$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa File: 9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa (raw, json) Hash identifier: 7TGEwFam2YZi19hhKgAUFambae5tkhM2El9x6LJoAv8= Subject key identifier: 66:4B:67:AA:C8:9B:8C:BE:5F:B8:18:2C:49:B9:0F:DE:CA:23:AA:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D1C2C1B76B0227512D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 397209 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:c2:c1:b7:6b:02:27:51:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=8c7fa231-4ab9-4e30-bb42-d2806d3f80a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:8e:85:22:db:36:fa:43:19:21:41:0c:5d: cd:85:a8:c3:c1:a8:cb:c8:d6:f4:05:c1:71:6d:f1: ec:5a:d7:58:92:a5:3f:f5:5a:ae:c4:5f:56:af:70: a3:2e:ce:a2:dc:0f:1c:50:49:0b:60:58:87:fe:62: d2:cf:aa:37:0c:3c:0f:14:43:2f:a9:81:6e:e1:38: d2:34:f6:22:e1:c7:f6:81:76:f6:2c:3d:de:fa:0c: b9:89:d3:3b:cb:28:79:65:e0:ec:38:2c:67:73:ec: d6:86:68:e8:17:d1:1c:ea:3b:ee:a7:f5:b9:49:05: ed:35:93:54:89:ae:8c:57:2f:4f:ea:fe:4c:94:4c: 7d:1e:44:c2:1d:e8:29:52:61:63:a2:cb:24:75:e6: 1e:9e:7e:3d:fa:22:1a:0a:26:14:ea:31:a7:4f:7c: 7f:c9:a3:2a:2c:5e:bf:1a:e8:2d:33:1c:37:0e:37: 85:5a:ba:d1:74:92:7d:bf:dc:bf:98:b0:1e:cc:f4: f1:ab:d0:c9:c8:49:8f:92:3b:3c:83:a3:03:d1:80: fe:a0:c7:f3:74:2b:17:73:ff:25:cb:49:55:97:0c: 9c:23:bf:d7:53:48:fb:ed:f7:12:49:91:60:54:c6: 5d:bd:38:03:13:50:df:ef:02:ca:99:25:3f:36:30: fa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4B:67:AA:C8:9B:8C:BE:5F:B8:18:2C:49:B9:0F:DE:CA:23:AA:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4a:cc:c0:0d:0f:b2:0f:31:21:76:1f:47:ab:35:ec:35:b5: f1:07:23:b0:c4:5f:c3:04:32:52:ac:19:b8:dc:1d:4a:01:8b: 0e:9a:4f:b6:91:66:0e:71:c4:3d:c1:f9:6f:9f:9c:4e:8c:b6: 07:c6:4d:c2:f6:ec:94:70:84:33:fd:34:6d:ef:6a:2a:2e:35: b0:a0:ca:ca:39:af:eb:f6:51:d4:c0:20:62:c4:0a:a8:f2:e2: 92:fc:9d:fb:fe:72:a1:29:41:79:70:fe:c2:33:e9:3e:a9:21: a3:59:7d:de:af:88:6a:be:c8:71:1f:05:57:90:c6:11:cd:a6: e5:ed:5f:0f:60:62:c5:ec:d2:01:a8:cd:62:43:41:07:57:5f: 8c:e5:e2:77:aa:87:4d:21:f9:0f:4b:27:2d:a5:8c:b6:0e:5f: ef:2d:e9:3c:a6:17:2c:16:9c:58:6c:57:66:fd:ee:f4:e3:0a: 93:6b:1a:56:d4:55:f0:66:27:b0:d9:41:fb:e6:29:6b:d3:a7: ce:db:06:74:07:3b:fb:e0:07:87:02:22:f9:da:cf:6d:50:77: 5f:f1:f9:d4:bc:a1:0d:b4:09:d8:cc:78:de:97:fd:6a:38:00: 88:d6:ce:bb:2d:3b:0a:3f:69:69:ca:3f:fd:5e:0c:ee:75:19: 8f:58:ed:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9HCwbdrAidRLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk OGM3ZmEyMzEtNGFiOS00ZTMwLWJiNDItZDI4MDZkM2Y4MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGyOhSLbNvpDGSFBDF3NhajDwajLyNb0BcFx bfHsWtdYkqU/9VquxF9Wr3CjLs6i3A8cUEkLYFiH/mLSz6o3DDwPFEMvqYFu4TjS NPYi4cf2gXb2LD3e+gy5idM7yyh5ZeDsOCxnc+zWhmjoF9Ec6jvup/W5SQXtNZNU ia6MVy9P6v5MlEx9HkTCHegpUmFjosskdeYenn49+iIaCiYU6jGnT3x/yaMqLF6/ GugtMxw3DjeFWrrRdJJ9v9y/mLAezPTxq9DJyEmPkjs8g6MD0YD+oMfzdCsXc/8l y0lVlwycI7/XU0j77fcSSZFgVMZdvTgDE1Df7wLKmSU/NjD69QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZLZ6rIm4y+X7gYLEm5D97KI6oPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWNlNmE5MTctZmE1My0z ZWRmLWIwOTYtYjhiODVjYTQwNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpKzMAND7IPMSF2H0erNew1tfEHI7DEX8MEMlKsGbjcHUoBiw6a T7aRZg5xxD3B+W+fnE6MtgfGTcL27JRwhDP9NG3vaiouNbCgyso5r+v2UdTAIGLE Cqjy4pL8nfv+cqEpQXlw/sIz6T6pIaNZfd6viGq+yHEfBVeQxhHNpuXtXw9gYsXs 0gGozWJDQQdXX4zl4neqh00h+Q9LJy2ljLYOX+8t6TymFywWnFhsV2b97vTjCpNr GlbUVfBmJ7DZQfvmKWvTp87bBnQHO/vgB4cCIvnaz21Qd1/x+dS8oQ20CdjMeN6X /Wo4AIjWzrstOwo/aWnKP/1eDO51GY9Y7SQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:15:19 2025 by rpki-client