$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa File: 7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa (raw, json) Hash identifier: Pp5pcicpDfy3WJwbFsgUTkd+W0O6CptDlIqLFp6nYrQ= Subject key identifier: 78:78:A6:AC:E1:2B:43:A7:CE:6B:DA:55:26:00:2C:D5:14:3D:38:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D290334E0F0A85635F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396611 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:90:33:4e:0f:0a:85:63:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=8e035d4f-3ee8-4143-9690-90ddf0b48cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3b:65:7b:40:04:3d:38:71:43:a5:ec:ae:3c: f7:f8:07:86:54:b0:6c:79:77:9f:1b:f7:8b:93:a6: 26:03:fa:cf:29:70:cc:65:6e:56:09:c3:83:5a:69: c0:ee:bb:82:c2:ba:c0:d1:e1:71:ec:fe:a6:e4:fd: 05:4a:51:16:58:37:6e:ac:0b:79:c3:a6:93:d9:af: 10:e5:2a:27:b5:09:f6:c8:10:9a:1e:b7:75:45:06: 68:64:81:72:d5:b6:1a:ec:05:ee:79:b4:8a:0c:35: eb:d2:49:c0:b0:ce:d1:d0:53:7e:1c:5f:88:77:6a: 2a:37:37:16:e0:fc:67:58:24:78:f2:98:af:08:c1: 7e:b4:8e:77:bd:85:60:13:52:e7:e3:54:fd:94:2a: 2c:c7:9e:20:12:d2:db:4e:36:41:0a:26:06:1b:2a: bb:c4:96:fc:bf:20:0c:b0:ac:d2:f5:c5:b9:4b:f1: 85:fb:d1:4d:07:2f:bc:a9:3c:7d:fc:e4:e6:d8:6c: dd:b2:0b:30:fa:8b:4d:c0:e9:bf:9b:a1:9a:76:d2: 2a:66:f2:4e:11:b7:76:6c:18:56:bf:0f:ff:ed:cb: 7b:57:36:2f:a9:ae:10:2a:e1:f5:49:23:25:5e:bb: fd:f7:58:3f:50:d9:23:82:af:ee:23:93:cf:ea:03: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:78:A6:AC:E1:2B:43:A7:CE:6B:DA:55:26:00:2C:D5:14:3D:38:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:69:f9:a1:14:42:93:2d:c7:94:44:78:9c:0b:18:ff:27:c0: ad:cf:c2:a1:e8:7c:b1:74:6b:ca:f2:4c:98:01:0a:b6:e3:a7: b5:62:ac:41:42:53:df:70:5c:c3:98:bd:f1:2c:f0:ee:59:b7: 1c:33:df:c1:52:5a:de:ad:fb:a3:71:46:f7:d0:b2:15:83:16: 6e:f5:f7:c1:14:59:18:2e:38:d8:9d:f6:bf:17:98:32:98:c7: bb:15:ce:bf:70:27:2d:9e:bc:32:64:19:54:8f:c8:d8:a2:24: e7:97:33:f6:08:9e:25:b7:d7:50:45:13:b6:34:e0:19:a0:18: b0:cd:fb:98:f6:22:88:ca:a1:20:b4:4e:04:2c:ef:1f:d2:0e: 5c:b3:f1:be:2a:cd:68:35:c6:bb:dc:e0:e8:62:2f:1a:05:0c: db:e0:6d:74:3a:2e:b1:2c:de:df:64:da:7b:15:96:3d:e8:ee: c7:5b:39:f4:fa:42:2f:bc:7f:7c:0f:66:3a:21:e5:8c:f2:4e: 82:ea:65:9f:e7:98:73:21:52:03:2b:15:32:3d:2c:38:1d:a0: b6:d5:2c:5e:54:2f:f9:24:c9:35:65:e3:99:07:f2:65:cf:06: 89:63:33:7c:01:9d:94:88:90:2f:a3:af:23:68:92:6c:0b:6b: a1:72:91:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9KQM04PCoVjX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk OGUwMzVkNGYtM2VlOC00MTQzLTk2OTAtOTBkZGYwYjQ4Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiztle0AEPThxQ6Xsrjz3+AeGVLBseXefG/eL k6YmA/rPKXDMZW5WCcODWmnA7ruCwrrA0eFx7P6m5P0FSlEWWDdurAt5w6aT2a8Q 5SontQn2yBCaHrd1RQZoZIFy1bYa7AXuebSKDDXr0knAsM7R0FN+HF+Id2oqNzcW 4PxnWCR48pivCMF+tI53vYVgE1Ln41T9lCosx54gEtLbTjZBCiYGGyq7xJb8vyAM sKzS9cW5S/GF+9FNBy+8qTx9/OTm2Gzdsgsw+otNwOm/m6GadtIqZvJOEbd2bBhW vw//7ct7VzYvqa4QKuH1SSMlXrv991g/UNkjgq/uI5PP6gNmRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHh4pqzhK0OnzmvaVSYALNUUPThWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y5ZWQ2MWEtY2IyYy0z ZWM5LWE4MzEtNGEwYWRiMDFiNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlp+aEUQpMtx5REeJwLGP8nwK3PwqHofLF0a8ryTJgBCrbjp7Vi rEFCU99wXMOYvfEs8O5Ztxwz38FSWt6t+6NxRvfQshWDFm7198EUWRguONid9r8X mDKYx7sVzr9wJy2evDJkGVSPyNiiJOeXM/YIniW311BFE7Y04BmgGLDN+5j2IojK oSC0TgQs7x/SDlyz8b4qzWg1xrvc4OhiLxoFDNvgbXQ6LrEs3t9k2nsVlj3o7sdb OfT6Qi+8f3wPZjoh5YzyToLqZZ/nmHMhUgMrFTI9LDgdoLbVLF5UL/kkyTVl45kH 8mXPBoljM3wBnZSIkC+jryNokmwLa6FykTA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:51 2025 by rpki-client