$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa File: 86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa (raw, json) Hash identifier: 3V7iHORHSBZtHQO0WcfDQoUx8R7S6m2wIttHIi1M7Yk= Subject key identifier: 3B:99:48:CA:7E:46:3F:18:AA:D9:D7:27:07:5F:7E:5C:CE:32:3E:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D492AF1B2EFA3FF8B800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 36617 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:92:af:1b:2e:fa:3f:f8:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=cced2dd3-7cd1-482e-9b64-3912096349b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:47:ef:dc:64:73:6a:1a:80:4e:17:d2:49:3a: 41:0e:52:39:eb:3c:09:fe:28:89:96:0e:09:dd:cd: 4f:93:3a:19:98:d7:d7:c5:81:96:2f:a7:fb:fc:cf: 23:47:d7:d5:71:8d:f2:a1:82:ef:60:2f:a3:ed:b2: fa:9d:ad:a4:58:15:ea:4c:e3:1b:39:f6:a9:bc:fa: d1:41:10:20:07:26:f3:b6:99:42:49:e2:b7:3f:45: 3c:8a:25:b6:1b:0d:6a:4b:c2:75:df:68:2a:74:70: d9:f5:dc:6c:30:4c:4a:f7:47:41:42:2a:64:2b:3d: 9d:d6:83:04:cf:23:23:88:52:3d:bc:ed:83:a7:5f: 60:3b:21:1e:32:0e:29:b4:4f:e1:2b:d6:21:cd:91: 65:26:66:22:b4:22:dc:e9:bc:8d:9b:e2:a5:fc:7b: 24:2e:15:6b:67:31:eb:79:ba:de:fe:bf:ee:eb:22: fd:f3:10:19:14:55:2b:b5:2e:97:e3:32:70:71:35: 4e:15:da:11:eb:c5:70:14:7b:f5:03:37:97:6f:aa: 9a:a3:9e:16:a5:aa:29:3a:2e:0d:8f:54:a4:79:4e: dc:45:76:57:41:15:b3:a2:a7:23:3f:a0:99:23:88: 8a:08:ab:59:75:ac:73:72:36:61:36:9e:60:0e:5c: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:99:48:CA:7E:46:3F:18:AA:D9:D7:27:07:5F:7E:5C:CE:32:3E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c6:06:75:5c:a0:ec:ba:65:75:42:2b:cc:14:49:91:98:4d: 63:f3:55:97:bd:12:91:43:f2:f8:68:72:ef:b6:00:39:16:97: da:90:83:cc:1d:81:fd:54:22:30:0c:f3:9a:c2:25:12:1c:a1: d1:63:d4:d4:d3:b8:40:47:be:28:2d:73:68:20:28:58:b7:8e: a9:1d:90:f2:66:21:4d:6d:b1:ce:5e:1c:4a:b1:f9:7e:33:cb: 93:0a:58:a6:5b:37:b7:38:b2:e3:d7:98:6f:24:8f:8a:3b:b7: 81:8e:57:3f:10:f6:af:25:22:2f:2b:67:40:98:05:1a:1e:f9: 83:df:5d:cd:b3:30:84:b5:35:00:c2:b2:8d:a2:00:cd:ef:53: 48:4e:1e:30:5b:94:cd:83:84:c3:0c:18:81:49:1a:91:fb:be: 25:f5:b4:3a:38:ee:05:b1:19:9a:37:d9:ba:b7:ae:a5:e2:04: c7:3a:92:0c:6f:00:53:bd:86:83:a2:8a:b7:b2:30:82:32:53: b9:1a:c1:a5:c0:19:9c:c7:44:ff:ac:01:eb:6c:0a:4c:7a:b2: 3b:f8:92:cf:a9:bb:c4:7b:55:bb:fb:93:10:aa:f7:f0:e1:2f: 7d:0f:2a:7c:19:e8:70:bc:ff:b8:b9:ab:85:22:f1:d6:71:fc: ff:a2:bf:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9SSrxsu+j/4uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk Y2NlZDJkZDMtN2NkMS00ODJlLTliNjQtMzkxMjA5NjM0OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ufv3GRzahqAThfSSTpBDlI56zwJ/iiJlg4J 3c1PkzoZmNfXxYGWL6f7/M8jR9fVcY3yoYLvYC+j7bL6na2kWBXqTOMbOfapvPrR QRAgBybztplCSeK3P0U8iiW2Gw1qS8J132gqdHDZ9dxsMExK90dBQipkKz2d1oME zyMjiFI9vO2Dp19gOyEeMg4ptE/hK9YhzZFlJmYitCLc6byNm+Kl/HskLhVrZzHr ebre/r/u6yL98xAZFFUrtS6X4zJwcTVOFdoR68VwFHv1AzeXb6qao54WpaopOi4N j1SkeU7cRXZXQRWzoqcjP6CZI4iKCKtZdaxzcjZhNp5gDlynrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDuZSMp+Rj8YqtnXJwdfflzOMj5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODZkNWQ2Y2EtZDM2MS0z N2M2LWIzZWMtNjJjZDY4YTgyMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHrGBnVcoOy6ZXVCK8wUSZGYTWPzVZe9EpFD8vhocu+2ADkWl9qQ g8wdgf1UIjAM85rCJRIcodFj1NTTuEBHvigtc2ggKFi3jqkdkPJmIU1tsc5eHEqx +X4zy5MKWKZbN7c4suPXmG8kj4o7t4GOVz8Q9q8lIi8rZ0CYBRoe+YPfXc2zMIS1 NQDCso2iAM3vU0hOHjBblM2DhMMMGIFJGpH7viX1tDo47gWxGZo32bq3rqXiBMc6 kgxvAFO9hoOiireyMIIyU7kawaXAGZzHRP+sAetsCkx6sjv4ks+pu8R7Vbv7kxCq 9/DhL30PKnwZ6HC8/7i5q4Ui8dZx/P+ivxU= -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:33 2025 by rpki-client