$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87b3ba05-5a6d-3546-9513-c7142c749d60.roa File: 87b3ba05-5a6d-3546-9513-c7142c749d60.roa (raw, json) Hash identifier: iQZWtxDMu/nT4Tul2qWKE82fF05gKecu5pvt4kL2bak= Subject key identifier: EE:C4:97:5F:0B:C3:58:44:0C:3D:62:C7:07:BF:A2:93:B5:D5:80:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D0FDF0E392836E59FBB8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87b3ba05-5a6d-3546-9513-c7142c749d60.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396553 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:fd:f0:e3:92:83:6e:59:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=0e07ff94-3e3c-4e65-b23a-13d189d09822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:b6:97:34:85:34:6c:fa:2b:d8:7c:76:63: 11:e8:16:d3:a4:b7:c9:f0:5a:d1:80:b9:20:1b:39: 2d:e0:b9:22:5e:d9:65:4d:4f:28:ec:c6:09:57:36: cf:fb:df:b2:a0:cb:92:a7:61:75:b8:30:4c:8b:e7: b7:c5:b0:12:b6:0c:65:65:e7:00:ff:ad:85:4c:d1: f0:cb:d2:8a:0f:9a:c9:32:76:39:62:c0:08:f0:9c: f8:75:1c:27:b1:ef:5f:27:f3:25:42:2a:5f:2d:74: 8a:37:58:11:a5:a0:47:4e:dc:6f:01:2d:e5:6a:43: 91:d2:4c:63:11:1b:97:9c:2c:2b:61:b8:58:ff:73: 8e:9d:4b:fc:74:eb:5c:f7:fe:d7:16:d4:d9:cb:93: e9:84:48:bb:ee:64:42:39:6d:e9:07:79:90:57:3f: 71:49:12:a4:da:cb:80:47:04:07:94:dd:1e:f4:3a: be:70:fc:64:40:17:9f:5d:1c:ee:d3:bb:c8:77:bb: 1d:ef:53:0c:02:21:e6:4d:02:ab:5d:15:01:dc:2a: f4:dc:d4:78:10:25:fb:d6:78:8f:ae:5e:85:b0:9f: cd:f2:07:9b:97:65:cb:f0:20:6c:85:5c:15:6a:b4: 39:50:8c:50:d5:37:9d:3c:98:e4:34:f6:0e:57:fe: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C4:97:5F:0B:C3:58:44:0C:3D:62:C7:07:BF:A2:93:B5:D5:80:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87b3ba05-5a6d-3546-9513-c7142c749d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7b:15:27:fb:98:75:c5:41:f7:70:63:71:01:bf:81:9d:22: 6e:1b:22:ef:3a:21:c7:84:4a:22:0b:26:4d:7e:a1:c4:cc:fc: a0:3b:b1:81:c9:52:ad:68:c4:60:12:3a:e3:37:4a:0d:c8:73: 66:17:5b:2c:5d:9f:cb:66:ba:00:00:93:c4:9a:27:55:c7:f7: b0:5d:4b:20:82:79:0d:1a:6b:86:f6:31:e0:47:02:95:5e:56: 13:fb:9c:98:10:79:ac:c7:c0:b7:14:d3:e9:01:ed:85:90:ba: 6f:81:4d:54:9b:76:4a:ef:8b:bf:61:bc:b0:fd:e1:81:b3:db: d1:c8:32:ea:89:c9:d0:f3:df:10:f8:7a:08:00:b6:15:fc:83: 51:18:b2:02:58:42:69:0f:a5:4e:83:ff:24:64:72:da:83:bc: 85:f0:5b:da:c1:d5:eb:1a:e2:93:80:6d:cb:70:47:7f:a9:7f: 9c:ad:50:08:4c:88:77:df:6e:a7:fa:61:e3:0a:7b:ba:34:09: 3f:02:dd:ac:63:f2:4e:ad:ad:ee:5b:54:41:e5:7e:06:76:f5: bf:0d:1f:a4:26:04:46:2c:47:c1:4a:18:f5:98:32:d3:ea:72: d9:47:d0:b3:9b:e2:1d:fe:2d:2b:4a:fb:7c:57:32:b0:e3:e5: d2:f0:09:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9D98OOSg25Z+7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk MGUwN2ZmOTQtM2UzYy00ZTY1LWIyM2EtMTNkMTg5ZDA5ODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin22lzSFNGz6K9h8dmMR6BbTpLfJ8FrRgLkg Gzkt4LkiXtllTU8o7MYJVzbP+9+yoMuSp2F1uDBMi+e3xbAStgxlZecA/62FTNHw y9KKD5rJMnY5YsAI8Jz4dRwnse9fJ/MlQipfLXSKN1gRpaBHTtxvAS3lakOR0kxj ERuXnCwrYbhY/3OOnUv8dOtc9/7XFtTZy5PphEi77mRCOW3pB3mQVz9xSRKk2suA RwQHlN0e9Dq+cPxkQBefXRzu07vId7sd71MMAiHmTQKrXRUB3Cr03NR4ECX71niP rl6FsJ/N8gebl2XL8CBshVwVarQ5UIxQ1TedPJjkNPYOV/61swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO7El18Lw1hEDD1ixwe/opO11YDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdiM2JhMDUtNWE2ZC0z NTQ2LTk1MTMtYzcxNDJjNzQ5ZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIR7FSf7mHXFQfdwY3EBv4GdIm4bIu86IceESiILJk1+ocTM/KA7 sYHJUq1oxGASOuM3Sg3Ic2YXWyxdn8tmugAAk8SaJ1XH97BdSyCCeQ0aa4b2MeBH ApVeVhP7nJgQeazHwLcU0+kB7YWQum+BTVSbdkrvi79hvLD94YGz29HIMuqJydDz 3xD4eggAthX8g1EYsgJYQmkPpU6D/yRkctqDvIXwW9rB1esa4pOAbctwR3+pf5yt UAhMiHffbqf6YeMKe7o0CT8C3axj8k6tre5bVEHlfgZ29b8NH6QmBEYsR8FKGPWY MtPqctlH0LOb4h3+LStK+3xXMrDj5dLwCcE= -----END CERTIFICATE-----Generated at Fri Jun 6 19:32:03 2025 by rpki-client