$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e761d87-7791-3809-846d-0cf9201b3da1.roa File: 3e761d87-7791-3809-846d-0cf9201b3da1.roa (raw, json) Hash identifier: rCD37bi4M5lfzGyRugLzGw3Y0KAbXvaaKYBTLenxoT8= Subject key identifier: F4:25:C4:7E:8A:2F:69:F3:C4:02:D0:AC:32:FE:DD:6D:3A:1E:7E:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D1D165550CB6685D0480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e761d87-7791-3809-846d-0cf9201b3da1.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396541 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:d1:65:55:0c:b6:68:5d:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=d2c743c3-dbf5-469b-9181-2c20a966332d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:08:43:7f:6f:08:25:78:8f:55:26:81:76: da:aa:3c:3d:61:c6:96:b6:24:36:11:4c:59:a0:ab: aa:62:85:f2:0b:ea:9c:2d:59:3b:55:15:76:fc:bd: 42:38:3f:8c:55:a8:0b:4c:dd:63:1c:78:57:b0:26: bc:f4:d1:1e:65:6a:6b:88:c8:d5:61:18:c9:80:86: 25:d5:84:b4:90:21:69:18:a9:de:90:c6:25:7c:e8: 63:d7:b3:4e:3b:c9:b1:62:3e:84:ef:f3:77:87:de: 5c:d0:ed:cb:8b:56:d1:27:c7:a6:75:7f:9f:eb:25: 70:ca:09:82:24:78:c7:96:b1:37:18:89:ef:ef:f7: 30:9d:fe:8d:e6:91:36:33:e1:3a:24:9a:cd:5b:e7: e7:d8:9f:ce:6d:31:2d:52:fe:9c:46:ab:cb:d4:32: cf:09:2f:70:c1:ac:cf:2d:53:89:77:8d:7f:73:06: d5:8a:06:85:57:73:65:1d:d0:0d:c2:3b:8c:a2:ef: 5d:01:1e:14:6e:bd:98:42:18:7c:22:5c:9e:93:4e: 15:e7:05:af:07:78:52:d9:23:05:73:e8:da:35:91: 1a:0a:89:d7:92:e4:65:e0:91:84:43:4a:a7:3a:b1: f9:38:be:40:27:d5:c3:a7:ed:5c:8d:60:42:51:3d: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:25:C4:7E:8A:2F:69:F3:C4:02:D0:AC:32:FE:DD:6D:3A:1E:7E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e761d87-7791-3809-846d-0cf9201b3da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:35:58:2d:56:7e:d3:ce:9c:1b:81:04:2a:40:8c:fa:66:fb: 95:83:88:a4:ef:34:ee:33:fa:ac:23:7b:b9:9c:99:3b:4f:bc: 77:9a:ee:59:0d:19:60:45:d1:bc:d1:a9:b6:55:96:b7:22:32: a5:57:36:3d:a6:bb:6b:15:04:57:ed:23:53:74:38:c8:32:84: 0e:67:5f:05:e9:d0:61:af:b1:92:6d:ce:ba:5e:c5:cd:07:92: 7c:23:a4:e3:c5:29:e8:5a:14:9a:0a:e5:e2:f3:7f:df:93:7b: f1:25:50:4f:85:86:99:75:4a:43:6f:fb:59:dd:e6:e6:c4:97: 9f:81:6d:3a:79:ac:9a:18:9c:e2:ec:e4:b5:cf:4e:b4:53:b6: 1d:4c:c6:46:f5:d9:ba:e7:c8:f6:f4:21:df:07:2c:81:3a:ac: 64:b3:11:7b:01:3e:bb:38:8b:07:69:8e:de:be:72:df:32:b6: 65:c6:72:96:34:20:37:90:c2:8b:59:f0:e8:27:ff:b3:1a:59: 1e:65:c9:e3:5e:0a:79:58:3d:c7:e1:bf:b6:79:41:f4:6d:65: f9:6c:24:4d:e3:c9:14:05:01:ca:1b:03:fe:45:a0:0e:08:a4: 3d:ca:e2:ad:4a:68:a6:79:b2:3c:5a:06:20:66:e3:d0:ff:dc: 44:87:0a:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9HRZVUMtmhdBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk ZDJjNzQzYzMtZGJmNS00NjliLTkxODEtMmMyMGE5NjYzMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz0IQ39vCCV4j1UmgXbaqjw9YcaWtiQ2EUxZ oKuqYoXyC+qcLVk7VRV2/L1COD+MVagLTN1jHHhXsCa89NEeZWpriMjVYRjJgIYl 1YS0kCFpGKnekMYlfOhj17NOO8mxYj6E7/N3h95c0O3Li1bRJ8emdX+f6yVwygmC JHjHlrE3GInv7/cwnf6N5pE2M+E6JJrNW+fn2J/ObTEtUv6cRqvL1DLPCS9wwazP LVOJd41/cwbVigaFV3NlHdANwjuMou9dAR4Ubr2YQhh8Ilyek04V5wWvB3hS2SMF c+jaNZEaConXkuRl4JGEQ0qnOrH5OL5AJ9XDp+1cjWBCUT2FcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPQlxH6KL2nzxALQrDL+3W06Hn4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U3NjFkODctNzc5MS0z ODA5LTg0NmQtMGNmOTIwMWIzZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADU1WC1WftPOnBuBBCpAjPpm+5WDiKTvNO4z+qwje7mcmTtPvHea 7lkNGWBF0bzRqbZVlrciMqVXNj2mu2sVBFftI1N0OMgyhA5nXwXp0GGvsZJtzrpe xc0HknwjpOPFKehaFJoK5eLzf9+Te/ElUE+Fhpl1SkNv+1nd5ubEl5+BbTp5rJoY nOLs5LXPTrRTth1Mxkb12brnyPb0Id8HLIE6rGSzEXsBPrs4iwdpjt6+ct8ytmXG cpY0IDeQwotZ8Ogn/7MaWR5lyeNeCnlYPcfhv7Z5QfRtZflsJE3jyRQFAcobA/5F oA4IpD3K4q1KaKZ5sjxaBiBm49D/3ESHCmk= -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:26 2025 by rpki-client