$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa File: 959a1507-980e-3463-9f5a-17f9451099ae.roa (raw, json) Hash identifier: NWoIwczo+rXMZSqIQ2DdDVEuGv5GTtCBwdXKXyDzOKs= Subject key identifier: 69:69:51:7D:50:65:A3:9D:ED:22:2E:3B:D1:47:76:70:E5:C2:D4:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D1446A63E895141613D8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396581 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:44:6a:63:e8:95:14:16:13:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=de799985-3a76-411d-98b7-0e5a3a75809b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fb:49:5c:ba:84:1e:0b:67:24:d7:38:a2:a0: 9a:7e:6c:08:ba:91:34:18:15:5b:c5:d4:36:a7:b5: ee:7d:57:07:36:20:fb:56:ca:d7:4d:95:94:7d:3e: 37:ca:37:47:e7:84:f2:be:49:be:b8:46:07:64:42: 43:ea:53:a8:0d:98:39:0d:c0:26:06:61:3b:6d:5b: 25:a1:86:3c:33:ab:6e:c3:a1:c2:87:8c:c1:cf:f2: d2:62:e8:27:0a:9a:74:fc:d3:17:47:ef:a8:16:40: 65:65:00:cf:fd:56:65:c0:0d:f0:58:b6:10:7b:0d: 5b:9c:e2:61:f9:fc:94:6b:fb:86:30:e0:03:5d:16: 84:91:f1:2d:5c:a5:c6:da:cb:4c:95:80:d5:59:e6: 39:dd:df:4f:1a:1d:e4:6f:1a:c9:fc:64:6e:c3:d1: b0:f7:17:9e:2c:de:6e:da:46:39:98:47:a3:08:93: f2:1a:bf:41:9c:c7:88:03:74:88:69:d3:ec:97:a0: c7:ca:10:5b:79:83:1c:0c:4c:22:32:2a:1e:3d:5c: 91:04:59:20:75:c7:e6:01:64:0c:74:d1:5b:0f:b8: 11:35:a4:b5:4c:e0:8b:97:c8:9b:fc:07:71:9a:d1: 86:7d:07:b6:f0:c2:81:be:8c:07:40:2b:94:6c:26: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:51:7D:50:65:A3:9D:ED:22:2E:3B:D1:47:76:70:E5:C2:D4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:34:e5:d2:c5:db:18:a2:3d:28:20:73:cb:63:da:29:e8:cd: f0:ee:0b:06:e1:eb:21:3b:0c:b8:2a:1e:c5:30:44:0f:53:97: 16:91:68:59:9d:38:84:9a:ce:7c:e0:14:16:dc:5e:dc:22:99: 88:bf:9f:41:20:3b:32:52:46:b6:d4:dd:d3:ee:8a:05:65:2a: e3:06:f8:61:5e:5c:12:b7:c9:0a:53:a4:c6:b3:03:e1:39:95: 11:11:5f:c5:57:44:75:aa:45:ed:8e:b4:cc:ff:7b:f1:6f:d8: df:67:d2:41:a5:13:63:e5:ae:83:f9:e6:20:09:fc:70:43:92: 9f:e2:9f:d3:dd:7b:af:89:18:1b:50:17:1d:c5:ad:c7:56:67: bb:22:cf:aa:4d:1b:0e:10:51:39:12:65:ff:d7:dd:05:2b:cc: bd:47:47:30:a8:0c:0f:86:52:8a:1d:ce:85:66:22:24:df:7d: c7:bc:3f:43:e7:bd:09:3a:a3:ea:ca:20:92:bc:d5:3f:af:b8: 02:1a:5b:7c:7a:bc:f9:a6:9b:16:ba:19:7d:d5:5f:2d:e0:3d: 65:44:36:cf:d0:15:99:b6:2e:fb:58:1c:bc:43:61:b0:b2:c6: bb:34:1a:9f:c7:69:4c:0f:16:6c:5a:24:cd:4c:21:79:79:a6: 78:21:07:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9FEamPolRQWE9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk ZGU3OTk5ODUtM2E3Ni00MTFkLTk4YjctMGU1YTNhNzU4MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PtJXLqEHgtnJNc4oqCafmwIupE0GBVbxdQ2 p7XufVcHNiD7VsrXTZWUfT43yjdH54Tyvkm+uEYHZEJD6lOoDZg5DcAmBmE7bVsl oYY8M6tuw6HCh4zBz/LSYugnCpp0/NMXR++oFkBlZQDP/VZlwA3wWLYQew1bnOJh +fyUa/uGMOADXRaEkfEtXKXG2stMlYDVWeY53d9PGh3kbxrJ/GRuw9Gw9xeeLN5u 2kY5mEejCJPyGr9BnMeIA3SIadPsl6DHyhBbeYMcDEwiMioePVyRBFkgdcfmAWQM dNFbD7gRNaS1TOCLl8ib/AdxmtGGfQe28MKBvowHQCuUbCZQBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlpUX1QZaOd7SIuO9FHdnDlwtQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU5YTE1MDctOTgwZS0z NDYzLTlmNWEtMTdmOTQ1MTA5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAQ05dLF2xiiPSggc8tj2inozfDuCwbh6yE7DLgqHsUwRA9TlxaR aFmdOISaznzgFBbcXtwimYi/n0EgOzJSRrbU3dPuigVlKuMG+GFeXBK3yQpTpMaz A+E5lRERX8VXRHWqRe2OtMz/e/Fv2N9n0kGlE2PlroP55iAJ/HBDkp/in9Pde6+J GBtQFx3FrcdWZ7siz6pNGw4QUTkSZf/X3QUrzL1HRzCoDA+GUoodzoVmIiTffce8 P0PnvQk6o+rKIJK81T+vuAIaW3x6vPmmmxa6GX3VXy3gPWVENs/QFZm2LvtYHLxD YbCyxrs0Gp/HaUwPFmxaJM1MIXl5pnghB/E= -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:03 2025 by rpki-client