$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa File: 3673f064-7948-38e5-92a3-2922376a7bb7.roa (raw, json) Hash identifier: TFglvKCZjLSEVNYZ5BziIsVH69JqYmS9EJ/NTAPS6Nk= Subject key identifier: 87:49:A3:DB:CD:10:54:3E:8E:67:36:B6:4F:EA:D0:68:E0:8A:FC:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193CFFBEF7C1DE8295FE600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 36619 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:cf:fb:ef:7c:1d:e8:29:5f:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=1bc8c2c7-f75e-4adb-933c-681ec01f6fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:d2:a2:ed:27:13:4b:8c:ba:92:db:80:be: 22:c2:18:e3:e0:32:6f:6c:f5:58:cb:a9:0f:cf:b1: 37:03:e7:38:f0:a6:30:a5:39:55:a3:03:d3:7e:8a: 7b:47:12:3a:6c:75:4e:98:a3:6d:e3:d6:7d:af:da: f9:78:ea:a5:c8:99:58:3b:9a:0e:ff:05:e2:f2:e8: fe:0e:8d:e3:12:2d:1d:78:e3:17:9c:fd:e7:96:48: 83:d7:17:85:67:b9:d7:ab:79:1c:9d:b1:48:5e:b9: fb:5a:c9:f4:da:1d:1c:9b:04:fe:b5:88:1f:79:71: ef:7b:90:94:ed:3e:b0:6b:12:23:e8:41:19:48:9d: e3:26:55:76:6c:0d:ee:d0:af:70:b3:c7:0d:fb:cc: 48:bb:54:8f:7a:32:6c:ca:5a:f3:e6:aa:db:a3:84: a9:ad:90:9d:df:c0:53:0a:df:64:b4:68:58:2f:8f: f6:e1:a3:13:e5:58:c7:58:90:f3:f3:a7:06:8b:c4: cb:7d:1e:a0:7e:db:e0:f5:71:b5:41:cb:53:6a:c0: 54:00:da:99:d0:f2:80:c9:da:12:43:b5:5d:fa:c7: e7:33:4c:bc:12:dd:80:9d:27:93:4b:95:88:ba:97: c9:17:77:ce:1e:0c:87:bc:3f:97:51:4a:86:fa:ca: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:49:A3:DB:CD:10:54:3E:8E:67:36:B6:4F:EA:D0:68:E0:8A:FC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ae:45:8d:0e:38:8e:aa:64:34:a0:19:e1:53:89:e3:28:1a: 2c:7f:c7:49:2d:1f:41:1a:20:14:69:12:2c:f3:43:45:f3:fd: 92:85:a2:61:95:da:8e:43:18:c8:b6:55:86:43:d0:be:33:40: e3:c1:d9:01:7d:01:9c:c1:54:79:da:90:c4:5a:39:85:e9:7a: 69:42:f7:db:21:b7:1a:18:c9:7e:f7:db:44:5c:88:ac:a7:1e: f9:98:21:e3:21:76:6d:33:be:32:09:b1:6c:f0:3a:29:1f:46: ad:06:bd:85:f0:c9:aa:e9:01:d8:73:11:24:09:2d:f2:41:b2: ea:c9:22:63:dd:81:6f:e3:00:4f:29:09:5d:af:43:c9:cd:4e: e4:c8:29:78:eb:d3:af:cc:36:ab:73:44:83:3b:53:b4:d2:37: 49:a4:55:7d:a1:43:ac:d1:5a:b4:03:85:86:81:93:29:e8:e8: 55:db:85:c4:0b:00:05:df:3f:75:ce:bf:b7:61:18:f4:0e:5d: eb:a0:e7:a3:a4:4b:a4:7e:a4:13:c6:52:37:be:a6:50:88:5b: 5e:1d:2f:88:70:a9:ce:51:5a:a8:ab:65:bd:fa:06:79:1c:1a: 98:30:36:03:db:e2:e3:b3:c5:f1:92:51:2b:7a:fe:40:90:9a: 3a:b2:eb:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk8/773wd6Clf5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk MWJjOGMyYzctZjc1ZS00YWRiLTkzM2MtNjgxZWMwMWY2ZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfjSou0nE0uMupLbgL4iwhjj4DJvbPVYy6kP z7E3A+c48KYwpTlVowPTfop7RxI6bHVOmKNt49Z9r9r5eOqlyJlYO5oO/wXi8uj+ Do3jEi0deOMXnP3nlkiD1xeFZ7nXq3kcnbFIXrn7Wsn02h0cmwT+tYgfeXHve5CU 7T6waxIj6EEZSJ3jJlV2bA3u0K9ws8cN+8xIu1SPejJsylrz5qrbo4SprZCd38BT Ct9ktGhYL4/24aMT5VjHWJDz86cGi8TLfR6gftvg9XG1QctTasBUANqZ0PKAydoS Q7Vd+sfnM0y8Et2AnSeTS5WIupfJF3fOHgyHvD+XUUqG+sq5tQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdJo9vNEFQ+jmc2tk/q0GjgivwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY3M2YwNjQtNzk0OC0z OGU1LTkyYTMtMjkyMjM3NmE3YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIquRY0OOI6qZDSgGeFTieMoGix/x0ktH0EaIBRpEizzQ0Xz/ZKF omGV2o5DGMi2VYZD0L4zQOPB2QF9AZzBVHnakMRaOYXpemlC99shtxoYyX7320Rc iKynHvmYIeMhdm0zvjIJsWzwOikfRq0GvYXwyarpAdhzESQJLfJBsurJImPdgW/j AE8pCV2vQ8nNTuTIKXjr06/MNqtzRIM7U7TSN0mkVX2hQ6zRWrQDhYaBkyno6FXb hcQLAAXfP3XOv7dhGPQOXeug56OkS6R+pBPGUje+plCIW14dL4hwqc5RWqirZb36 BnkcGpgwNgPb4uOzxfGSUSt6/kCQmjqy63g= -----END CERTIFICATE-----Generated at Sat Jun 7 11:51:15 2025 by rpki-client