$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa File: 26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa (raw, json) Hash identifier: 5/BTP9aRNqU+Na1xR6tJ+DWs3b37QwvqthbGGQCrM4w= Subject key identifier: 72:F1:85:44:7F:69:AD:C5:3E:26:D8:25:D7:9A:2B:83:C8:6B:A4:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D0B665556098E33CC6E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396580 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:b6:65:55:60:98:e3:3c:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=0d080024-5608-43ca-bcd8-ec2189eea7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:fd:9f:13:fc:9e:de:da:d6:19:79:f0:78: 19:82:84:cc:42:90:d8:1c:cb:af:cd:af:81:23:9d: 14:d1:c2:7e:6e:6c:8e:bd:54:2e:f0:cc:d5:e7:44: a7:48:50:9b:24:c0:2f:9e:46:c6:b7:57:64:f0:7b: 61:79:7c:12:45:37:6e:ab:0b:69:0e:cf:e8:e3:f2: 73:05:4a:e3:52:6c:55:9f:ff:8f:34:62:c9:32:29: 3b:16:6b:dc:f0:e2:c7:36:d4:60:bd:13:7f:7e:4a: 3f:b0:70:d1:e4:a0:57:40:ea:31:e5:df:46:9e:22: fc:ab:98:40:3d:cc:8c:ef:1e:2b:91:e4:35:a4:f2: 04:ca:78:36:7c:1d:f1:ed:79:72:e6:7f:b6:40:63: 3a:c9:b1:c2:ff:b6:f2:9a:26:1f:d6:ea:ec:03:76: 5d:0f:15:02:da:ac:e8:78:28:00:cc:0c:2e:94:74: cd:9a:f6:01:e3:bf:7b:90:22:86:b5:04:71:b9:5b: 64:f3:fc:1f:47:9f:4b:0e:c9:c8:2b:ba:ae:33:3a: 39:c2:25:42:00:1d:eb:31:6f:2a:f2:e7:40:df:b5: 7b:99:ac:99:5c:f7:96:8b:e1:b3:39:95:40:89:11: 70:4a:46:73:01:f0:49:3e:bd:90:b4:2f:a4:73:c7: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F1:85:44:7F:69:AD:C5:3E:26:D8:25:D7:9A:2B:83:C8:6B:A4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:30:7d:1e:71:22:57:07:0c:b8:3e:79:47:5d:7a:d2:2c:43: 5c:ae:11:2c:b0:97:69:fb:61:81:34:43:31:20:39:03:04:73: d5:a3:68:3d:4a:4d:63:5d:3f:a6:19:ce:84:d8:b4:50:bc:0c: a3:80:56:22:e1:58:eb:c9:bd:5d:da:61:65:07:45:af:c9:bd: 9c:58:3f:87:c9:b5:75:74:df:df:04:c6:46:98:4c:af:cb:30: de:66:8a:e6:4d:1b:26:38:29:9e:5e:e8:57:e1:2b:74:81:8e: cb:d8:00:45:43:41:4f:6b:56:54:0a:fd:ee:74:43:08:03:5f: 76:02:89:ce:d1:95:5e:16:eb:8b:d2:7f:c7:2e:ff:0d:fb:9c: 41:0e:58:54:cc:d5:d1:95:12:41:91:60:96:f9:39:b2:75:9b: ca:09:3c:7c:48:d7:dd:bb:cc:5e:1a:f7:d7:b5:15:e9:67:17: b1:16:13:4f:81:29:42:66:3e:67:7d:34:b4:85:64:65:f5:00: 6a:1c:cb:89:69:92:d4:04:dd:3d:17:19:c9:c0:c2:c5:b8:dc: 2c:f8:2f:e5:2f:2a:75:a2:ec:49:f4:f6:af:1a:4c:2c:16:41: d3:76:ad:f8:37:ea:46:df:96:cc:29:55:55:a7:c2:40:42:36: 74:a8:c7:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9C2ZVVgmOM8xuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk MGQwODAwMjQtNTYwOC00M2NhLWJjZDgtZWMyMTg5ZWVhN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfr9nxP8nt7a1hl58HgZgoTMQpDYHMuvza+B I50U0cJ+bmyOvVQu8MzV50SnSFCbJMAvnkbGt1dk8HtheXwSRTduqwtpDs/o4/Jz BUrjUmxVn/+PNGLJMik7Fmvc8OLHNtRgvRN/fko/sHDR5KBXQOox5d9GniL8q5hA PcyM7x4rkeQ1pPIEyng2fB3x7Xly5n+2QGM6ybHC/7bymiYf1ursA3ZdDxUC2qzo eCgAzAwulHTNmvYB4797kCKGtQRxuVtk8/wfR59LDsnIK7quMzo5wiVCAB3rMW8q 8udA37V7mayZXPeWi+GzOZVAiRFwSkZzAfBJPr2QtC+kc8e20wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLxhUR/aa3FPibYJdeaK4PIa6TlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjYwOThiOGMtY2FiYS0z NmNlLTlmMmUtN2ZhZmExZjRiMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFowfR5xIlcHDLg+eUddetIsQ1yuESywl2n7YYE0QzEgOQMEc9Wj aD1KTWNdP6YZzoTYtFC8DKOAViLhWOvJvV3aYWUHRa/JvZxYP4fJtXV0398ExkaY TK/LMN5miuZNGyY4KZ5e6FfhK3SBjsvYAEVDQU9rVlQK/e50QwgDX3YCic7RlV4W 64vSf8cu/w37nEEOWFTM1dGVEkGRYJb5ObJ1m8oJPHxI1927zF4a99e1FelnF7EW E0+BKUJmPmd9NLSFZGX1AGocy4lpktQE3T0XGcnAwsW43Cz4L+UvKnWi7En09q8a TCwWQdN2rfg36kbflswpVVWnwkBCNnSox2U= -----END CERTIFICATE-----Generated at Sat Jun 7 04:12:36 2025 by rpki-client