$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07a5174c-90b0-3b1e-be47-84795f6ed775.roa File: 07a5174c-90b0-3b1e-be47-84795f6ed775.roa (raw, json) Hash identifier: kXNfJKB5HQ9A2SHkaZuvVV2hOh9wfttkwI0lgG8LLwU= Subject key identifier: 9C:42:66:AA:7B:73:DA:DD:9B:E8:5E:29:50:C4:E3:0B:F7:5C:E9:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D2655BD631716D08D450 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07a5174c-90b0-3b1e-be47-84795f6ed775.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396543 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:65:5b:d6:31:71:6d:08:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=b19da88e-dc59-41cb-b3d2-ce637a2f45b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:20:b4:9c:46:81:ac:45:eb:bc:79:9e:55: a9:76:1b:01:f8:ec:ef:d0:03:da:e7:3d:3f:e4:da: 35:df:3c:cb:de:6d:a6:f6:09:82:15:4a:69:bc:c1: 2e:c4:07:6f:32:d6:9f:34:29:99:13:20:b6:be:c9: cc:d5:c6:f4:9d:56:ce:10:a0:00:c4:2f:cf:f9:9b: a6:d4:80:c8:f5:75:de:3f:80:e3:e0:5f:d4:58:91: 41:c8:d0:84:89:10:35:e7:b6:c2:0f:15:71:9b:e6: dc:4a:57:83:ff:90:c8:d9:36:9f:a5:08:3f:2c:c6: 16:6c:f7:4a:62:f0:5c:23:fb:fd:34:7d:51:f8:b5: a4:53:ed:e8:0c:c3:36:9f:ed:5d:d2:65:50:8f:26: fd:39:bf:8e:ed:96:2e:48:4a:cf:fb:2f:aa:42:63: 6c:f8:80:59:a3:d8:7f:30:33:81:ea:3b:51:47:9f: ca:b9:10:95:60:26:3d:9c:52:42:49:41:f4:45:a3: 47:c6:7a:1c:f6:8c:d0:de:ec:c7:c0:f0:ec:5b:de: 17:a8:75:9a:26:0e:d4:0e:df:1f:6b:e5:c4:81:e9: 1a:4c:db:fb:b1:9f:40:f5:32:d4:33:8f:9f:30:f3: 05:62:f7:fe:26:ae:c9:0a:6a:91:05:70:c6:d7:61: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:42:66:AA:7B:73:DA:DD:9B:E8:5E:29:50:C4:E3:0B:F7:5C:E9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07a5174c-90b0-3b1e-be47-84795f6ed775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7f:ac:28:d6:5a:d0:f1:02:d7:c1:e3:c9:fc:c5:03:16:0c: 1d:6e:8b:83:3d:4a:5f:5d:5e:47:11:b7:cd:59:7a:42:ee:61: 2c:15:1b:73:8e:e3:ab:fd:89:cd:96:1b:55:68:48:19:d8:d4: 2d:ab:d5:2b:36:a5:ee:ea:2d:12:c9:c0:ac:ba:e5:b2:6e:c7: ed:d4:0a:99:1a:bb:56:a9:b9:2e:e3:13:9c:de:1c:47:7b:c0: 0a:5f:8c:f8:32:6b:94:ea:97:41:85:c0:ad:cb:ab:c4:31:0f: 7c:ab:d7:f4:22:f3:f0:cd:bf:91:f9:a3:77:3d:c3:88:d1:d9: 1a:e6:22:d3:f8:7f:4f:86:be:ca:e7:84:cd:53:ae:84:72:8a: 0d:a5:fa:7f:6b:fa:15:c5:dd:ae:38:84:81:21:12:4d:a8:ea: f3:70:5c:ef:e8:38:49:2d:b0:2f:a9:4e:00:ad:f7:86:39:87: 51:37:63:ac:af:5e:d0:ea:81:eb:49:48:ef:8c:16:07:00:0c: d9:03:d1:e4:23:e6:9c:48:8c:82:93:5f:1a:ba:34:dd:74:0e: 19:23:e3:ae:bb:ee:7f:5f:35:a0:2d:c4:04:b4:29:7b:0e:20: 9f:ab:04:82:25:6a:05:89:7a:d2:40:ac:4b:ff:e5:73:be:25: c6:96:4c:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9JlW9YxcW0I1FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk YjE5ZGE4OGUtZGM1OS00MWNiLWIzZDItY2U2MzdhMmY0NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt4gtJxGgaxF67x5nlWpdhsB+Ozv0APa5z0/ 5No13zzL3m2m9gmCFUppvMEuxAdvMtafNCmZEyC2vsnM1cb0nVbOEKAAxC/P+Zum 1IDI9XXeP4Dj4F/UWJFByNCEiRA157bCDxVxm+bcSleD/5DI2TafpQg/LMYWbPdK YvBcI/v9NH1R+LWkU+3oDMM2n+1d0mVQjyb9Ob+O7ZYuSErP+y+qQmNs+IBZo9h/ MDOB6jtRR5/KuRCVYCY9nFJCSUH0RaNHxnoc9ozQ3uzHwPDsW94XqHWaJg7UDt8f a+XEgekaTNv7sZ9A9TLUM4+fMPMFYvf+Jq7JCmqRBXDG12HUOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJxCZqp7c9rdm+heKVDE4wv3XOllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDdhNTE3NGMtOTBiMC0z YjFlLWJlNDctODQ3OTVmNmVkNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADp/rCjWWtDxAtfB48n8xQMWDB1ui4M9Sl9dXkcRt81ZekLuYSwV G3OO46v9ic2WG1VoSBnY1C2r1Ss2pe7qLRLJwKy65bJux+3UCpkau1apuS7jE5ze HEd7wApfjPgya5Tql0GFwK3Lq8QxD3yr1/Qi8/DNv5H5o3c9w4jR2RrmItP4f0+G vsrnhM1TroRyig2l+n9r+hXF3a44hIEhEk2o6vNwXO/oOEktsC+pTgCt94Y5h1E3 Y6yvXtDqgetJSO+MFgcADNkD0eQj5pxIjIKTXxq6NN10Dhkj46677n9fNaAtxAS0 KXsOIJ+rBIIlagWJetJArEv/5XO+JcaWTCw= -----END CERTIFICATE-----Generated at Sat Jun 7 04:13:21 2025 by rpki-client