$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d70697a-6060-3614-b2d6-42e00cc77d13.roa File: 1d70697a-6060-3614-b2d6-42e00cc77d13.roa (raw, json) Hash identifier: 0ufYmfkBNK1MIIG5gpRePyUZUBsnlXOYY2hmNGIPoWg= Subject key identifier: 88:D0:F6:97:1B:00:93:8D:88:2E:BB:45:87:64:5C:C9:AA:47:06:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D4A5183C6B7103893500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d70697a-6060-3614-b2d6-42e00cc77d13.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 397197 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:a5:18:3c:6b:71:03:89:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=f9fa21f9-564d-42de-aee9-7618c53f5bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:1c:f7:5f:df:bc:72:5b:85:fa:f8:0f:d4: db:e1:db:d1:63:3e:bb:1f:32:4a:b8:1f:dc:dd:5c: 89:17:04:b6:47:a4:1a:b3:f0:75:09:f9:93:87:b9: cb:86:f3:e9:d8:14:ef:7a:3d:ff:3d:dc:59:a4:e9: 9b:a5:89:92:67:e1:a9:49:68:5f:aa:79:8c:3e:45: 5f:96:7f:2d:00:31:2c:83:c7:bc:bf:7c:8b:3b:00: 07:cb:be:c7:e2:41:67:84:9e:42:5e:78:cd:22:52: b2:c8:1d:33:d9:a2:25:f7:97:b7:c7:96:a1:87:fe: 42:67:fb:2c:33:4e:aa:b1:16:ca:78:ab:e5:03:45: 15:fd:8c:41:55:31:5c:03:89:34:6e:ca:3a:6b:18: a9:1d:ce:8b:29:c9:5d:7e:6f:8c:b5:1e:28:6a:28: cf:5a:59:01:5c:1b:a2:1a:ed:61:d1:a2:0c:14:58: d0:1c:eb:d8:a0:5e:91:94:d8:ae:4f:f2:06:ac:0e: 88:7f:b4:00:0c:e9:b9:b1:af:20:2b:ec:fa:3e:f6: 69:58:5a:b4:31:3e:42:95:e3:c0:1f:b7:87:ca:2a: b5:94:17:40:17:4e:75:27:a6:fa:c4:d8:e1:37:9e: 21:23:4e:96:09:a4:83:f6:8d:db:4f:21:3e:7b:63: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:F6:97:1B:00:93:8D:88:2E:BB:45:87:64:5C:C9:AA:47:06:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d70697a-6060-3614-b2d6-42e00cc77d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d8:11:5b:ca:02:0b:05:82:86:19:4a:ac:c7:18:f8:c4:a8: 58:ef:b8:a7:be:2b:e6:6c:d6:43:f9:15:a8:e5:76:9c:6d:05: d3:8f:d1:c3:2b:43:5b:41:7d:d9:01:d1:04:89:d9:69:f0:6e: fc:79:54:0d:b0:85:24:42:6b:cf:29:79:26:65:da:a8:d2:41: 1a:01:f0:e9:b8:df:6f:b5:e1:69:be:d2:56:3c:54:13:65:c2: ef:1e:a0:d1:3c:27:89:60:ff:45:26:32:ee:bf:c8:09:f6:10: 6c:6b:41:ce:10:77:da:20:e7:6f:0d:b2:50:ea:99:44:7e:0b: 17:df:58:28:45:94:3d:4c:62:bd:bb:9e:48:15:cc:5d:f2:6f: 18:8a:7a:56:86:f7:4e:0f:2b:4e:54:c8:68:6d:e1:76:20:04: 95:91:5e:99:84:7a:d0:07:8d:1e:11:ad:41:6c:a0:2b:b0:de: 89:a9:e8:5b:81:f2:f1:24:5d:ce:4a:23:23:5d:f5:9a:03:ad: f2:71:28:db:30:9c:0e:da:0c:c7:8c:6d:1c:1e:9c:91:3a:f0: dd:99:55:47:e6:eb:76:02:b8:e0:9d:a9:0b:d6:4d:37:fb:6b: c1:88:a8:2a:4f:ab:d1:a2:ac:a1:83:26:2c:a9:fa:a1:5a:34: 98:a2:89:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9SlGDxrcQOJNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk ZjlmYTIxZjktNTY0ZC00MmRlLWFlZTktNzYxOGM1M2Y1YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E4c91/fvHJbhfr4D9Tb4dvRYz67HzJKuB/c 3VyJFwS2R6Qas/B1CfmTh7nLhvPp2BTvej3/PdxZpOmbpYmSZ+GpSWhfqnmMPkVf ln8tADEsg8e8v3yLOwAHy77H4kFnhJ5CXnjNIlKyyB0z2aIl95e3x5ahh/5CZ/ss M06qsRbKeKvlA0UV/YxBVTFcA4k0bso6axipHc6LKcldfm+MtR4oaijPWlkBXBui Gu1h0aIMFFjQHOvYoF6RlNiuT/IGrA6If7QADOm5sa8gK+z6PvZpWFq0MT5ClePA H7eHyiq1lBdAF051J6b6xNjhN54hI06WCaSD9o3bTyE+e2PyZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIjQ9pcbAJONiC67RYdkXMmqRwbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQ3MDY5N2EtNjA2MC0z NjE0LWIyZDYtNDJlMDBjYzc3ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI/YEVvKAgsFgoYZSqzHGPjEqFjvuKe+K+Zs1kP5FajldpxtBdOP 0cMrQ1tBfdkB0QSJ2Wnwbvx5VA2whSRCa88peSZl2qjSQRoB8Om432+14Wm+0lY8 VBNlwu8eoNE8J4lg/0UmMu6/yAn2EGxrQc4Qd9og528NslDqmUR+CxffWChFlD1M Yr27nkgVzF3ybxiKelaG904PK05UyGht4XYgBJWRXpmEetAHjR4RrUFsoCuw3omp 6FuB8vEkXc5KIyNd9ZoDrfJxKNswnA7aDMeMbRwenJE68N2ZVUfm63YCuOCdqQvW TTf7a8GIqCpPq9GirKGDJiyp+qFaNJiiiSU= -----END CERTIFICATE-----Generated at Fri Jun 6 19:31:50 2025 by rpki-client