$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa File: 89e103cc-8b9a-3365-af39-2f05d98c2b26.roa (raw, json) Hash identifier: nRYlE679+CvOVB4TuMkCdY7sm4rnkQdsqusqDBgNAE8= Subject key identifier: 53:7E:85:29:0D:30:03:2B:23:1F:FF:00:97:B1:0C:26:79:0A:53:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193CFD089954D76D5298F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 10515 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:cf:d0:89:95:4d:76:d5:29:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=8f0d6d41-9f7d-4b98-8a34-149551e3ddd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:49:0c:a4:02:cc:d9:5a:f2:cf:e1:aa:a7: 4a:cf:2c:fc:76:9d:34:57:15:88:f5:4d:7f:d1:74: f8:d1:62:ef:cd:a4:55:cb:50:5a:c0:33:8e:e3:2c: 4a:33:d2:52:84:74:83:7d:57:65:b2:ef:2e:ff:c7: bd:21:e6:e1:b7:48:34:e6:26:af:ac:d3:13:6f:1d: 5d:b1:75:cd:15:17:25:d6:c4:0d:14:6f:43:c9:26: b1:bd:22:21:a4:6f:8b:81:d2:4f:08:bf:bc:27:f1: 57:58:86:79:b2:5f:f3:f4:87:fd:39:57:52:42:1e: 44:8c:18:95:84:d6:62:c1:75:0f:34:25:4e:17:74: 4a:d5:2b:75:b2:d9:53:02:55:e7:e7:84:25:99:a0: 29:d4:27:8e:18:f9:7c:d9:a3:6d:47:85:1b:eb:58: 2e:62:08:be:40:fd:68:b6:e9:8a:3f:cc:c0:be:6b: 80:e8:41:23:42:ed:75:37:e1:9e:e2:44:1e:b7:c7: 1a:97:d9:72:a7:ed:0b:88:05:ad:d1:61:4f:79:46: 75:d5:79:79:5e:1e:23:02:f3:72:85:c2:23:33:ed: 72:e1:bf:6f:d8:b5:b6:6b:99:47:83:6e:b5:f5:02: 24:3f:39:a6:17:f6:a1:04:ff:69:76:20:a0:ee:42: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7E:85:29:0D:30:03:2B:23:1F:FF:00:97:B1:0C:26:79:0A:53:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7c:6d:49:99:5b:52:5c:77:8a:6f:c4:be:1a:0d:b7:51:f8: 19:49:6d:55:1e:1b:9f:94:84:dd:ab:a1:42:04:39:46:99:25: 2e:3f:53:db:0a:98:96:bd:78:39:61:32:ca:d3:e8:7f:8c:cd: 5b:74:cb:c2:03:02:f1:ce:e5:83:5a:81:21:4d:19:54:92:5f: fd:ae:c8:ad:17:39:42:45:3f:ec:70:4d:99:de:04:b6:02:4a: 54:cb:58:f7:27:df:c3:8f:a2:fc:38:3b:42:80:93:d6:3e:9f: 2d:60:24:a0:98:26:91:45:fd:69:a5:3c:15:6a:8f:38:6e:85: 01:82:33:f4:ec:21:11:a1:44:8f:a8:0d:56:b3:bd:c0:73:c7: db:e0:3f:42:4c:31:93:d0:bd:53:f0:a2:df:a1:38:e3:95:ed: b1:66:2b:f8:2d:ce:18:03:20:19:90:19:9e:a7:ea:cc:e0:6f: ff:73:8c:76:68:bf:db:d9:9b:7b:04:b5:18:e9:40:42:16:1a: 1b:86:5f:69:28:73:da:e9:d4:0b:06:9a:5a:9f:28:40:24:f7: 4c:f1:11:c5:91:86:31:32:0c:88:57:53:69:3f:4a:48:c3:7d: bc:54:7a:6d:81:bd:ee:1e:3a:10:2a:a6:9a:95:26:bc:09:04: 89:4b:8a:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk8/QiZVNdtUpjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk OGYwZDZkNDEtOWY3ZC00Yjk4LThhMzQtMTQ5NTUxZTNkZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeRJDKQCzNla8s/hqqdKzyz8dp00VxWI9U1/ 0XT40WLvzaRVy1BawDOO4yxKM9JShHSDfVdlsu8u/8e9Iebht0g05iavrNMTbx1d sXXNFRcl1sQNFG9DySaxvSIhpG+LgdJPCL+8J/FXWIZ5sl/z9If9OVdSQh5EjBiV hNZiwXUPNCVOF3RK1St1stlTAlXn54QlmaAp1CeOGPl82aNtR4Ub61guYgi+QP1o tumKP8zAvmuA6EEjQu11N+Ge4kQet8cal9lyp+0LiAWt0WFPeUZ11Xl5Xh4jAvNy hcIjM+1y4b9v2LW2a5lHg2619QIkPzmmF/ahBP9pdiCg7kJXiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFN+hSkNMAMrIx//AJexDCZ5ClMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODllMTAzY2MtOGI5YS0z MzY1LWFmMzktMmYwNWQ5OGMyYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHp8bUmZW1Jcd4pvxL4aDbdR+BlJbVUeG5+UhN2roUIEOUaZJS4/ U9sKmJa9eDlhMsrT6H+MzVt0y8IDAvHO5YNagSFNGVSSX/2uyK0XOUJFP+xwTZne BLYCSlTLWPcn38OPovw4O0KAk9Y+ny1gJKCYJpFF/WmlPBVqjzhuhQGCM/TsIRGh RI+oDVazvcBzx9vgP0JMMZPQvVPwot+hOOOV7bFmK/gtzhgDIBmQGZ6n6szgb/9z jHZov9vZm3sEtRjpQEIWGhuGX2koc9rp1AsGmlqfKEAk90zxEcWRhjEyDIhXU2k/ SkjDfbxUem2Bve4eOhAqppqVJrwJBIlLimk= -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:35 2025 by rpki-client