$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa File: 5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa (raw, json) Hash identifier: CH/PMhuRtYyfS4NGvM70Bs3SiffZMNBQUQa9K9JUUA4= Subject key identifier: AA:D9:4B:24:C8:82:DF:DB:5E:DC:E6:E7:96:3B:D3:60:37:FD:49:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D583E3104CF983B77AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396616 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:83:e3:10:4c:f9:83:b7:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=3593921f-ce39-49e8-891a-2da62044e7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:23:ab:6d:59:3b:fd:1c:0a:c0:6c:02:6e:3b: 27:f5:60:70:02:fc:de:97:9f:d7:41:6a:dc:bb:ec: b1:c2:1e:b2:8c:77:04:31:29:a4:3c:4a:cc:8c:c7: 72:c8:88:d2:94:ec:f5:b1:6b:cc:85:cb:63:0d:9c: fe:7f:42:5c:3d:6c:6c:e4:2a:fb:c9:1b:95:c9:00: d5:55:6a:85:9e:d8:3e:f1:79:49:17:3f:e2:5d:e0: 76:f4:f3:6f:17:24:6f:9e:08:92:ca:2a:1a:6d:65: 1e:bb:48:08:3f:42:fb:1f:2e:60:72:7a:5f:e4:be: 65:9e:3e:8a:88:fa:29:a2:4b:41:7a:3a:61:5b:2a: 5a:1c:fe:77:74:c3:82:ce:32:1f:de:9e:46:a1:1b: 2f:0c:d0:19:32:18:9a:0e:95:d0:97:89:7b:c5:2d: fc:fb:b4:06:75:28:de:7f:ab:8f:aa:c5:ea:af:db: 08:cd:e7:74:9b:19:c3:3b:b3:fb:d8:30:97:62:6e: fe:71:02:87:d2:08:0d:90:07:c3:09:c5:5b:a5:cb: 03:38:82:45:2c:17:87:8a:7d:a1:e8:86:33:b9:60: 2a:61:85:eb:f7:f0:e5:d8:c1:c7:d0:a2:07:55:8e: 99:a8:26:93:e7:e4:bb:ce:54:4f:46:02:51:06:02: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D9:4B:24:C8:82:DF:DB:5E:DC:E6:E7:96:3B:D3:60:37:FD:49:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5497d849-d9e4-38e3-9c1c-2cc4a99c45c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9b:7f:61:ae:80:b5:30:32:24:02:62:9c:9b:fd:8d:09:c9: 9b:4b:44:59:ae:7e:6a:7f:99:a3:1e:57:44:c6:44:25:d6:4f: 8c:78:95:ed:0d:66:c6:24:21:25:ca:f1:4c:d6:ab:37:7b:22: c8:6a:b1:f1:75:05:de:ef:9c:be:5c:c3:eb:2a:b9:ae:45:d8: c6:08:4b:13:cb:5f:97:85:77:58:48:2b:a3:0c:26:ea:86:e4: ae:e7:77:be:d6:58:8f:29:a4:5f:15:ab:61:92:b8:e5:bb:21: 4b:ca:34:98:b6:3a:a8:2b:17:01:e7:d6:ac:f3:1e:d6:50:a5: b8:c3:f7:30:7d:37:8c:06:cc:4e:03:87:0f:79:ad:86:28:54: 0b:fd:c6:bb:79:be:90:db:ae:d4:49:be:79:c2:97:0e:80:2d: e5:84:0a:70:b0:2b:f9:97:d9:ab:03:ac:46:0d:2c:b6:0c:7d: 34:12:46:08:1b:89:8b:75:1a:8f:88:d3:1c:ad:ac:d4:ff:f2: bc:06:a6:ae:a3:86:a6:1d:cd:e6:ff:05:9e:d8:3f:fd:2d:8d: 0a:d5:46:09:48:f0:e2:a6:ef:f1:5f:38:bd:52:b4:27:f5:0d: 29:22:ec:72:1e:8a:be:7f:37:3e:30:c5:47:9a:83:64:c0:43: 60:69:c6:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9WD4xBM+YO3esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk MzU5MzkyMWYtY2UzOS00OWU4LTg5MWEtMmRhNjIwNDRlN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yOrbVk7/RwKwGwCbjsn9WBwAvzel5/XQWrc u+yxwh6yjHcEMSmkPErMjMdyyIjSlOz1sWvMhctjDZz+f0JcPWxs5Cr7yRuVyQDV VWqFntg+8XlJFz/iXeB29PNvFyRvngiSyioabWUeu0gIP0L7Hy5gcnpf5L5lnj6K iPopoktBejphWypaHP53dMOCzjIf3p5GoRsvDNAZMhiaDpXQl4l7xS38+7QGdSje f6uPqsXqr9sIzed0mxnDO7P72DCXYm7+cQKH0ggNkAfDCcVbpcsDOIJFLBeHin2h 6IYzuWAqYYXr9/Dl2MHH0KIHVY6ZqCaT5+S7zlRPRgJRBgK+pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKrZSyTIgt/bXtzm55Y702A3/UmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQ5N2Q4NDktZDllNC0z OGUzLTljMWMtMmNjNGE5OWM0NWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIWbf2GugLUwMiQCYpyb/Y0JyZtLRFmufmp/maMeV0TGRCXWT4x4 le0NZsYkISXK8UzWqzd7IshqsfF1Bd7vnL5cw+squa5F2MYISxPLX5eFd1hIK6MM JuqG5K7nd77WWI8ppF8Vq2GSuOW7IUvKNJi2OqgrFwHn1qzzHtZQpbjD9zB9N4wG zE4Dhw95rYYoVAv9xrt5vpDbrtRJvnnClw6ALeWECnCwK/mX2asDrEYNLLYMfTQS RggbiYt1Go+I0xytrNT/8rwGpq6jhqYdzeb/BZ7YP/0tjQrVRglI8OKm7/FfOL1S tCf1DSki7HIeir5/Nz4wxUeag2TAQ2BpxrQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:25 2025 by rpki-client