$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa File: 40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa (raw, json) Hash identifier: f1xLIrqkHxmA+aj1/H3Nc2T2DrpRXrMbSp0kYzOnhGI= Subject key identifier: D6:AA:6A:3A:E5:09:03:09:78:E1:8A:4D:C3:EE:EB:5C:2B:5A:E1:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D6011C516A2C1DE54CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa Signing time: Tue 03 Jun 2025 12:47:23 +0000 ROA not before: Tue 03 Jun 2025 12:47:23 +0000 ROA not after: Mon 01 Sep 2025 12:47:23 +0000 asID: 20172 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d6:01:1c:51:6a:2c:1d:e5:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:23 2025 GMT Not After : Sep 1 12:47:23 2025 GMT Subject: CN=e9f8d27f-cf34-44e9-bddf-036a64fa34ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:10:32:30:b5:af:b5:dc:d4:3f:6e:ed:56: 9c:b6:8f:72:e4:5a:ab:46:57:be:f0:e9:7a:4e:51: d7:37:a7:10:cb:a0:78:01:a8:fb:a6:19:ab:a5:a6: b4:8d:43:e0:da:ce:4c:7d:d9:75:9a:75:57:84:3f: a9:9e:b3:c2:fe:92:38:5b:d7:d7:a6:97:3b:b2:9d: 60:81:54:39:f2:a8:ed:bd:1c:7e:69:11:92:46:fa: fd:be:df:ff:64:04:e4:ae:10:e7:a1:7c:ec:15:da: f6:f6:9f:12:eb:4b:1f:11:87:bb:70:fe:3a:a9:62: 23:78:04:0b:83:72:28:88:6d:b1:d2:a8:41:af:ce: 57:f1:75:94:7e:83:da:09:00:98:24:f8:e1:53:c8: 00:54:87:44:df:4a:89:22:e7:07:2d:80:07:7d:7e: 7c:52:f0:7a:8b:29:dc:2f:c9:7f:3e:cf:17:ce:34: 6b:d8:30:51:fb:94:47:15:f3:cf:30:09:69:ac:9c: 1b:84:ef:26:31:0a:81:81:b6:e0:b5:56:1a:cc:27: be:88:c6:4d:2f:eb:a7:da:b6:e2:17:4b:11:e5:dd: 61:a0:97:97:2c:cc:5a:85:6d:34:63:49:1d:2c:5f: 3c:be:1a:fe:28:04:43:1c:f0:42:87:ce:ec:7b:e6: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:6A:3A:E5:09:03:09:78:E1:8A:4D:C3:EE:EB:5C:2B:5A:E1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0b:c9:7f:16:1d:12:00:54:bd:97:e3:52:b2:b2:39:98:7a: fa:84:bc:75:c0:8d:78:07:87:45:2b:c8:7a:05:a2:c0:ad:53: 02:2a:cc:66:35:12:48:4e:80:58:15:3d:cc:13:3f:c3:72:f1: c2:9c:15:37:64:f4:6b:83:0b:f9:aa:d5:bf:ae:71:41:c6:1a: c2:cf:ff:55:4b:ed:56:97:33:fc:42:79:20:4d:c0:18:21:f0: 1c:02:61:48:79:35:12:7e:79:3b:96:4d:e0:a1:08:87:45:ea: 33:e5:93:12:c2:07:da:72:83:89:21:fe:f8:95:a1:b0:5a:dc: 2c:2a:a4:9e:c7:cb:7b:ed:24:26:47:39:88:da:d4:a3:d9:a1: fe:35:c4:6d:cb:e3:14:2e:e6:59:3d:f6:35:60:b1:ba:9a:cb: 18:0e:46:bf:0f:cb:2c:a8:44:9e:58:e8:6f:4a:3b:0b:bc:1a: 95:d9:31:4b:ee:d6:03:16:33:ad:9f:8f:af:ff:29:fb:02:f5: 72:e4:e1:60:e0:4c:05:d9:78:d1:21:03:a3:08:8e:ce:08:f7: 7f:1c:1b:5d:31:47:c9:63:b1:de:83:db:20:ce:d6:0e:41:0c: b9:fc:2e:80:32:a7:ef:20:d9:6c:66:ad:c6:e5:b9:66:5d:08: d5:e0:ef:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9YBHFFqLB3lTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyM1oXDTI1MDkwMTEyNDcyM1owLzEtMCsGA1UEAxMk ZTlmOGQyN2YtY2YzNC00NGU5LWJkZGYtMDM2YTY0ZmEzNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIcQMjC1r7Xc1D9u7Vacto9y5FqrRle+8Ol6 TlHXN6cQy6B4Aaj7phmrpaa0jUPg2s5Mfdl1mnVXhD+pnrPC/pI4W9fXppc7sp1g gVQ58qjtvRx+aRGSRvr9vt//ZATkrhDnoXzsFdr29p8S60sfEYe7cP46qWIjeAQL g3IoiG2x0qhBr85X8XWUfoPaCQCYJPjhU8gAVIdE30qJIucHLYAHfX58UvB6iync L8l/Ps8XzjRr2DBR+5RHFfPPMAlprJwbhO8mMQqBgbbgtVYazCe+iMZNL+un2rbi F0sR5d1hoJeXLMxahW00Y0kdLF88vhr+KARDHPBCh87se+aF8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNaqajrlCQMJeOGKTcPu61wrWuFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBhYjcxMDEtNTdjZS0z N2QxLWIwZjMtZWYxYTE3NzY5ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABALyX8WHRIAVL2X41KysjmYevqEvHXAjXgHh0UryHoFosCtUwIq zGY1EkhOgFgVPcwTP8Ny8cKcFTdk9GuDC/mq1b+ucUHGGsLP/1VL7VaXM/xCeSBN wBgh8BwCYUh5NRJ+eTuWTeChCIdF6jPlkxLCB9pyg4kh/viVobBa3CwqpJ7Hy3vt JCZHOYja1KPZof41xG3L4xQu5lk99jVgsbqayxgORr8PyyyoRJ5Y6G9KOwu8GpXZ MUvu1gMWM62fj6//KfsC9XLk4WDgTAXZeNEhA6MIjs4I938cG10xR8ljsd6D2yDO 1g5BDLn8LoAyp+8g2WxmrcbluWZdCNXg7yw= -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:19 2025 by rpki-client