$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa File: 0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa (raw, json) Hash identifier: xzA0VaLpn3ZfeKMkxnZgm1jQ1eHNiKZZwFsaNuMtq/8= Subject key identifier: 38:65:98:E1:E8:50:DA:DB:5E:67:A1:83:6E:C4:C5:19:24:1E:0D:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D31139A169B57B4ED140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 36628 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d3:11:39:a1:69:b5:7b:4e:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=3a0df996-95a8-4b07-9154-79a63151558d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:8c:82:fc:25:85:76:ae:c6:f4:0a:2e:fd: 96:93:79:de:85:01:d2:5b:09:49:e7:a4:63:0f:3f: d9:23:0a:2c:88:bf:57:4d:d5:91:36:23:f5:5c:c7: 58:aa:92:44:97:98:53:9b:df:42:d9:ba:1d:fa:7b: 39:20:e2:87:f5:e1:16:37:5b:9a:08:96:60:93:48: 66:0b:f3:f3:63:5f:a4:ba:f2:19:30:03:2a:6d:0a: 67:49:a6:3b:0b:41:e9:6d:c4:6e:77:70:5a:c0:92: 5a:bf:7a:37:11:2f:78:e1:d6:99:96:22:4e:f2:74: 4f:df:00:f2:8c:32:79:65:c4:ea:f1:70:d2:47:cf: 63:8a:a9:6e:ef:8f:0d:4d:34:7b:f9:a5:5a:0f:bb: 6a:1f:46:05:4d:bd:a6:83:03:90:00:e9:64:60:67: d8:74:5d:81:77:56:2a:a4:7f:ee:35:d1:e2:c4:e1: 91:40:00:5b:17:05:ea:06:21:42:e4:43:be:93:51: 55:ac:d9:3b:70:d4:0b:9f:2e:ca:54:a7:83:5c:20: 55:67:18:3c:2a:1d:38:e5:07:cc:c9:d2:6e:39:8c: 6e:fc:05:3e:fc:91:04:0f:d5:38:ec:4d:d4:04:5b: e6:b6:47:13:af:ad:b9:a8:69:b2:d9:9a:49:1c:d8: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:65:98:E1:E8:50:DA:DB:5E:67:A1:83:6E:C4:C5:19:24:1E:0D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:20:83:fc:83:b3:41:fc:c7:aa:a5:85:3f:82:a5:69:a8:84: 93:6b:5e:c0:dc:4b:f2:cc:8e:a5:0c:79:f6:25:a6:1d:9a:05: f4:c3:2d:8b:7c:52:a1:71:21:2d:03:eb:b1:e0:a2:9b:7c:0c: 1e:c7:26:89:8b:fc:90:23:94:22:89:b9:5d:b2:e4:a5:c0:08: 2d:0b:25:d3:37:d1:b6:ba:4d:83:2f:25:1c:32:67:bb:9b:e8: 2a:fa:f5:de:9a:c2:64:35:b4:88:6e:75:0c:3a:5e:c6:bd:7d: 51:aa:71:79:73:97:35:04:c3:c8:b6:20:19:62:41:66:f5:58: a9:c1:0b:ca:86:ed:a7:52:b4:0a:ad:5f:7c:42:85:32:84:5f: 82:f4:77:69:fb:86:99:ea:48:cb:3f:f6:4a:9e:b6:20:7a:93: 95:cb:54:4b:e9:d5:25:89:0c:d1:31:e8:7b:d7:9f:50:81:94: 83:9b:3f:ef:40:81:55:76:af:d7:45:68:b7:90:be:ef:32:d5: 1b:6f:d1:3e:f3:a2:1e:07:95:c9:81:a1:19:22:bd:1a:de:ae: fd:d7:8c:47:0d:22:7b:09:3d:d9:38:a3:a2:53:e4:6a:93:88: 6e:7a:aa:d3:47:aa:03:09:c6:40:65:20:0d:ba:1e:98:ed:56: b0:22:4e:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9MROaFptXtO0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk M2EwZGY5OTYtOTVhOC00YjA3LTkxNTQtNzlhNjMxNTE1NThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMSMgvwlhXauxvQKLv2Wk3nehQHSWwlJ56Rj Dz/ZIwosiL9XTdWRNiP1XMdYqpJEl5hTm99C2bod+ns5IOKH9eEWN1uaCJZgk0hm C/PzY1+kuvIZMAMqbQpnSaY7C0HpbcRud3BawJJav3o3ES944daZliJO8nRP3wDy jDJ5ZcTq8XDSR89jiqlu748NTTR7+aVaD7tqH0YFTb2mgwOQAOlkYGfYdF2Bd1Yq pH/uNdHixOGRQABbFwXqBiFC5EO+k1FVrNk7cNQLny7KVKeDXCBVZxg8Kh045QfM ydJuOYxu/AU+/JEED9U47E3UBFvmtkcTr625qGmy2ZpJHNgC/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDhlmOHoUNrbXmehg27ExRkkHg2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGM3NjkwZjctYzAyMS0z OTQwLTg3YjctMGUyY2M3YzZlOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0gg/yDs0H8x6qlhT+CpWmohJNrXsDcS/LMjqUMefYlph2aBfTD LYt8UqFxIS0D67Hgopt8DB7HJomL/JAjlCKJuV2y5KXACC0LJdM30ba6TYMvJRwy Z7ub6Cr69d6awmQ1tIhudQw6Xsa9fVGqcXlzlzUEw8i2IBliQWb1WKnBC8qG7adS tAqtX3xChTKEX4L0d2n7hpnqSMs/9kqetiB6k5XLVEvp1SWJDNEx6HvXn1CBlIOb P+9AgVV2r9dFaLeQvu8y1Rtv0T7zoh4HlcmBoRkivRrerv3XjEcNInsJPdk4o6JT 5GqTiG56qtNHqgMJxkBlIA26HpjtVrAiTg0= -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:54 2025 by rpki-client