$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa File: 43e3ea64-26d8-3cc3-afce-3d6761763a84.roa (raw, json) Hash identifier: 2iLqoJXOGRfygEYNxMPhI7gw+8vQNi6QaCSZMmv4b+4= Subject key identifier: 2D:B5:17:57:C4:09:0F:D6:D8:FC:DE:23:8D:BD:63:C4:20:FB:D2:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D528D3098B9B1DC636C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396562 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:28:d3:09:8b:9b:1d:c6:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=7d4b94fd-89c8-4fd3-95b0-779ff52f4412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:a3:be:63:35:11:74:6f:d7:dd:9d:a3:11: ad:d1:81:aa:ce:89:45:f8:cb:89:94:9a:d4:30:eb: 96:ab:74:1c:5c:ed:b6:08:b1:b3:1a:24:54:9c:47: e0:d4:b4:48:67:73:6e:c1:92:fe:70:d4:c0:36:d6: f2:d8:67:cb:0f:2b:2f:3b:92:15:5d:c5:71:bc:a9: bd:98:44:bb:eb:8a:af:1a:74:74:57:ac:95:1b:0f: 4d:21:71:a3:8d:a8:97:d1:bb:5a:d4:86:aa:52:7b: a8:c3:65:98:a9:a0:ff:0f:0a:33:4a:64:80:6c:e6: dd:44:51:b3:25:0e:11:2c:13:a8:c3:24:e0:5c:40: 34:ba:c1:84:57:00:c6:24:25:d2:87:95:ca:90:54: 3c:92:6c:e5:e1:5b:b6:d7:83:7d:d9:8b:92:2e:e9: 50:08:be:61:2b:50:af:c8:59:0a:d8:0a:ff:5a:93: c9:7a:d0:08:5d:cf:b4:2b:da:2e:0e:a4:b5:10:79: 1a:b7:f1:dd:4d:ad:56:a4:a6:33:2b:e4:e3:46:87: b6:ae:43:24:b0:3b:6c:32:d7:f9:61:f9:2f:0d:53: b9:f6:58:ef:d3:cf:c9:5f:e0:a3:67:f0:74:15:5d: 18:e3:2d:90:03:9e:a9:6e:64:55:1f:00:ae:d9:49: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B5:17:57:C4:09:0F:D6:D8:FC:DE:23:8D:BD:63:C4:20:FB:D2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:67:2b:76:07:ea:99:0f:e6:0a:e8:ed:f2:58:bd:ce:38:29: 92:41:22:58:76:60:44:c6:84:30:7b:1a:fe:80:36:c2:a5:4a: 3b:3c:b5:72:17:1b:40:36:12:4c:0f:0d:a4:ef:92:08:11:ed: 83:dc:5e:33:ab:ec:9f:5a:1a:59:5f:5a:35:33:ac:c4:23:92: 29:ad:1b:08:b5:b7:b9:61:33:ff:90:6f:da:23:f7:a5:90:a5: ad:88:11:17:d1:d0:2b:d4:b0:5e:cd:4b:18:18:5f:52:67:8b: 20:5f:74:ba:5f:e5:82:4d:24:35:36:30:d6:a0:83:b0:73:a3: bc:4d:d0:f6:65:40:36:3e:fd:aa:45:ac:b1:95:cb:cd:92:85: 49:c4:87:a2:4f:89:59:3b:f1:bf:71:dc:3c:f1:de:06:bb:ab: 46:11:53:2b:be:8d:90:ea:87:68:95:1c:65:39:48:17:22:4a: 1d:76:dd:51:07:4e:63:b2:a1:5a:8a:75:e6:27:f4:09:9d:d7: 37:82:02:9c:a7:f4:c2:40:23:28:1d:3b:ab:1e:19:0d:e9:db: ed:d8:bc:6c:be:20:67:4d:fe:4d:f7:ef:11:ea:1b:86:d9:83: a8:7a:6c:a7:58:25:27:ee:df:a8:7c:11:23:a6:77:18:ad:7b: 2f:0e:89:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9Uo0wmLmx3GNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk N2Q0Yjk0ZmQtODljOC00ZmQzLTk1YjAtNzc5ZmY1MmY0NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqijvmM1EXRv192doxGt0YGqzolF+MuJlJrU MOuWq3QcXO22CLGzGiRUnEfg1LRIZ3NuwZL+cNTANtby2GfLDysvO5IVXcVxvKm9 mES764qvGnR0V6yVGw9NIXGjjaiX0bta1IaqUnuow2WYqaD/DwozSmSAbObdRFGz JQ4RLBOowyTgXEA0usGEVwDGJCXSh5XKkFQ8kmzl4Vu214N92YuSLulQCL5hK1Cv yFkK2Ar/WpPJetAIXc+0K9ouDqS1EHkat/HdTa1WpKYzK+TjRoe2rkMksDtsMtf5 YfkvDVO59ljv08/JX+CjZ/B0FV0Y4y2QA56pbmRVHwCu2Ul44QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC21F1fECQ/W2PzeI429Y8Qg+9J5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlM2VhNjQtMjZkOC0z Y2MzLWFmY2UtM2Q2NzYxNzYzYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVnK3YH6pkP5gro7fJYvc44KZJBIlh2YETGhDB7Gv6ANsKlSjs8 tXIXG0A2EkwPDaTvkggR7YPcXjOr7J9aGllfWjUzrMQjkimtGwi1t7lhM/+Qb9oj 96WQpa2IERfR0CvUsF7NSxgYX1JniyBfdLpf5YJNJDU2MNagg7Bzo7xN0PZlQDY+ /apFrLGVy82ShUnEh6JPiVk78b9x3Dzx3ga7q0YRUyu+jZDqh2iVHGU5SBciSh12 3VEHTmOyoVqKdeYn9Amd1zeCApyn9MJAIygdO6seGQ3p2+3YvGy+IGdN/k337xHq G4bZg6h6bKdYJSfu36h8ESOmdxitey8OiUw= -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:36 2025 by rpki-client