$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa File: 7f50af9e-2962-3c73-891b-2b2f216346f9.roa (raw, json) Hash identifier: u4cDHsIlL2pmPaq/F6AJ/LwmYAuN73XrR/7OKh1W6/8= Subject key identifier: 18:42:E1:08:2C:B2:99:96:4E:88:96:1A:53:F4:8C:93:C4:33:52:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D3B2C07205F6610C2F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396608 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d3:b2:c0:72:05:f6:61:0c:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=9d7eb726-c6f2-424d-9715-b6a917831afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:2b:bf:5e:96:ee:88:cf:b8:05:69:5b:fc: d0:e3:69:99:1f:85:f3:5c:f6:96:de:f8:c3:b9:86: 65:50:d0:d4:37:07:37:3c:8a:0c:23:88:7c:fb:28: b3:1d:76:11:bb:87:52:b4:9a:e7:29:1e:88:d3:4f: 9d:77:c9:58:97:14:d5:fa:65:22:5b:87:f2:86:65: 24:b9:c4:b2:2c:59:9e:24:e6:68:54:fe:80:85:99: 71:d6:0c:d0:45:ba:15:82:bf:82:24:d5:41:6b:17: 8c:cf:5d:9d:27:2e:6b:71:4b:28:a6:8a:df:3c:1a: 33:77:5b:a9:f6:29:77:76:42:94:07:29:76:96:08: 73:12:b3:21:c5:d0:32:97:38:b7:9e:6b:ff:94:19: 65:ce:b5:dc:54:c9:83:09:ac:22:5c:7c:15:9b:11: a8:04:91:26:15:4e:c1:1f:c1:1e:9b:ae:cd:f0:af: a5:29:4e:10:ed:1b:ab:db:d0:e9:99:88:aa:4c:32: ef:73:a7:51:71:aa:10:39:13:5b:2c:e1:8f:d1:bd: 53:4b:16:9c:32:21:7c:f4:0a:61:07:b1:99:58:a2: 24:0d:b6:ce:49:f4:7a:c6:50:9a:12:ea:ec:55:6d: 86:fe:a3:40:4b:20:23:94:4b:1f:28:e1:cc:ee:34: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:42:E1:08:2C:B2:99:96:4E:88:96:1A:53:F4:8C:93:C4:33:52:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:44:c8:2e:26:76:3e:26:4f:b5:51:fb:28:27:a6:35:fb:e0: ef:88:30:d2:01:ce:0b:3a:ea:5b:95:a9:00:73:d1:22:67:c6: e1:06:bc:a1:68:1f:3e:0e:75:9b:91:25:71:6a:50:33:41:cd: 32:06:f4:c7:9a:af:1d:b1:4e:d5:d0:1c:ad:be:25:4e:6f:9e: a8:64:e1:02:df:8a:b1:c5:42:f3:d4:17:2b:02:7f:f9:30:8d: 28:2b:54:4d:7b:ce:e1:50:e4:a8:d3:7c:e7:fe:1e:b1:4a:94: 5e:39:f2:83:fd:21:b9:c6:a3:aa:0c:8b:20:85:66:8e:ce:a1: 77:a7:8c:3e:14:23:1c:c9:50:1d:f7:57:2f:56:a1:ca:ab:f4: 5d:7e:05:23:9d:c3:55:90:92:01:c6:44:28:bf:c2:44:5b:da: 97:7e:b8:fb:3b:f2:eb:fe:96:92:4b:ff:47:4d:80:8b:2c:95: 55:df:54:0c:4c:71:52:d0:a5:07:5a:59:8d:da:7d:a9:4a:de: 71:7b:47:e8:be:9c:11:d5:8f:ed:18:98:01:af:db:31:a6:e5: fe:cf:95:81:f0:fc:1c:db:93:ed:5b:51:5e:e5:30:12:99:6c: cb:13:3c:80:01:ee:3f:00:ca:44:62:f1:ca:1c:76:eb:75:40: 9a:ab:d1:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9OywHIF9mEMLyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk OWQ3ZWI3MjYtYzZmMi00MjRkLTk3MTUtYjZhOTE3ODMxYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioYrv16W7ojPuAVpW/zQ42mZH4XzXPaW3vjD uYZlUNDUNwc3PIoMI4h8+yizHXYRu4dStJrnKR6I00+dd8lYlxTV+mUiW4fyhmUk ucSyLFmeJOZoVP6AhZlx1gzQRboVgr+CJNVBaxeMz12dJy5rcUsoporfPBozd1up 9il3dkKUByl2lghzErMhxdAylzi3nmv/lBllzrXcVMmDCawiXHwVmxGoBJEmFU7B H8Eem67N8K+lKU4Q7Rur29DpmYiqTDLvc6dRcaoQORNbLOGP0b1TSxacMiF89Aph B7GZWKIkDbbOSfR6xlCaEursVW2G/qNASyAjlEsfKOHM7jSPowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBhC4QgsspmWToiWGlP0jJPEM1I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y1MGFmOWUtMjk2Mi0z YzczLTg5MWItMmIyZjIxNjM0NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFxEyC4mdj4mT7VR+ygnpjX74O+IMNIBzgs66luVqQBz0SJnxuEG vKFoHz4OdZuRJXFqUDNBzTIG9Mearx2xTtXQHK2+JU5vnqhk4QLfirHFQvPUFysC f/kwjSgrVE17zuFQ5KjTfOf+HrFKlF458oP9IbnGo6oMiyCFZo7OoXenjD4UIxzJ UB33Vy9Wocqr9F1+BSOdw1WQkgHGRCi/wkRb2pd+uPs78uv+lpJL/0dNgIsslVXf VAxMcVLQpQdaWY3afalK3nF7R+i+nBHVj+0YmAGv2zGm5f7PlYHw/Bzbk+1bUV7l MBKZbMsTPIAB7j8AykRi8cocdut1QJqr0cE= -----END CERTIFICATE-----Generated at Fri Jun 6 19:44:41 2025 by rpki-client