$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa File: 43e649a5-8c17-35bf-89e2-67bb6324e681.roa (raw, json) Hash identifier: IXx/Q0wypHSa8X/QPSt86hMqHPZskBRktqq0RsVFL1k= Subject key identifier: C3:BD:25:95:EE:6F:81:C5:1D:30:C9:29:4E:8E:5C:3F:6C:41:D8:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D1E002905870849F80C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 397194 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:e0:02:90:58:70:84:9f:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=06d78487-9684-41c5-ac48-37c4c558abc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:2a:27:54:c1:d5:54:64:82:9c:2d:07:76: f3:be:11:0e:ab:20:d4:b8:0c:78:b2:61:4b:a6:d7: 96:d0:01:0e:3b:67:13:e9:f9:81:b5:c3:21:0d:d8: b9:7e:19:5f:4a:da:db:67:d5:bf:14:a3:51:2f:df: 02:72:8d:6e:c4:e6:a3:63:3e:a4:75:5f:72:52:f3: e5:8d:a1:9c:b9:16:2a:07:8f:a8:72:f9:70:a9:16: 76:38:5f:74:e9:6f:d4:40:48:e9:45:0b:d3:e9:ae: 3b:3d:f0:ac:b0:5d:37:f2:9d:99:83:6a:b9:66:84: ec:05:b1:26:8a:d7:cf:67:2a:bc:f1:c4:be:b5:b4: 53:e6:3f:aa:30:6e:91:57:40:7a:f6:ba:78:44:cf: 7d:77:ce:c9:3f:1d:51:1f:55:5b:ae:1c:c0:19:84: 31:88:92:24:ca:14:a0:ea:74:9b:9e:b5:65:3e:e1: 21:ed:6b:bf:6f:39:30:4f:ab:f1:6a:e8:9e:34:c2: c0:36:ce:4a:f6:4e:72:f5:d3:f3:f4:f2:77:48:f9: 31:d4:71:3a:a9:d7:5d:03:9a:28:23:71:64:ba:c2: 3e:f1:93:82:b7:55:0e:28:d7:b3:55:5a:d1:fa:0c: f5:8f:82:ac:25:b9:da:cc:d8:15:8b:1e:18:fa:94: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BD:25:95:EE:6F:81:C5:1D:30:C9:29:4E:8E:5C:3F:6C:41:D8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5f:c7:16:0e:6b:11:6f:02:cd:72:ce:b7:c0:e8:17:ac:bf: 47:51:fe:75:0b:89:43:0e:aa:3c:73:00:9c:65:2a:c0:17:90: c0:c7:bf:0c:6e:e5:f0:49:6f:ba:91:df:15:9b:46:dd:96:ea: b3:01:14:90:e4:50:5c:5a:cd:26:fb:5e:b6:87:bf:3e:a3:56: 53:b6:e7:20:23:35:74:02:ba:99:4b:44:6f:17:61:34:4f:00: 5b:a1:cc:08:23:cc:38:6e:0b:34:5f:42:4b:d0:82:b6:b3:86: 7c:2f:66:40:89:62:36:29:0f:59:7f:aa:9e:53:56:0f:62:68: f4:49:c8:a2:11:d7:7e:34:d0:70:5c:16:43:95:f9:82:e1:80: 8f:a1:1b:54:31:69:6f:37:b8:26:9d:a8:57:0a:6b:32:9c:de: 3d:0d:47:39:81:88:a7:de:b7:67:91:e6:90:c2:bd:f2:83:76: 1d:0e:7a:5d:9f:8a:14:ac:46:3f:6e:4a:11:a5:48:2b:1e:ad: f9:1d:38:71:71:d9:71:44:c5:b7:d4:a3:76:10:b3:d3:37:98: 1d:06:54:9a:74:81:dc:68:0b:84:ab:de:44:77:c9:86:12:50: a1:a1:7f:eb:28:42:55:37:d2:27:68:dd:a2:4f:af:61:8f:31: a5:1f:ab:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9HgApBYcISfgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk MDZkNzg0ODctOTY4NC00MWM1LWFjNDgtMzdjNGM1NThhYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaUqJ1TB1VRkgpwtB3bzvhEOqyDUuAx4smFL pteW0AEOO2cT6fmBtcMhDdi5fhlfStrbZ9W/FKNRL98Cco1uxOajYz6kdV9yUvPl jaGcuRYqB4+ocvlwqRZ2OF906W/UQEjpRQvT6a47PfCssF038p2Zg2q5ZoTsBbEm itfPZyq88cS+tbRT5j+qMG6RV0B69rp4RM99d87JPx1RH1VbrhzAGYQxiJIkyhSg 6nSbnrVlPuEh7Wu/bzkwT6vxauieNMLANs5K9k5y9dPz9PJ3SPkx1HE6qdddA5oo I3FkusI+8ZOCt1UOKNezVVrR+gz1j4KsJbnazNgVix4Y+pQDswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMO9JZXub4HFHTDJKU6OXD9sQdjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNjQ5YTUtOGMxNy0z NWJmLTg5ZTItNjdiYjYzMjRlNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVfxxYOaxFvAs1yzrfA6Besv0dR/nULiUMOqjxzAJxlKsAXkMDH vwxu5fBJb7qR3xWbRt2W6rMBFJDkUFxazSb7XraHvz6jVlO25yAjNXQCuplLRG8X YTRPAFuhzAgjzDhuCzRfQkvQgrazhnwvZkCJYjYpD1l/qp5TVg9iaPRJyKIR1340 0HBcFkOV+YLhgI+hG1QxaW83uCadqFcKazKc3j0NRzmBiKfet2eR5pDCvfKDdh0O el2fihSsRj9uShGlSCserfkdOHFx2XFExbfUo3YQs9M3mB0GVJp0gdxoC4Sr3kR3 yYYSUKGhf+soQlU30ido3aJPr2GPMaUfq2I= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:31 2025 by rpki-client