$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/80bbffe0-ec51-314e-b879-b0b769331216.roa File: 80bbffe0-ec51-314e-b879-b0b769331216.roa (raw, json) Hash identifier: hxmtgu47kWEzYVgEd3HbMro4aIDuuDlR4NDv6dj/Vrk= Subject key identifier: 2E:E1:C3:5A:6A:8E:F7:50:3B:74:E1:75:26:C4:E7:6D:5E:E2:CC:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D67492D5426701FF6F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/80bbffe0-ec51-314e-b879-b0b769331216.roa Signing time: Tue 03 Jun 2025 12:47:23 +0000 ROA not before: Tue 03 Jun 2025 12:47:23 +0000 ROA not after: Mon 01 Sep 2025 12:47:23 +0000 asID: 396602 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d6:74:92:d5:42:67:01:ff:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:23 2025 GMT Not After : Sep 1 12:47:23 2025 GMT Subject: CN=f771d28b-67d1-4ed2-a4e6-ecd15ba18663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9c:23:1b:58:de:ef:1c:ae:6f:88:dc:67:a0: 66:67:7f:02:61:5a:78:b8:2e:c1:6e:45:7c:59:a5: 4e:aa:f5:b4:b3:ce:15:c9:3a:4d:bc:10:cb:2a:fe: 25:d8:cb:69:e2:b8:e6:64:6c:c9:f4:88:b7:61:97: c9:65:f0:6d:1c:25:94:e9:ac:8b:d8:17:6a:4c:23: eb:e6:6b:0b:29:6b:7d:e5:d7:04:54:3d:8c:a6:6f: f3:f2:c5:d4:03:42:9d:66:6a:31:a3:c7:b0:fb:48: fc:88:00:ba:2a:2c:36:46:6d:1d:2c:d4:bf:78:a3: 28:a3:35:04:69:74:aa:ae:97:39:ee:25:56:a1:c2: 3a:1a:b8:b9:09:83:48:97:b3:83:c5:a6:7b:60:53: f4:86:85:c4:74:68:08:06:cf:a1:5e:98:1e:c9:0e: e8:8d:45:0c:41:c2:37:7c:90:b3:f5:6a:03:5c:3c: d1:b9:9e:bd:90:05:1d:b5:b7:54:fe:78:37:4a:8c: 07:7f:f4:ca:be:6a:40:9f:0f:64:77:e1:0f:e2:ab: 50:fa:1c:85:8d:f1:dc:e4:d0:9d:b5:07:05:4c:d4: 3d:89:b7:ae:5d:4d:25:63:e0:80:86:91:ea:1c:9f: 91:48:6c:69:12:06:d4:55:f6:60:73:47:42:72:44: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E1:C3:5A:6A:8E:F7:50:3B:74:E1:75:26:C4:E7:6D:5E:E2:CC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/80bbffe0-ec51-314e-b879-b0b769331216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:72:43:58:79:66:e5:65:01:16:64:a6:92:cb:33:4d:f4:86: 22:bf:de:ca:0e:87:b9:a7:e4:f7:10:4d:91:17:a4:44:5f:52: fc:b6:ed:fc:4e:69:d2:74:94:ee:20:ab:6a:e4:02:fc:61:42: b3:19:71:0a:fb:c0:77:76:36:19:8b:e2:85:9a:23:87:87:52: 49:b6:e7:a4:a6:b7:1f:61:60:3b:60:28:8f:08:12:03:26:ec: 69:62:35:43:a6:f0:aa:73:5b:3f:a0:5e:e6:96:b5:42:b1:ea: 84:4d:62:d9:28:71:bf:be:13:e1:b6:d3:ea:ce:b8:93:fc:c9: d6:05:85:9a:23:dd:1f:2a:e9:f7:10:fe:dd:98:3e:32:75:d9: 71:35:63:9f:83:69:f0:bf:e8:a0:5c:1a:33:3b:c4:e9:c0:eb: 76:3e:cf:20:60:e2:21:b4:35:fe:c9:44:48:76:8f:fc:ad:96: ec:8a:e9:b2:0d:4d:84:af:3c:78:ca:58:3e:17:28:ad:63:ba: 2b:2f:30:03:91:4f:b7:3d:21:37:35:4f:78:2d:aa:59:55:d4: ae:6f:13:11:8f:51:f5:16:3e:8d:b1:33:9a:62:58:82:1c:09: c4:22:9b:5c:4f:9e:23:75:71:e7:25:4f:34:cb:98:42:86:78: ac:3d:24:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9Z0ktVCZwH/b0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyM1oXDTI1MDkwMTEyNDcyM1owLzEtMCsGA1UEAxMk Zjc3MWQyOGItNjdkMS00ZWQyLWE0ZTYtZWNkMTViYTE4NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5wjG1je7xyub4jcZ6BmZ38CYVp4uC7BbkV8 WaVOqvW0s84VyTpNvBDLKv4l2Mtp4rjmZGzJ9Ii3YZfJZfBtHCWU6ayL2BdqTCPr 5msLKWt95dcEVD2Mpm/z8sXUA0KdZmoxo8ew+0j8iAC6Kiw2Rm0dLNS/eKMoozUE aXSqrpc57iVWocI6Gri5CYNIl7ODxaZ7YFP0hoXEdGgIBs+hXpgeyQ7ojUUMQcI3 fJCz9WoDXDzRuZ69kAUdtbdU/ng3SowHf/TKvmpAnw9kd+EP4qtQ+hyFjfHc5NCd tQcFTNQ9ibeuXU0lY+CAhpHqHJ+RSGxpEgbUVfZgc0dCckSp6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC7hw1pqjvdQO3ThdSbE521e4syZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODBiYmZmZTAtZWM1MS0z MTRlLWI4NzktYjBiNzY5MzMxMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhyQ1h5ZuVlARZkppLLM030hiK/3soOh7mn5PcQTZEXpERfUvy2 7fxOadJ0lO4gq2rkAvxhQrMZcQr7wHd2NhmL4oWaI4eHUkm256Smtx9hYDtgKI8I EgMm7GliNUOm8KpzWz+gXuaWtUKx6oRNYtkocb++E+G20+rOuJP8ydYFhZoj3R8q 6fcQ/t2YPjJ12XE1Y5+DafC/6KBcGjM7xOnA63Y+zyBg4iG0Nf7JREh2j/ytluyK 6bINTYSvPHjKWD4XKK1juisvMAORT7c9ITc1T3gtqllV1K5vExGPUfUWPo2xM5pi WIIcCcQim1xPniN1ceclTzTLmEKGeKw9JGs= -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:36 2025 by rpki-client