$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa File: 3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa (raw, json) Hash identifier: rDadrjN7iLZV+gtUrlR6xBzefwd3j/oBMXtN/4OyuXU= Subject key identifier: 8E:65:5D:27:D1:14:FF:5F:13:D8:BF:1B:F4:05:4C:94:80:D5:F4:6F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D6493EEB45EE740D6100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa Signing time: Tue 03 Jun 2025 12:47:23 +0000 ROA not before: Tue 03 Jun 2025 12:47:23 +0000 ROA not after: Mon 01 Sep 2025 12:47:23 +0000 asID: 396561 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d6:49:3e:eb:45:ee:74:0d:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:23 2025 GMT Not After : Sep 1 12:47:23 2025 GMT Subject: CN=ff8ddaf1-31a5-432d-a262-138f3e83b234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:cb:91:8b:9c:dc:db:9e:a3:d8:01:f9:9b: 77:6b:b7:87:8a:97:b3:72:25:24:3d:d1:bc:6a:64: a9:ae:4e:4d:6d:ac:75:75:fd:43:65:a7:cc:62:93: 7d:a1:d8:6a:ee:fd:52:96:47:b2:21:23:23:6f:94: a7:06:d0:0a:3d:36:62:ac:e8:a1:21:a1:d2:97:de: de:2a:40:04:94:44:d6:d4:88:4e:99:53:14:b8:35: bb:f7:92:40:26:1f:6f:bd:cc:ad:9f:38:15:87:af: cc:e2:aa:5d:b8:43:ce:43:af:79:60:31:53:08:e5: fe:5c:78:ea:c9:53:a8:4f:d6:95:ce:ee:3e:3b:52: 3c:d7:8b:c1:91:87:c3:14:d2:a7:14:a6:60:a3:c1: 42:8a:45:76:c6:b1:de:95:94:d7:be:ea:29:6e:5b: 85:15:e7:44:96:74:61:9e:fc:4f:a2:88:e7:46:2e: c4:8c:06:23:8e:c4:2f:0e:cc:4a:fa:ee:bf:7f:a9: 46:6c:a3:02:27:14:02:18:d1:ed:c2:83:04:85:9d: e5:e7:77:31:86:b0:c8:a9:d9:85:c6:2b:40:e8:d8: 0d:f0:6a:0c:48:96:32:b2:d9:bb:46:c6:93:57:20: 4d:ad:15:36:79:99:89:fe:aa:1b:a0:99:e3:f9:5b: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:5D:27:D1:14:FF:5F:13:D8:BF:1B:F4:05:4C:94:80:D5:F4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c9:36:ad:a6:8c:3e:5d:af:9b:0d:b8:57:19:21:63:a9:c5: 48:ed:86:1e:b9:ba:52:4e:67:71:4b:3e:e3:cf:78:23:ca:d6: e8:5e:02:6c:0a:77:4e:f6:be:be:ba:c4:c3:7f:1a:1f:e6:15: 68:f3:52:f7:35:63:2f:fa:0e:7c:ba:cc:97:30:4b:95:a4:6c: d9:fa:43:7d:5f:44:08:c1:3c:05:e7:58:0b:8e:90:11:f9:83: 0a:66:b9:50:2b:48:4d:1b:1a:57:cc:42:1d:0e:02:8d:94:22: 10:8c:ef:c9:9d:12:da:a1:47:2e:e4:83:70:1e:dd:c9:13:49: bb:90:82:0e:d3:e1:f2:92:a8:b4:44:18:b7:5b:31:74:70:64: 9f:9d:0b:1a:4c:55:e8:1f:b2:84:07:72:5c:04:a1:88:67:ec: aa:ac:04:c2:6d:b8:a0:91:a3:84:94:18:13:ce:e1:3e:3a:14: 47:de:d4:8d:9f:d5:fb:2d:8d:9c:cf:f4:57:a5:f9:25:1b:ce: 1a:f8:ad:d2:01:ac:1b:0e:17:fe:8c:48:31:4c:f2:96:4c:14: 66:d5:51:5b:7c:68:67:33:67:80:a7:9e:f6:36:8c:c2:2e:9a: 89:ec:b8:6e:dd:83:92:9c:03:7d:67:65:a3:bb:05:bf:b7:dd: 02:46:22:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9ZJPutF7nQNYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyM1oXDTI1MDkwMTEyNDcyM1owLzEtMCsGA1UEAxMk ZmY4ZGRhZjEtMzFhNS00MzJkLWEyNjItMTM4ZjNlODNiMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrXLkYuc3Nueo9gB+Zt3a7eHipezciUkPdG8 amSprk5Nbax1df1DZafMYpN9odhq7v1SlkeyISMjb5SnBtAKPTZirOihIaHSl97e KkAElETW1IhOmVMUuDW795JAJh9vvcytnzgVh6/M4qpduEPOQ695YDFTCOX+XHjq yVOoT9aVzu4+O1I814vBkYfDFNKnFKZgo8FCikV2xrHelZTXvuopbluFFedElnRh nvxPoojnRi7EjAYjjsQvDsxK+u6/f6lGbKMCJxQCGNHtwoMEhZ3l53cxhrDIqdmF xitA6NgN8GoMSJYystm7RsaTVyBNrRU2eZmJ/qoboJnj+VsiWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI5lXSfRFP9fE9i/G/QFTJSA1fRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU2OGUxNmUtNGM5NC0z ZTNiLWJiMzUtNmI5ZjcxM2VjM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFvJNq2mjD5dr5sNuFcZIWOpxUjthh65ulJOZ3FLPuPPeCPK1uhe AmwKd072vr66xMN/Gh/mFWjzUvc1Yy/6Dny6zJcwS5WkbNn6Q31fRAjBPAXnWAuO kBH5gwpmuVArSE0bGlfMQh0OAo2UIhCM78mdEtqhRy7kg3Ae3ckTSbuQgg7T4fKS qLREGLdbMXRwZJ+dCxpMVegfsoQHclwEoYhn7KqsBMJtuKCRo4SUGBPO4T46FEfe 1I2f1fstjZzP9Fel+SUbzhr4rdIBrBsOF/6MSDFM8pZMFGbVUVt8aGczZ4CnnvY2 jMIumonsuG7dg5KcA31nZaO7Bb+33QJGInw= -----END CERTIFICATE-----Generated at Fri Jun 6 19:32:00 2025 by rpki-client