$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19949a46-52a7-38f5-bbe4-73534a656309.roa File: 19949a46-52a7-38f5-bbe4-73534a656309.roa (raw, json) Hash identifier: 4mxjluA82RQW5q1SQ9OLZYIshmTqXdNDEAEj2gsy9dw= Subject key identifier: DA:67:66:EC:83:5D:9D:1A:B6:E3:01:77:44:A8:2D:54:0F:2A:D3:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D5D286C48C771EB98100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19949a46-52a7-38f5-bbe4-73534a656309.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396579 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:d2:86:c4:8c:77:1e:b9:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=216b71b9-50de-4794-9984-cb1ef122516a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:9a:ba:dc:03:05:78:e7:9b:11:59:15:d7: cd:e1:32:5d:62:8f:97:3f:8c:a9:61:bb:0c:fe:24: ff:ab:79:2f:e4:7e:fb:eb:52:76:4f:9b:c6:64:65: 9f:7e:52:1f:8c:cc:6f:dd:ca:1d:c2:8c:9b:be:55: e2:71:ce:d2:1a:4d:eb:fb:9a:a4:12:71:57:b9:61: 47:09:46:f1:da:84:77:9e:4b:2b:0f:f5:69:8b:76: 83:87:95:7d:15:d7:38:87:49:84:70:c6:df:72:9d: 65:51:f9:b3:60:02:5e:d5:65:bf:19:73:16:af:66: a7:6b:9c:1c:c9:48:49:19:87:a1:f0:22:a2:f5:27: b0:b7:41:31:56:d0:24:76:42:2c:31:88:dd:ef:ed: 39:f8:12:a2:bb:65:c8:4c:46:ff:49:19:09:03:c5: 81:89:70:b9:f4:57:95:d5:6d:41:b3:4b:48:8e:1a: 06:51:d2:66:ce:93:45:9b:d0:ec:9d:a2:82:49:d2: dd:c1:23:0a:ba:99:13:58:f0:d2:7d:55:3b:fb:44: c9:c6:a2:ab:ca:81:0e:9b:86:7c:44:71:c6:3b:75: 52:54:2a:2b:37:d0:62:6e:6f:d1:8f:c3:5d:3f:35: eb:bd:07:28:cf:40:bf:40:f6:47:f2:e5:aa:3c:1e: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:67:66:EC:83:5D:9D:1A:B6:E3:01:77:44:A8:2D:54:0F:2A:D3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19949a46-52a7-38f5-bbe4-73534a656309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:44:3a:28:59:14:f1:d8:c9:9d:85:fe:8b:d9:ef:34:5e:9f: 6f:65:24:97:c9:0e:4a:ee:0b:fa:4f:1e:c9:5c:e9:d3:8e:2f: 34:62:64:5b:9f:20:3e:41:42:8a:dc:9b:eb:ec:29:e0:90:8b: b9:43:7f:ce:bd:51:25:8e:02:ed:9f:72:aa:45:66:45:11:76: bb:05:35:8e:68:21:5a:f5:4f:47:17:ae:ce:f3:f3:d3:d2:57: 8f:50:31:18:d0:b8:98:3b:3d:9e:da:1e:20:75:a2:0d:66:18: 0e:e8:aa:e0:1b:0e:74:5f:4f:31:ba:4a:a7:8a:fd:86:2e:f6: 14:8d:4a:b8:4d:07:54:1b:a1:b5:2b:e4:d8:1e:ce:26:09:94: f9:96:d2:05:6c:81:bb:7c:31:af:35:0b:b6:b8:73:71:5d:44: ee:18:93:89:43:3d:dc:1e:36:09:a7:84:c0:03:ce:87:b0:5d: 92:79:20:57:09:63:37:07:32:82:4d:5a:fe:2d:02:88:10:51: 26:35:90:5c:c3:13:64:c1:ed:40:43:89:40:ce:ec:a4:a4:a2: 4b:74:6a:1e:5f:8e:9a:eb:35:69:1b:1a:fc:32:2b:9a:a9:71: 6d:20:c2:42:28:58:4d:7f:7f:8a:08:65:fe:c8:20:17:0b:47: 02:89:2a:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9XShsSMdx65gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk MjE2YjcxYjktNTBkZS00Nzk0LTk5ODQtY2IxZWYxMjI1MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAKautwDBXjnmxFZFdfN4TJdYo+XP4ypYbsM /iT/q3kv5H7761J2T5vGZGWfflIfjMxv3codwoybvlXicc7SGk3r+5qkEnFXuWFH CUbx2oR3nksrD/Vpi3aDh5V9Fdc4h0mEcMbfcp1lUfmzYAJe1WW/GXMWr2ana5wc yUhJGYeh8CKi9Sewt0ExVtAkdkIsMYjd7+05+BKiu2XITEb/SRkJA8WBiXC59FeV 1W1Bs0tIjhoGUdJmzpNFm9DsnaKCSdLdwSMKupkTWPDSfVU7+0TJxqKryoEOm4Z8 RHHGO3VSVCorN9Bibm/Rj8NdPzXrvQcoz0C/QPZH8uWqPB4mjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNpnZuyDXZ0atuMBd0SoLVQPKtMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTk5NDlhNDYtNTJhNy0z OGY1LWJiZTQtNzM1MzRhNjU2MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVEOihZFPHYyZ2F/ovZ7zRen29lJJfJDkruC/pPHslc6dOOLzRi ZFufID5BQorcm+vsKeCQi7lDf869USWOAu2fcqpFZkURdrsFNY5oIVr1T0cXrs7z 89PSV49QMRjQuJg7PZ7aHiB1og1mGA7oquAbDnRfTzG6SqeK/YYu9hSNSrhNB1Qb obUr5NgeziYJlPmW0gVsgbt8Ma81C7a4c3FdRO4Yk4lDPdweNgmnhMADzoewXZJ5 IFcJYzcHMoJNWv4tAogQUSY1kFzDE2TB7UBDiUDO7KSkokt0ah5fjprrNWkbGvwy K5qpcW0gwkIoWE1/f4oIZf7IIBcLRwKJKhQ= -----END CERTIFICATE-----Generated at Fri Jun 6 19:36:02 2025 by rpki-client