$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/832f7531-9543-3b2c-af50-b3b421c30802.roa File: 832f7531-9543-3b2c-af50-b3b421c30802.roa (raw, json) Hash identifier: MQ/GSs3lANLCa5gshYRp3tNtoQ5oZ5AfmUQdoEc6k1M= Subject key identifier: 8E:89:FF:EC:06:B9:74:B1:7B:2B:21:C3:90:D9:A6:AE:47:16:16:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D218604CD598062FB8E8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/832f7531-9543-3b2c-af50-b3b421c30802.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396550 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:18:60:4c:d5:98:06:2f:b8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=c49476dd-576d-4c9c-ba2c-2aadac30571e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:0f:58:4f:94:4f:d4:71:d8:4a:3e:24:b5: 94:16:75:1d:7c:d2:ac:77:e6:4f:ef:0d:cf:d5:22: cd:de:f9:28:37:4d:de:d7:66:40:3f:e5:f5:54:89: 90:25:f1:9c:c9:d9:ca:31:26:b2:26:b2:14:68:a8: ad:44:c9:14:5f:fa:7f:bd:85:25:ce:6d:62:a2:44: 95:1c:b4:e6:7f:af:71:1e:aa:18:3a:4b:d8:ff:70: dc:39:d8:39:b7:bb:96:3c:b0:46:f6:97:df:d7:a4: ac:5b:cd:d6:4b:74:15:46:e5:52:84:26:07:05:55: 49:50:17:3e:78:b4:a5:a1:a8:a5:c1:f4:ee:65:0a: b3:e4:57:58:c5:5e:a0:04:c9:83:32:63:0d:dc:74: 81:00:c8:bd:9b:e8:4a:fe:45:3c:ea:d4:4e:04:d6: 82:14:86:17:fc:43:45:15:92:22:0b:90:e9:32:3d: 76:1e:eb:ec:9b:52:37:bd:0a:d4:ec:1c:25:89:0f: 15:99:a3:a5:09:a5:f5:b5:12:4b:b8:3a:bb:76:51: c2:0f:69:b1:35:40:99:ef:69:d4:9a:6a:cd:de:88: 73:6f:bf:ba:ad:e7:f6:19:2a:45:ff:7e:f8:af:c2: 28:5f:77:b7:ea:99:11:cc:53:55:90:2d:e6:16:34: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:FF:EC:06:B9:74:B1:7B:2B:21:C3:90:D9:A6:AE:47:16:16:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/832f7531-9543-3b2c-af50-b3b421c30802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:07:ad:8b:65:5b:7d:73:95:c2:14:a8:d3:56:12:2d:93:8c: 38:2e:8c:bd:09:25:48:f5:36:6b:83:19:66:fe:53:8b:45:48: 38:9f:2a:11:c2:be:b6:a6:b4:3e:9c:b0:dc:a2:8f:5e:11:f4: cb:ca:00:21:96:d2:d3:1e:10:13:02:61:82:22:81:d1:91:20: ff:f9:5d:aa:c9:94:78:f1:11:de:ac:0a:3c:34:8c:61:18:bc: 2e:a2:de:02:6e:13:7a:d1:ad:f0:38:38:ef:dd:8d:1c:c9:6d: 54:73:4a:8f:21:12:d5:83:f4:87:85:7f:22:be:90:c4:53:46: 88:d0:f0:5e:67:cf:45:83:e1:40:32:cb:bf:25:c9:36:e7:ac: af:05:a6:f8:1a:8f:27:36:34:20:6e:5f:cc:eb:58:ae:96:24: cb:8d:ff:4a:2e:82:d2:c3:98:39:dc:36:27:c5:8f:9c:7d:4e: be:95:9c:35:35:dd:bf:63:a1:af:0a:a0:56:c4:d3:f1:f0:32: bf:0f:67:21:11:b6:a1:7d:a7:48:b5:fc:51:78:ff:97:50:e8: bd:46:71:a1:9f:aa:5e:74:f1:be:d9:74:c7:93:e5:72:d3:40: ca:90:fb:f7:93:31:5a:c4:f0:d0:0c:0c:3b:59:4a:3a:ef:8e: c7:6c:c7:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9IYYEzVmAYvuOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk YzQ5NDc2ZGQtNTc2ZC00YzljLWJhMmMtMmFhZGFjMzA1NzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9kPWE+UT9Rx2Eo+JLWUFnUdfNKsd+ZP7w3P 1SLN3vkoN03e12ZAP+X1VImQJfGcydnKMSayJrIUaKitRMkUX/p/vYUlzm1iokSV HLTmf69xHqoYOkvY/3DcOdg5t7uWPLBG9pff16SsW83WS3QVRuVShCYHBVVJUBc+ eLSloailwfTuZQqz5FdYxV6gBMmDMmMN3HSBAMi9m+hK/kU86tROBNaCFIYX/ENF FZIiC5DpMj12Huvsm1I3vQrU7BwliQ8VmaOlCaX1tRJLuDq7dlHCD2mxNUCZ72nU mmrN3ohzb7+6ref2GSpF/374r8IoX3e36pkRzFNVkC3mFjTLuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI6J/+wGuXSxeyshw5DZpq5HFhbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODMyZjc1MzEtOTU0My0z YjJjLWFmNTAtYjNiNDIxYzMwODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHMHrYtlW31zlcIUqNNWEi2TjDgujL0JJUj1NmuDGWb+U4tFSDif KhHCvramtD6csNyij14R9MvKACGW0tMeEBMCYYIigdGRIP/5XarJlHjxEd6sCjw0 jGEYvC6i3gJuE3rRrfA4OO/djRzJbVRzSo8hEtWD9IeFfyK+kMRTRojQ8F5nz0WD 4UAyy78lyTbnrK8Fpvgajyc2NCBuX8zrWK6WJMuN/0ougtLDmDncNifFj5x9Tr6V nDU13b9joa8KoFbE0/HwMr8PZyERtqF9p0i1/FF4/5dQ6L1GcaGfql508b7ZdMeT 5XLTQMqQ+/eTMVrE8NAMDDtZSjrvjsdsx0k= -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:43 2025 by rpki-client