$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26e12fd5-d986-31a5-a7e8-62abf26653e3.roa File: 26e12fd5-d986-31a5-a7e8-62abf26653e3.roa (raw, json) Hash identifier: 8gytjG21hf+PO3USZ31Q+BZBV3+x1xwQbWKfjarUqLY= Subject key identifier: 46:C1:91:E0:93:09:4B:6A:43:26:32:AB:ED:8E:22:71:81:FA:47:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D45791D15FDC3BBBB400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26e12fd5-d986-31a5-a7e8-62abf26653e3.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 36622 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:57:91:d1:5f:dc:3b:bb:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=b0e70288-e15c-4a0b-8566-e1ec8a9d768d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:b7:e8:95:ee:8e:77:77:26:0a:32:75:41: 7d:cc:34:d4:95:a9:e8:97:99:4c:ce:9f:0b:ec:14: 9c:a8:fd:4f:24:2c:e2:bf:71:a3:bb:59:cc:9e:75: d3:99:23:69:85:2f:9d:ea:32:ef:ce:4b:0a:5e:b7: 46:65:e4:cb:e3:ac:a7:d9:29:34:b0:25:43:f9:99: fa:70:81:91:e3:12:a5:46:8a:1c:33:f9:bf:25:6d: 5f:7c:3b:cf:07:7a:a9:84:4b:69:af:30:1b:5f:3c: 8c:fd:e1:40:de:bd:2e:48:91:ed:3d:d4:67:8b:13: 40:ad:1f:2a:1d:7a:e9:7f:c2:70:43:88:c3:00:80: bd:68:b5:90:fe:03:1c:a3:5e:44:d1:9d:9a:44:57: 41:9d:59:a7:74:09:25:67:e6:a6:1e:2a:d3:75:bf: 66:cc:03:84:1a:77:22:43:2e:4a:ae:60:e4:14:f7: 98:8e:d8:fc:2e:0a:80:49:04:b9:c1:56:f9:93:ef: fc:87:3d:fa:46:47:67:a5:07:ff:6b:91:0c:18:83: c2:83:01:08:42:6b:56:07:9e:32:b9:79:f7:63:dd: 10:cb:a0:54:f4:97:84:5b:12:a1:0a:56:f9:c8:10: 3c:9e:9c:e6:64:15:a2:e5:8d:4d:39:8c:ef:4b:f8: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C1:91:E0:93:09:4B:6A:43:26:32:AB:ED:8E:22:71:81:FA:47:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26e12fd5-d986-31a5-a7e8-62abf26653e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f4:96:2d:bb:73:d0:8c:5c:f4:f8:1c:d2:40:64:74:04:58: 54:48:e3:0e:82:e9:c6:d2:c3:6d:23:a2:f6:98:3e:9e:47:bf: 41:30:37:d5:77:d0:93:7c:61:00:7b:68:b3:12:4b:73:d9:f4: 5a:18:9f:20:28:67:8d:b9:85:e7:85:2d:4d:1b:d3:1c:d8:70: 20:25:cf:6a:22:e1:15:56:e1:10:0a:46:f6:f2:18:c4:da:da: 3d:c8:db:c4:03:ac:2a:df:5d:a3:ec:2e:61:a7:8e:c2:d7:9e: 83:7c:58:da:5b:1c:2a:82:bf:64:5f:ff:30:c1:26:f9:04:f0: ab:02:26:fd:65:1f:c1:30:ac:5e:38:a5:0a:5a:4e:d1:a6:75: 81:9f:97:18:d4:33:9e:38:3b:4f:c0:64:f8:54:8e:2a:74:4b: 7a:62:ce:61:16:7d:6a:69:f1:6c:0e:2a:dc:b3:a4:57:1e:06: 97:e7:c2:6a:f5:20:75:fd:d3:c4:1d:ff:77:2b:a2:66:11:cf: b6:d1:56:d5:24:bd:15:e5:7f:dc:7e:21:45:f9:1d:54:e0:38: 3e:1a:50:76:42:07:2e:26:60:2c:db:c9:44:36:b3:3c:2a:60: 90:e4:6b:35:73:98:d4:fd:9e:66:95:a0:ff:a8:36:10:45:33: bd:58:d2:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9RXkdFf3Du7tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk YjBlNzAyODgtZTE1Yy00YTBiLTg1NjYtZTFlYzhhOWQ3NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztu36JXujnd3JgoydUF9zDTUlanol5lMzp8L 7BScqP1PJCziv3Gju1nMnnXTmSNphS+d6jLvzksKXrdGZeTL46yn2Sk0sCVD+Zn6 cIGR4xKlRoocM/m/JW1ffDvPB3qphEtprzAbXzyM/eFA3r0uSJHtPdRnixNArR8q HXrpf8JwQ4jDAIC9aLWQ/gMco15E0Z2aRFdBnVmndAklZ+amHirTdb9mzAOEGnci Qy5KrmDkFPeYjtj8LgqASQS5wVb5k+/8hz36RkdnpQf/a5EMGIPCgwEIQmtWB54y uXn3Y90Qy6BU9JeEWxKhClb5yBA8npzmZBWi5Y1NOYzvS/gi5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEbBkeCTCUtqQyYyq+2OInGB+kcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjZlMTJmZDUtZDk4Ni0z MWE1LWE3ZTgtNjJhYmYyNjY1M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGX0li27c9CMXPT4HNJAZHQEWFRI4w6C6cbSw20jovaYPp5Hv0Ew N9V30JN8YQB7aLMSS3PZ9FoYnyAoZ425heeFLU0b0xzYcCAlz2oi4RVW4RAKRvby GMTa2j3I28QDrCrfXaPsLmGnjsLXnoN8WNpbHCqCv2Rf/zDBJvkE8KsCJv1lH8Ew rF44pQpaTtGmdYGflxjUM544O0/AZPhUjip0S3pizmEWfWpp8WwOKtyzpFceBpfn wmr1IHX908Qd/3cromYRz7bRVtUkvRXlf9x+IUX5HVTgOD4aUHZCBy4mYCzbyUQ2 szwqYJDkazVzmNT9nmaVoP+oNhBFM71Y0sY= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:49 2025 by rpki-client