$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d92877a-7c20-3184-b1c8-05db6e9907a1.roa File: 5d92877a-7c20-3184-b1c8-05db6e9907a1.roa (raw, json) Hash identifier: Wll0q8265RSuOF0DtKgDW1Mj4TgkpdK28nnK2n7wYeI= Subject key identifier: 7F:9D:C5:F9:04:04:D3:5D:EC:67:DC:70:6C:21:5F:42:EE:B4:EA:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D4840B36F3A485F6A380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d92877a-7c20-3184-b1c8-05db6e9907a1.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396606 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:84:0b:36:f3:a4:85:f6:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=8731146b-435b-4b5f-97ac-ea6a31bf65ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:e6:40:a4:36:9f:41:37:01:e0:a0:ae:bc: d7:02:6d:a8:9c:1a:c8:6c:81:12:0e:36:09:50:35: dc:d2:17:3a:c7:f7:6d:87:78:d5:66:f5:61:23:4c: 69:9c:53:80:7a:4c:3a:83:ad:ba:7f:3d:64:cb:00: b0:b9:7d:b5:fd:96:4f:13:8e:7f:3c:2d:df:c9:52: af:68:36:90:a1:d2:6a:fc:72:4e:96:8c:e7:e6:50: d5:01:f7:01:86:c3:4d:5c:99:b2:8b:59:f4:02:c9: 6c:03:d8:1e:5d:9b:dc:10:b6:6b:f0:c8:55:45:46: dc:0b:4a:54:30:92:29:89:a2:c1:f8:8b:c9:dd:e5: 2f:94:ac:1d:27:4c:4e:36:24:63:0b:b8:37:5d:b4: 49:8f:a7:ad:bb:1f:0a:bc:c8:24:76:06:d2:47:68: dc:5b:6c:95:2e:37:22:6e:ea:ef:12:6c:6e:b9:20: 10:20:84:0a:d6:c7:ae:dd:93:8e:1f:48:c2:c3:c6: 14:45:87:62:d6:7b:2b:e6:92:74:21:1d:f5:d9:a9: 99:8f:2a:bb:5b:7a:31:a0:dd:d9:e4:35:94:05:29: 94:e5:de:fe:bc:7f:39:10:6c:5a:a9:30:57:05:c1: 6d:a2:39:7e:b3:77:81:08:9c:c4:8b:4e:e8:99:d3: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9D:C5:F9:04:04:D3:5D:EC:67:DC:70:6C:21:5F:42:EE:B4:EA:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d92877a-7c20-3184-b1c8-05db6e9907a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e4:68:81:c9:ef:cd:00:fd:b1:34:11:05:36:72:24:d0:19: a5:72:2a:5c:3b:b3:77:31:62:17:1b:06:7a:10:ef:bf:ae:81: 59:75:25:aa:48:43:ec:97:1d:4b:e7:b1:c0:c9:dd:5e:73:29: 04:38:fd:ac:78:80:43:45:49:73:ec:4a:be:24:45:e7:4e:49: 0e:99:2e:1a:2d:9f:0a:fc:1d:72:c8:c2:2d:bf:d4:30:a0:74: 88:8a:ca:36:cb:fa:b7:28:f0:01:54:01:cd:7e:b7:b8:00:80: b3:2f:99:80:ba:42:aa:e6:93:ff:a4:78:d3:e2:e5:7f:83:d1: e1:6b:0f:41:87:86:ba:04:0b:a6:a7:aa:af:a8:4b:ba:d7:f0: 4e:e4:53:ab:ba:e1:04:b1:42:62:de:93:47:a2:f2:d9:b1:84: 16:7b:bf:0f:62:82:6c:a6:51:61:9c:6c:28:21:1c:27:b7:fc: 05:68:ff:03:9b:16:64:78:db:82:3b:c1:48:17:06:41:ec:4a: 4c:14:98:75:61:c7:d4:4c:6c:75:67:88:9f:de:40:ca:45:30: 01:41:26:37:9a:fe:e5:ad:d9:a2:0a:07:05:54:37:ed:80:3d: 27:d5:49:4b:f4:df:68:36:8e:ae:14:79:2d:ec:53:9b:95:b1: 5d:7a:65:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9SECzbzpIX2o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk ODczMTE0NmItNDM1Yi00YjVmLTk3YWMtZWE2YTMxYmY2NWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9nmQKQ2n0E3AeCgrrzXAm2onBrIbIESDjYJ UDXc0hc6x/dth3jVZvVhI0xpnFOAekw6g626fz1kywCwuX21/ZZPE45/PC3fyVKv aDaQodJq/HJOlozn5lDVAfcBhsNNXJmyi1n0AslsA9geXZvcELZr8MhVRUbcC0pU MJIpiaLB+IvJ3eUvlKwdJ0xONiRjC7g3XbRJj6etux8KvMgkdgbSR2jcW2yVLjci burvEmxuuSAQIIQK1seu3ZOOH0jCw8YURYdi1nsr5pJ0IR312amZjyq7W3oxoN3Z 5DWUBSmU5d7+vH85EGxaqTBXBcFtojl+s3eBCJzEi07omdPEwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH+dxfkEBNNd7GfccGwhX0LutOrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQ5Mjg3N2EtN2MyMC0z MTg0LWIxYzgtMDVkYjZlOTkwN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfkaIHJ780A/bE0EQU2ciTQGaVyKlw7s3cxYhcbBnoQ77+ugVl1 JapIQ+yXHUvnscDJ3V5zKQQ4/ax4gENFSXPsSr4kRedOSQ6ZLhotnwr8HXLIwi2/ 1DCgdIiKyjbL+rco8AFUAc1+t7gAgLMvmYC6Qqrmk/+keNPi5X+D0eFrD0GHhroE C6anqq+oS7rX8E7kU6u64QSxQmLek0ei8tmxhBZ7vw9igmymUWGcbCghHCe3/AVo /wObFmR424I7wUgXBkHsSkwUmHVhx9RMbHVniJ/eQMpFMAFBJjea/uWt2aIKBwVU N+2APSfVSUv032g2jq4UeS3sU5uVsV16ZR8= -----END CERTIFICATE-----Generated at Fri Jun 6 19:16:58 2025 by rpki-client