$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8667bac1-abb9-3ea9-ac69-51c28073912f.roa File: 8667bac1-abb9-3ea9-ac69-51c28073912f.roa (raw, json) Hash identifier: ayfyF+brLXlz/+GZ1r+hyJVdMGSizjsIB1hwa+kvwE8= Subject key identifier: DC:E7:EA:7E:20:5C:84:B3:FB:EC:6E:33:DE:DF:AF:7F:FF:70:2B:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D2ACF3264708E7EC3180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8667bac1-abb9-3ea9-ac69-51c28073912f.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396555 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:ac:f3:26:47:08:e7:ec:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=5908a5e6-844e-4083-8a20-2d9971d99a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:a1:49:5f:fb:bc:65:d0:b5:e9:b0:66:5c: 22:68:b8:b1:e3:1a:d0:f5:43:5d:f8:31:93:0c:f9: 41:90:85:2d:1d:95:e2:44:a4:4a:7a:47:05:94:a1: 1e:6a:11:32:78:c5:97:1f:2f:96:04:45:f6:3c:72: cb:18:59:db:bf:30:13:41:77:bf:85:cf:ae:52:6c: 4e:e8:25:2a:96:d9:23:c4:b3:1d:19:ec:49:da:e2: 2b:1c:5f:07:65:81:da:a2:de:65:bc:67:33:3a:bc: 75:b3:22:a8:b3:c1:bc:10:57:11:45:57:46:b7:c8: 25:19:c1:c3:e9:02:13:d7:d2:5c:e4:e7:8a:4f:3a: ce:ae:13:8b:cf:0c:39:c5:e6:e0:72:f0:b5:f4:4d: 65:41:13:e2:74:7a:fc:9c:a4:cb:22:95:1d:0d:db: 57:dc:b9:7e:cd:f2:63:35:a0:a2:13:9e:f7:87:db: 7a:1b:2d:1c:ff:aa:ef:65:78:57:8c:59:88:f7:47: 70:61:d9:1a:e7:fb:34:68:4d:16:52:e5:16:14:f7: bc:47:82:8e:18:7e:51:c7:0a:90:0a:56:16:7c:08: 17:76:f8:0d:25:42:06:f8:00:40:82:fb:a7:59:e4: 09:72:52:5f:cd:e2:03:47:3a:f4:26:cf:7c:d2:b2: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E7:EA:7E:20:5C:84:B3:FB:EC:6E:33:DE:DF:AF:7F:FF:70:2B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8667bac1-abb9-3ea9-ac69-51c28073912f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f8:20:51:8b:f0:97:60:6b:86:3e:1a:33:98:81:e4:f8:6f: 0d:b6:c4:05:0d:eb:f2:21:c7:ee:c4:90:b9:bf:52:d6:bb:21: aa:9a:8f:13:a0:95:65:2e:ed:8b:6a:f2:c2:39:b7:4e:4a:91: 82:47:68:c8:e4:bb:04:9f:a7:87:e6:a9:cc:e0:24:8f:4c:b9: 70:16:b2:c2:8a:05:9b:54:69:fb:de:32:6f:48:2e:09:51:e3: fb:d9:c8:af:e5:87:0c:20:df:e0:b8:06:10:12:e6:7e:fd:e2: ba:ce:33:b8:76:47:dd:13:ad:1d:da:34:b7:4b:08:a6:df:15: aa:f7:e9:ce:90:5b:52:85:e0:b7:fb:8d:38:a1:62:a5:0e:c3: 83:81:12:c0:98:28:81:c1:b8:9d:a2:14:ab:a6:a0:cd:b7:7a: ac:3a:84:69:55:a7:d4:8a:fd:88:96:6d:44:82:e6:1f:83:54: 68:80:87:5d:2f:90:3d:7a:85:3a:89:78:50:88:f6:4a:8b:64: 4d:bf:1a:85:12:c9:64:b4:c1:7e:80:79:cd:b9:55:45:43:c2: 30:b8:66:0e:c5:1c:60:85:a4:23:58:47:5b:f4:03:75:51:5e: 08:55:be:95:4f:35:cd:20:78:0c:f3:50:46:13:42:cb:68:6c: 57:3a:9d:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9Ks8yZHCOfsMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk NTkwOGE1ZTYtODQ0ZS00MDgzLThhMjAtMmQ5OTcxZDk5YTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OyhSV/7vGXQtemwZlwiaLix4xrQ9UNd+DGT DPlBkIUtHZXiRKRKekcFlKEeahEyeMWXHy+WBEX2PHLLGFnbvzATQXe/hc+uUmxO 6CUqltkjxLMdGexJ2uIrHF8HZYHaot5lvGczOrx1syKos8G8EFcRRVdGt8glGcHD 6QIT19Jc5OeKTzrOrhOLzww5xebgcvC19E1lQRPidHr8nKTLIpUdDdtX3Ll+zfJj NaCiE573h9t6Gy0c/6rvZXhXjFmI90dwYdka5/s0aE0WUuUWFPe8R4KOGH5RxwqQ ClYWfAgXdvgNJUIG+ABAgvunWeQJclJfzeIDRzr0Js980rLbJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNzn6n4gXISz++xuM97fr3//cCtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODY2N2JhYzEtYWJiOS0z ZWE5LWFjNjktNTFjMjgwNzM5MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABL4IFGL8Jdga4Y+GjOYgeT4bw22xAUN6/Ihx+7EkLm/Uta7Iaqa jxOglWUu7Ytq8sI5t05KkYJHaMjkuwSfp4fmqczgJI9MuXAWssKKBZtUafveMm9I LglR4/vZyK/lhwwg3+C4BhAS5n794rrOM7h2R90TrR3aNLdLCKbfFar36c6QW1KF 4Lf7jTihYqUOw4OBEsCYKIHBuJ2iFKumoM23eqw6hGlVp9SK/YiWbUSC5h+DVGiA h10vkD16hTqJeFCI9kqLZE2/GoUSyWS0wX6Aec25VUVDwjC4Zg7FHGCFpCNYR1v0 A3VRXghVvpVPNc0geAzzUEYTQstobFc6nQQ= -----END CERTIFICATE-----Generated at Sat Jun 7 11:50:36 2025 by rpki-client