$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa File: 2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa (raw, json) Hash identifier: AgCQx9ZleZM6ii+JFvwrPrLj5pvZPNYxhqBXpxUa4i0= Subject key identifier: 08:4C:6D:93:A9:77:1C:CE:E3:97:2F:85:77:56:C2:5D:E9:16:0A:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D1A011CB2B5F8BA65700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396565 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:a0:11:cb:2b:5f:8b:a6:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=093baa2f-62c9-46e0-bfe8-60c1f49b90a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:d5:26:da:ae:f4:ff:eb:be:f7:8a:04:3d: 0f:b7:ba:16:3b:62:31:3c:02:d6:4e:41:cd:44:3f: ac:92:18:5f:d5:71:5f:a0:2f:59:f3:17:6d:0a:51: 19:0f:44:57:51:07:ca:f5:65:e0:43:d5:f3:6f:54: 3b:35:fa:a0:0d:c4:2e:0f:a4:d0:b3:14:5f:18:17: fe:09:3f:89:68:a6:58:f3:88:f0:82:c8:d4:47:7f: 1c:c8:67:d6:66:52:98:40:a1:c7:58:a7:7f:73:8f: e6:61:45:ea:68:48:f8:cf:04:4b:f3:26:a6:13:a6: d4:5b:5a:62:bc:01:56:9f:8c:ad:17:bc:b0:ba:df: 68:99:5c:dc:56:a8:06:37:aa:c1:51:27:cd:c2:c3: c2:1e:cb:0c:a0:9d:a6:68:37:d6:bd:aa:b8:2d:77: 3c:d8:75:cc:86:d3:68:a0:b6:98:56:5f:17:0b:79: 39:f0:99:eb:ae:d6:39:c9:7b:90:d5:5d:9b:57:b2: 65:ea:e0:0e:5f:31:a7:22:cd:85:ff:73:48:d8:ca: 21:ee:46:0c:38:87:4f:46:4f:15:d8:7b:d1:fd:64: 49:6c:2e:57:cd:ad:18:e9:c3:2e:a1:d8:26:9f:76: fb:7b:d2:ff:38:07:56:27:47:69:d4:d8:f6:41:98: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4C:6D:93:A9:77:1C:CE:E3:97:2F:85:77:56:C2:5D:E9:16:0A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d573bf3-7493-3682-b82e-fc0ae9f077a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:66:29:b2:e9:4b:0f:75:5d:14:0b:6e:5e:c8:c7:16:4a:f8: 96:5d:82:02:fc:82:e1:de:28:b8:b7:f4:f7:72:50:26:cf:f8: 45:7c:88:6e:cd:37:53:17:aa:77:fa:24:19:40:53:39:c8:05: 92:97:9e:2f:8e:b7:37:f1:a7:25:46:b6:95:fb:b6:3b:7a:fc: 7f:b7:cf:c4:2f:05:50:b3:96:64:af:46:bf:b9:e5:84:61:a9: 6d:5d:35:49:33:91:8b:eb:e2:d3:c8:ec:4a:82:32:8a:ec:a4: 0d:92:70:6d:72:e5:b4:c2:33:72:3e:92:91:2f:b3:99:c8:fd: a5:2f:b9:9d:60:80:73:e9:9b:1f:ba:41:f9:c5:2c:a4:4d:5d: 83:34:76:69:ef:a9:5e:10:bd:f0:f8:0a:11:18:e7:41:2b:5a: c3:dd:82:99:65:93:dd:69:cb:49:1b:05:53:91:97:f4:09:1a: 19:49:b8:df:09:ea:16:6b:df:ed:1c:fe:da:86:15:75:ca:19: 31:2c:0d:a0:8f:f4:27:43:f2:e5:b8:b4:0b:2e:a5:2c:a4:c4: ed:f4:2d:b2:06:71:d6:07:f1:b4:e4:b5:1e:68:1f:00:eb:fa: ce:4c:d4:ca:f4:e1:14:36:85:b0:06:e0:94:75:9f:60:d2:3b: 4b:6e:be:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9GgEcsrX4umVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk MDkzYmFhMmYtNjJjOS00NmUwLWJmZTgtNjBjMWY0OWI5MGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN7VJtqu9P/rvveKBD0Pt7oWO2IxPALWTkHN RD+skhhf1XFfoC9Z8xdtClEZD0RXUQfK9WXgQ9Xzb1Q7NfqgDcQuD6TQsxRfGBf+ CT+JaKZY84jwgsjUR38cyGfWZlKYQKHHWKd/c4/mYUXqaEj4zwRL8yamE6bUW1pi vAFWn4ytF7ywut9omVzcVqgGN6rBUSfNwsPCHssMoJ2maDfWvaq4LXc82HXMhtNo oLaYVl8XC3k58JnrrtY5yXuQ1V2bV7Jl6uAOXzGnIs2F/3NI2Moh7kYMOIdPRk8V 2HvR/WRJbC5Xza0Y6cMuodgmn3b7e9L/OAdWJ0dp1Nj2QZh5LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhMbZOpdxzO45cvhXdWwl3pFgqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQ1NzNiZjMtNzQ5My0z NjgyLWI4MmUtZmMwYWU5ZjA3N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9mKbLpSw91XRQLbl7IxxZK+JZdggL8guHeKLi39PdyUCbP+EV8 iG7NN1MXqnf6JBlAUznIBZKXni+OtzfxpyVGtpX7tjt6/H+3z8QvBVCzlmSvRr+5 5YRhqW1dNUkzkYvr4tPI7EqCMorspA2ScG1y5bTCM3I+kpEvs5nI/aUvuZ1ggHPp mx+6QfnFLKRNXYM0dmnvqV4QvfD4ChEY50ErWsPdgpllk91py0kbBVORl/QJGhlJ uN8J6hZr3+0c/tqGFXXKGTEsDaCP9CdD8uW4tAsupSykxO30LbIGcdYH8bTktR5o HwDr+s5M1Mr04RQ2hbAG4JR1n2DSO0tuvsg= -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:08 2025 by rpki-client