: 26:f6:37:1d:81:8e:ec:2d:73:8e:50:20:aa:88:a1: 26:a5:5e:a9:ef:1a:7e:37:5d:18:d7:b4:ff:c0:fe: 20:24:65:d1:20:95:79:80:56:e7:bd:88:88:3f:31: be:bc:41:8a:75:17:14:2a:72:00:81:6a:e2:a0:81: 57:93:df:7c:bf:8d:a3:4e:a0:fd:66:dc:b2:84:c6: b1:5c:02:51:44:76:0e:14:39:51:a9:0c:4c:db:d8: 5d:4e:58:5f:f0:07:16:12:57:55:d5:1c:55:ec:70: 74:67:56:54:0e:55:d1:54:c0:79:87:bd:f5:b3:d9: eb:8d:a9:7c:7e:7e:3f:38:2b:b9:18:e5:e7:4a:51: e1:1a:07:dd:73:48:56:71:7c:21:e5:84:d5:f1:e3: 08:f8:fd:65:16:dc:57:6a:f8:fb:68:c9:76:2e:a1: a6:a7:44:2c:5a:38:39:cd:e1:31:dc:64:0c:34:3f: 25:ab:f8:a6:9c:0a:76:91:41:f9:4f:aa:41:f7:3f: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9C:FA:5A:E2:1C:FD:F2:44:1D:3D:CB:3D:E1:20:B9:3B:DC:29:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02b14ae6-4cd6-3c17-8d08-ed0607541012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d3:d8:61:f9:78:82:05:86:90:36:18:c7:31:de:94:0b:be: ad:6b:f4:05:65:be:5b:93:c8:1a:86:3a:d6:e7:16:4e:3a:de: 57:1b:af:89:ed:71:13:e6:00:89:9e:b4:5f:27:07:82:a9:a4: f8:40:01:40:69:e1:53:3b:0b:94:1b:a3:77:42:43:67:59:64: dd:13:d9:0e:da:31:69:2e:c0:b5:cc:5e:51:7c:e5:79:90:1e: cb:20:97:5c:89:7e:73:b9:8a:87:7c:e2:b8:1c:d5:b7:76:52: c4:c8:a6:14:80:46:37:99:38:42:ad:fe:62:a3:02:92:17:0b: e8:d9:82:61:c8:2a:db:20:06:c7:a9:fe:a4:50:81:35:92:07: 2e:7c:85:d0:a9:69:69:7a:f5:cf:cf:1d:50:c9:08:8e:15:ec: 6e:6e:d3:72:43:aa:5b:bf:0c:51:c1:10:45:5b:d8:77:63:cc: 3e:03:16:c8:2b:8f:48:ad:0e:b5:08:b2:99:9a:17:33:cb:ff: 23:2f:d8:55:fa:4f:c4:73:da:a5:3a:f3:da:d8:ca:10:09:36: 60:a8:34:d5:87:46:76:73:f5:72:1b:3d:cf:9b:6e:26:7f:10: 88:7f:aa:5d:57:4f:19:bb:15:fd:d7:08:32:53:f5:fd:be:f0: e2:a6:eb:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9WhtilVRC5wHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk NzQwNGRlMGQtNGM1ZC00NGQ2LWI2NzctNDJjOWExMTRiOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz5IlxQdjCRW6cshiJw5zUf5tqqd6UigJcYx jT62cJ607uiDb8ExCG79mk8R9FoRZrvLuSef+h57xEwm9jcdgY7sLXOOUCCqiKEm pV6p7xp+N10Y17T/wP4gJGXRIJV5gFbnvYiIPzG+vEGKdRcUKnIAgWrioIFXk998 v42jTqD9ZtyyhMaxXAJRRHYOFDlRqQxM29hdTlhf8AcWEldV1RxV7HB0Z1ZUDlXR VMB5h731s9nrjal8fn4/OCu5GOXnSlHhGgfdc0hWcXwh5YTV8eMI+P1lFtxXavj7 aMl2LqGmp0QsWjg5zeEx3GQMND8lq/imnAp2kUH5T6pB9z9xmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGyc+lriHP3yRB09yz3hILk73CmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDJiMTRhZTYtNGNkNi0z YzE3LThkMDgtZWQwNjA3NTQxMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPT2GH5eIIFhpA2GMcx3pQLvq1r9AVlvluTyBqGOtbnFk463lcb r4ntcRPmAImetF8nB4KppPhAAUBp4VM7C5Qbo3dCQ2dZZN0T2Q7aMWkuwLXMXlF8 5XmQHssgl1yJfnO5iod84rgc1bd2UsTIphSARjeZOEKt/mKjApIXC+jZgmHIKtsg Bsep/qRQgTWSBy58hdCpaWl69c/PHVDJCI4V7G5u03JDqlu/DFHBEEVb2HdjzD4D Fsgrj0itDrUIspmaFzPL/yMv2FX6T8Rz2qU689rYyhAJNmCoNNWHRnZz9XIbPc+b biZ/EIh/ql1XTxm7Ff3XCDJT9f2+8OKm64g= -----END CERTIFICATE-----Generated at Sat Jun 7 04:23:35 2025 by rpki-client