$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37b387ef-661f-3a15-88c1-7aa467d56882.roa File: 37b387ef-661f-3a15-88c1-7aa467d56882.roa (raw, json) Hash identifier: NdynM4utBwFeoxvpRzwWv8SAxIkp5KObZ50p2vGJlt0= Subject key identifier: A5:AC:41:15:80:78:AF:9C:9F:92:9C:EC:2B:7E:72:F7:2B:52:52:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D29E51566544BA155C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37b387ef-661f-3a15-88c1-7aa467d56882.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396575 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:9e:51:56:65:44:ba:15:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=c7569d20-f1c3-4c75-94b3-96fe3ee3e279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:68:04:a5:96:f1:61:50:cb:76:28:f1:f4: 1b:3c:77:9f:38:f7:74:eb:c3:88:56:88:40:00:84: fb:0a:f7:08:5e:17:dd:f0:53:73:97:67:90:7b:3b: 3c:b1:e2:6b:ff:b4:b3:41:e0:e7:9d:8f:c6:3e:a5: f5:0a:bb:5a:3b:ff:09:68:a6:59:44:b1:ff:90:41: 68:90:6c:3d:19:ce:dc:ba:50:7b:b3:ed:f1:36:d9: f9:bf:b3:81:7c:f9:b5:86:c2:bd:88:9b:99:2b:a6: 73:ac:7f:ad:8b:6b:b6:f4:bd:cd:22:26:3d:34:7b: 4c:e3:e4:35:ee:ce:2a:c8:7b:c7:50:a1:52:a9:97: 76:6f:32:44:4f:ac:59:d3:b1:4d:1f:e0:c6:c1:78: b4:77:8b:f2:58:87:54:fc:73:51:c9:af:f7:e7:b2: 1e:50:e8:23:89:9f:7f:41:c5:6d:3e:fe:2f:ea:29: 86:32:5c:b4:8b:0d:d0:40:b1:b6:67:ed:f9:8c:23: 44:c3:8f:e0:ed:36:43:e2:97:2d:69:9e:5c:0e:3d: 8c:89:82:cb:36:cd:95:2f:d6:4d:e6:bc:c5:52:89: 9d:05:3e:d9:92:bd:cc:aa:bb:f3:2e:03:31:51:bf: 3f:33:9f:78:bb:55:2a:d9:d4:34:06:c6:19:87:5a: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:41:15:80:78:AF:9C:9F:92:9C:EC:2B:7E:72:F7:2B:52:52:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37b387ef-661f-3a15-88c1-7aa467d56882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d0:3a:60:5e:00:27:39:fa:29:5a:57:8d:9d:ba:c1:eb:ea: a8:89:2d:bb:53:19:6b:c9:bd:4b:94:ed:74:65:eb:ae:47:b7: 3a:67:7b:57:3f:2e:b0:4e:20:98:1f:8a:25:6e:90:d8:8e:af: 4e:9e:b2:0c:1e:3e:90:d2:e0:c4:17:f0:a2:4b:e8:fc:b9:ee: e9:60:38:89:74:c4:18:07:a0:9f:6d:ad:a7:68:32:e6:dc:c4: 8b:d4:83:8b:69:ae:be:3e:02:db:87:4e:52:88:87:dc:23:42: 89:74:fd:c1:79:ba:fb:61:61:d8:4d:3c:2e:70:55:66:e7:e1: bb:13:6e:18:82:a9:58:d6:0d:fe:98:e4:07:41:a2:dd:23:c9: 25:1d:8e:53:4c:94:ee:34:e1:31:50:a4:9b:0a:aa:86:57:b7: 84:af:49:f7:c7:8e:bd:b5:8f:2e:0b:15:6f:01:e5:f7:ed:52: 5e:ac:dd:a1:3e:c1:e9:d5:a9:6f:05:0c:9f:5b:f8:4b:56:95: 44:36:80:c2:1a:69:5c:48:3b:ee:ae:49:1d:19:8f:fe:14:7b: fd:f3:99:dc:57:b8:16:39:c7:df:03:7f:e1:2c:3a:0d:12:17: c3:0e:e8:f6:43:09:8c:e7:5f:60:e9:b9:10:d7:a8:4f:93:cd: 76:34:f1:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9KeUVZlRLoVXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk Yzc1NjlkMjAtZjFjMy00Yzc1LTk0YjMtOTZmZTNlZTNlMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVhoBKWW8WFQy3Yo8fQbPHefOPd068OIVohA AIT7CvcIXhfd8FNzl2eQezs8seJr/7SzQeDnnY/GPqX1CrtaO/8JaKZZRLH/kEFo kGw9Gc7culB7s+3xNtn5v7OBfPm1hsK9iJuZK6ZzrH+ti2u29L3NIiY9NHtM4+Q1 7s4qyHvHUKFSqZd2bzJET6xZ07FNH+DGwXi0d4vyWIdU/HNRya/357IeUOgjiZ9/ QcVtPv4v6imGMly0iw3QQLG2Z+35jCNEw4/g7TZD4pctaZ5cDj2MiYLLNs2VL9ZN 5rzFUomdBT7Zkr3MqrvzLgMxUb8/M594u1Uq2dQ0BsYZh1qeLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWsQRWAeK+cn5Kc7Ct+cvcrUlKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzdiMzg3ZWYtNjYxZi0z YTE1LTg4YzEtN2FhNDY3ZDU2ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3QOmBeACc5+ilaV42dusHr6qiJLbtTGWvJvUuU7XRl665Htzpn e1c/LrBOIJgfiiVukNiOr06esgwePpDS4MQX8KJL6Py57ulgOIl0xBgHoJ9trado MubcxIvUg4tprr4+AtuHTlKIh9wjQol0/cF5uvthYdhNPC5wVWbn4bsTbhiCqVjW Df6Y5AdBot0jySUdjlNMlO404TFQpJsKqoZXt4SvSffHjr21jy4LFW8B5fftUl6s 3aE+wenVqW8FDJ9b+EtWlUQ2gMIaaVxIO+6uSR0Zj/4Ue/3zmdxXuBY5x98Df+Es Og0SF8MO6PZDCYznX2DpuRDXqE+TzXY08bM= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:42 2025 by rpki-client