$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ca137e6-3557-3555-973a-862573fd4652.roa File: 0ca137e6-3557-3555-973a-862573fd4652.roa (raw, json) Hash identifier: lS3wNTwiMVb8Urp1Fr5c7fvRND+BLI3o2c3rj9XlLzM= Subject key identifier: A5:46:08:6F:EA:0F:29:CA:F2:76:6B:C7:53:A2:E4:79:19:CF:60:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D18241E6C6CA24BBBC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ca137e6-3557-3555-973a-862573fd4652.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 397203 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:82:41:e6:c6:ca:24:bb:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=0fa4ec41-c200-4319-bde4-8c2ead0ed74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:ff:3f:56:e5:bd:23:4f:79:32:26:6c:7f: 37:95:75:36:f6:37:3b:22:c2:c8:0b:0b:f4:7f:4e: d2:44:d0:2b:ac:bd:55:5c:00:50:50:24:a0:b9:75: 1a:22:3d:35:70:c4:15:d2:66:c1:8a:fb:53:94:a1: 45:b6:72:84:b1:a3:d5:23:18:7c:bc:8a:b6:12:48: f9:3c:42:bd:88:04:cd:50:b0:9c:56:0f:12:1f:5c: 97:9d:dc:4c:13:cf:f8:5c:1f:f1:19:ca:72:ce:b6: 00:69:ab:40:08:c3:64:39:81:92:b1:03:af:b6:5d: 64:b6:dd:1c:06:01:20:47:e2:f7:59:58:3c:51:23: 28:e2:8d:4b:2b:87:08:04:a2:27:a5:86:49:ec:80: 42:fd:fd:a9:3b:12:67:cf:91:94:60:00:3d:32:d3: 2d:c0:1f:fe:df:29:a5:d9:67:af:fd:cb:62:4f:8c: 1e:21:91:89:b3:48:9c:61:53:d5:19:8a:52:37:4a: 5a:de:2e:d3:75:86:95:3c:f7:f9:ab:7e:26:d2:5c: d3:4a:d8:bd:f2:5b:93:6d:42:03:07:07:54:13:f4: 2d:e5:7b:6c:40:44:16:29:f1:68:be:6c:f6:3c:35: df:05:b8:0a:09:f1:b5:94:92:15:74:64:bf:46:e9: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:46:08:6F:EA:0F:29:CA:F2:76:6B:C7:53:A2:E4:79:19:CF:60:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ca137e6-3557-3555-973a-862573fd4652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c7:be:d1:d4:b2:fb:33:11:fc:d4:97:d2:40:df:7b:a0:31: 67:44:04:e6:f0:9c:da:0d:27:b6:9f:36:f8:f0:ae:3a:0d:ea: 95:c6:42:dc:d9:35:b4:49:78:33:02:e9:64:dc:67:a4:44:3c: 02:d9:7b:b5:56:13:70:95:cb:78:8c:10:d1:c0:0c:48:87:c3: d6:5e:60:54:2c:01:a0:17:ae:af:7a:53:e6:b4:49:05:dc:0d: 86:4a:1c:0c:02:d1:05:39:4c:5a:1b:4c:6a:8d:a6:f1:7d:b8: d9:3f:41:98:7b:4e:6e:91:ee:76:2d:90:5d:b2:d2:b9:61:a6: f8:19:99:e7:76:d5:b6:1f:fd:78:00:a6:0e:5b:0c:e8:92:95: a0:f7:5e:18:07:67:55:09:04:bf:cb:06:4d:f6:08:df:bc:25: 43:d9:c5:b5:32:c4:c2:35:34:97:cc:67:b0:36:e7:21:bf:7e: 35:69:4e:b4:b6:c8:a0:dc:01:d1:91:8c:81:82:1d:ca:2b:24: 11:93:27:e5:38:0a:73:4a:3f:bb:33:ac:be:40:29:db:e9:99: 9e:f8:54:0c:77:7e:60:ae:3e:d5:21:79:5f:f0:57:01:98:8a: d1:60:8d:4f:26:d2:4a:2f:af:57:82:ac:aa:d1:b4:c8:00:59: 59:a0:ed:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9GCQebGyiS7vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk MGZhNGVjNDEtYzIwMC00MzE5LWJkZTQtOGMyZWFkMGVkNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCb/P1blvSNPeTImbH83lXU29jc7IsLICwv0 f07SRNArrL1VXABQUCSguXUaIj01cMQV0mbBivtTlKFFtnKEsaPVIxh8vIq2Ekj5 PEK9iATNULCcVg8SH1yXndxME8/4XB/xGcpyzrYAaatACMNkOYGSsQOvtl1ktt0c BgEgR+L3WVg8USMo4o1LK4cIBKInpYZJ7IBC/f2pOxJnz5GUYAA9MtMtwB/+3yml 2Wev/ctiT4weIZGJs0icYVPVGYpSN0pa3i7TdYaVPPf5q34m0lzTSti98luTbUID BwdUE/Qt5XtsQEQWKfFovmz2PDXfBbgKCfG1lJIVdGS/Ruk7xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVGCG/qDynK8nZrx1Oi5HkZz2BaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNhMTM3ZTYtMzU1Ny0z NTU1LTk3M2EtODYyNTczZmQ0NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvHvtHUsvszEfzUl9JA33ugMWdEBObwnNoNJ7afNvjwrjoN6pXG QtzZNbRJeDMC6WTcZ6REPALZe7VWE3CVy3iMENHADEiHw9ZeYFQsAaAXrq96U+a0 SQXcDYZKHAwC0QU5TFobTGqNpvF9uNk/QZh7Tm6R7nYtkF2y0rlhpvgZmed21bYf /XgApg5bDOiSlaD3XhgHZ1UJBL/LBk32CN+8JUPZxbUyxMI1NJfMZ7A25yG/fjVp TrS2yKDcAdGRjIGCHcorJBGTJ+U4CnNKP7szrL5AKdvpmZ74VAx3fmCuPtUheV/w VwGYitFgjU8m0kovr1eCrKrRtMgAWVmg7YM= -----END CERTIFICATE-----Generated at Sun Jun 8 13:37:29 2025 by rpki-client