$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa File: 23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa (raw, json) Hash identifier: USxjZlwpFurpq7LtuoRJyJHuXY+5DSIl3N6niNOMz9M= Subject key identifier: C3:44:35:4B:EC:83:02:4D:62:9C:07:BF:D6:98:95:4B:0F:DF:BB:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D00A8E1FCAAA307472C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396596 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:0a:8e:1f:ca:aa:30:74:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=a10dbf0c-7811-4b98-8c0b-c5f0b3f66c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:bf:b7:80:7e:a9:f5:4e:cf:4e:6b:9f:1d: d0:cb:85:c8:bc:b1:6a:86:6a:16:d0:00:93:dc:4e: 02:25:80:71:71:80:bb:b6:a7:4f:54:0b:96:18:bd: f6:de:27:cb:bb:8f:d6:f8:7a:09:d8:35:d9:b9:41: dd:5c:7b:47:7f:2a:28:b8:30:fa:28:67:ad:f6:52: 86:ad:56:a1:2b:f2:f7:ad:d4:e8:a3:61:64:e3:d3: d5:50:08:f3:cc:d2:8e:9b:59:8a:10:55:fe:22:33: a3:1e:e4:8b:01:72:d2:6d:06:ac:0e:0b:20:5f:a8: 4e:15:ee:95:7e:1b:85:fa:6e:7e:3e:77:9c:6f:57: 8b:df:90:73:b3:e5:76:b1:73:ac:0f:3d:3d:8f:a1: 99:3a:f0:24:27:ef:3b:b3:7d:e4:ed:0e:83:37:a0: d9:36:9c:01:42:e7:20:24:84:19:32:39:d4:29:67: de:60:42:59:70:8e:43:5f:d6:f3:ff:35:a7:f0:07: 50:b7:9e:90:ec:d2:e7:0f:8a:03:b7:93:e3:58:47: c7:07:df:52:c9:b9:68:1d:71:7b:1c:70:b0:46:a3: 14:1e:67:91:a9:78:97:a7:c6:c9:a0:54:ac:ed:88: de:38:bc:f3:34:2b:92:5c:c4:36:44:a7:4c:f6:8f: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:44:35:4B:EC:83:02:4D:62:9C:07:BF:D6:98:95:4B:0F:DF:BB:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f6:dd:13:e1:66:f3:ce:57:81:38:8b:66:24:02:10:81:c5: 61:f2:d1:4c:f6:c6:4c:f3:6b:b7:9b:36:77:4d:12:71:89:45: 9d:99:8d:d4:ad:6d:32:23:26:77:4b:02:c0:0c:16:f5:9e:5e: aa:3b:ec:9e:90:e7:bb:32:86:fe:81:b8:4b:19:8e:1a:59:e0: 81:1f:ab:5f:a8:be:b9:1c:a0:4e:cb:b5:1e:95:79:62:45:36: 26:a7:9b:5e:38:2f:b6:1f:17:55:20:e4:03:47:c1:84:99:68: fa:5f:26:73:71:bd:4e:02:4f:55:43:e5:c8:99:89:93:40:19: 9a:e4:6c:32:e3:57:1b:0b:27:83:2e:5c:b6:ce:27:bf:7e:3c: 70:66:d2:d4:bf:96:70:9d:22:95:66:ba:d7:ca:d2:04:98:a8: ea:5c:c1:84:ee:3f:1f:26:b4:0c:0c:31:00:0a:41:7f:dd:f5: 52:b1:78:88:6f:47:6a:f4:d2:d7:8b:45:bf:de:79:44:f6:a7: 30:1d:61:1c:a8:54:30:94:6b:50:a4:7d:6b:d8:27:ac:48:9f: 76:16:ed:55:d0:de:d3:54:39:47:00:52:3f:9b:20:40:0a:b6: 64:55:41:6d:eb:d8:96:df:78:95:7e:a5:6d:9d:bd:4a:71:a1: e8:16:2d:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9AKjh/KqjB0csAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk YTEwZGJmMGMtNzgxMS00Yjk4LThjMGItYzVmMGIzZjY2YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN2/t4B+qfVOz05rnx3Qy4XIvLFqhmoW0ACT 3E4CJYBxcYC7tqdPVAuWGL323ifLu4/W+HoJ2DXZuUHdXHtHfyoouDD6KGet9lKG rVahK/L3rdToo2Fk49PVUAjzzNKOm1mKEFX+IjOjHuSLAXLSbQasDgsgX6hOFe6V fhuF+m5+Pnecb1eL35Bzs+V2sXOsDz09j6GZOvAkJ+87s33k7Q6DN6DZNpwBQucg JIQZMjnUKWfeYEJZcI5DX9bz/zWn8AdQt56Q7NLnD4oDt5PjWEfHB99SybloHXF7 HHCwRqMUHmeRqXiXp8bJoFSs7YjeOLzzNCuSXMQ2RKdM9o81fwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNENUvsgwJNYpwHv9aYlUsP37sYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNiNmZmMjItNmNjMC0z MDhiLWFjMmQtZWJjMTk0ZjYxOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHn23RPhZvPOV4E4i2YkAhCBxWHy0Uz2xkzza7ebNndNEnGJRZ2Z jdStbTIjJndLAsAMFvWeXqo77J6Q57syhv6BuEsZjhpZ4IEfq1+ovrkcoE7LtR6V eWJFNianm144L7YfF1Ug5ANHwYSZaPpfJnNxvU4CT1VD5ciZiZNAGZrkbDLjVxsL J4MuXLbOJ79+PHBm0tS/lnCdIpVmutfK0gSYqOpcwYTuPx8mtAwMMQAKQX/d9VKx eIhvR2r00teLRb/eeUT2pzAdYRyoVDCUa1CkfWvYJ6xIn3YW7VXQ3tNUOUcAUj+b IEAKtmRVQW3r2JbfeJV+pW2dvUpxoegWLSY= -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:21 2025 by rpki-client