$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/079aa7f4-bca3-35c3-a543-d013b1070d4f.roa File: 079aa7f4-bca3-35c3-a543-d013b1070d4f.roa (raw, json) Hash identifier: S/s9C/KAKpvOFee437xHFY8PVIoX+HQO7B2b2msankc= Subject key identifier: 5E:8E:C8:66:56:F5:18:08:4E:D1:E9:46:4C:C8:29:95:D9:A1:64:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D226851B4FBE95B0A680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/079aa7f4-bca3-35c3-a543-d013b1070d4f.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 397208 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:26:85:1b:4f:be:95:b0:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=8ce5cd33-85c9-4e44-ba29-013e1d9e94c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:49:45:17:32:9e:97:91:27:70:8f:f2:63:76: 2c:31:06:a9:d9:c0:7d:17:08:b7:b6:a1:c8:ec:29: a7:c1:e9:f7:56:a6:d5:cd:79:d4:d8:c9:08:4f:06: 7a:31:c2:db:8b:38:fa:db:50:94:65:5f:7d:f9:1b: ac:67:cd:c9:ed:18:3c:78:e3:9c:2f:8a:c0:70:04: b9:12:64:e3:6e:09:fa:73:1e:11:4e:60:6b:5d:e7: 79:af:48:80:2f:a3:18:bb:23:bb:95:8d:13:06:76: 67:e3:d7:fa:81:58:40:c9:2a:70:91:3b:2d:62:03: 22:9d:38:45:b6:11:2c:77:03:71:7a:87:7e:04:fc: d6:c8:ac:c9:75:95:94:71:76:40:ec:ed:59:a6:51: 83:ad:8e:3d:5b:1f:00:66:7c:ce:ca:da:b0:d2:49: fe:97:dd:1f:b2:33:fa:36:fc:58:b6:45:46:6a:4e: 8f:e3:0d:39:6e:90:4a:7d:80:5a:a6:a0:8d:53:1b: 7c:e6:fc:19:b6:d3:e5:60:9e:05:37:02:f1:f7:aa: 95:74:75:9b:4d:fa:44:e2:d7:90:02:d7:f5:7e:eb: 61:1e:b1:f9:a6:35:cf:6d:5d:93:7f:a2:f8:d0:47: 84:9a:62:97:69:4b:7f:0a:01:c9:7c:40:52:e2:f3: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8E:C8:66:56:F5:18:08:4E:D1:E9:46:4C:C8:29:95:D9:A1:64:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/079aa7f4-bca3-35c3-a543-d013b1070d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b6:8c:93:1b:08:08:fd:d5:d7:f9:91:c1:6c:89:d4:d3:c9: 79:58:70:d1:80:af:2c:fb:5d:38:14:6f:29:66:4b:f2:b6:9d: 5b:d6:de:37:a5:d2:c5:94:ec:ee:8c:d7:2c:34:85:b9:40:cb: 2f:0b:48:97:f1:fc:d9:9b:7e:9a:96:54:4b:12:85:45:71:5a: 6f:af:b6:cb:cb:33:ac:80:48:fe:bb:d2:7e:d6:54:90:56:bf: 6d:cf:88:65:e0:50:da:aa:7e:09:18:07:30:60:75:69:4e:e5: d7:40:e7:9d:44:c2:78:b7:7b:76:fa:9f:59:f4:1c:44:e8:1b: 01:60:d8:80:ea:dc:7a:0a:a1:2d:b3:bc:dd:cb:7a:d7:f3:60: cd:2a:4a:45:b0:f0:38:2f:26:5d:bf:a4:f6:96:d5:06:a6:ca: d5:3f:f0:d0:89:53:f5:6e:5f:c6:a2:61:7d:b3:31:6c:e7:20: b4:f4:ea:89:fa:cf:71:7b:ed:fd:05:c6:ec:82:38:8a:51:30: d0:d2:73:e4:4d:e7:73:26:5e:00:cd:b6:99:fa:bf:fa:4b:e2: 75:b4:95:3c:e6:5b:33:32:b8:a0:13:39:04:57:26:fc:d3:20: c3:07:d0:20:48:ee:df:ca:43:a7:8f:52:15:c3:39:79:59:e2: fa:0a:03:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9ImhRtPvpWwpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk OGNlNWNkMzMtODVjOS00ZTQ0LWJhMjktMDEzZTFkOWU5NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0lFFzKel5EncI/yY3YsMQap2cB9Fwi3tqHI 7Cmnwen3VqbVzXnU2MkITwZ6McLbizj621CUZV99+RusZ83J7Rg8eOOcL4rAcAS5 EmTjbgn6cx4RTmBrXed5r0iAL6MYuyO7lY0TBnZn49f6gVhAySpwkTstYgMinThF thEsdwNxeod+BPzWyKzJdZWUcXZA7O1ZplGDrY49Wx8AZnzOytqw0kn+l90fsjP6 NvxYtkVGak6P4w05bpBKfYBapqCNUxt85vwZttPlYJ4FNwLx96qVdHWbTfpE4teQ Atf1futhHrH5pjXPbV2Tf6L40EeEmmKXaUt/CgHJfEBS4vOM0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF6OyGZW9RgITtHpRkzIKZXZoWTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDc5YWE3ZjQtYmNhMy0z NWMzLWE1NDMtZDAxM2IxMDcwZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFa2jJMbCAj91df5kcFsidTTyXlYcNGAryz7XTgUbylmS/K2nVvW 3jel0sWU7O6M1yw0hblAyy8LSJfx/NmbfpqWVEsShUVxWm+vtsvLM6yASP670n7W VJBWv23PiGXgUNqqfgkYBzBgdWlO5ddA551Ewni3e3b6n1n0HEToGwFg2IDq3HoK oS2zvN3LetfzYM0qSkWw8DgvJl2/pPaW1QamytU/8NCJU/VuX8aiYX2zMWznILT0 6on6z3F77f0FxuyCOIpRMNDSc+RN53MmXgDNtpn6v/pL4nW0lTzmWzMyuKATOQRX JvzTIMMH0CBI7t/KQ6ePUhXDOXlZ4voKA3E= -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:48 2025 by rpki-client