$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a575e46f-6c2c-3661-925e-248f010bf59d.roa File: a575e46f-6c2c-3661-925e-248f010bf59d.roa (raw, json) Hash identifier: i/HyOIbK1pvZSJrjRvtu4lUKP7DnbZWDuXhd8YuzXbk= Subject key identifier: B8:5C:03:F8:ED:51:DD:96:0E:FF:D0:A6:E0:14:4C:C9:E7:07:C0:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D56242BB6B322176E150 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a575e46f-6c2c-3661-925e-248f010bf59d.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 36627 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:62:42:bb:6b:32:21:76:e1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=f6cfe38d-a81f-4f35-92ce-49e086e12291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:b0:45:d7:09:2b:fa:db:43:bb:07:28:d4: a4:ef:23:d2:f0:9a:d7:28:3a:5f:f7:9d:a3:f0:9e: cf:df:61:03:0c:00:ab:0f:ae:aa:79:d1:b2:77:9e: fb:71:15:96:60:c8:67:2a:2b:d1:6a:a7:e6:df:5d: 77:38:17:cf:41:79:1a:b0:e9:6c:88:d5:b5:32:3c: 52:29:0e:e3:11:bb:de:4d:42:3b:b5:62:2e:6b:9f: bb:e2:fc:5c:28:c2:7e:8e:a8:bb:2b:b2:1d:76:e6: 0e:61:22:4c:09:6d:2e:f3:6b:7b:5e:a7:9d:ca:21: f8:06:f4:e1:96:91:fb:68:13:6c:b7:1e:64:1c:4e: a2:cd:59:31:58:69:d6:01:34:97:5b:ba:a3:63:e1: 27:a8:65:31:ff:1f:b8:78:85:1d:8b:45:de:61:d7: 5a:6f:e0:e8:7a:9d:ad:f1:6d:c2:5c:ed:b9:f5:40: 6c:8c:99:e8:7f:28:e3:24:6e:2b:fb:4d:11:07:50: 97:ed:f3:8a:30:9f:67:1d:ff:3c:d9:e1:cd:27:be: 55:1a:42:ca:e1:0c:13:3b:91:f2:b8:46:e8:58:ac: 2b:16:fa:76:26:d3:b2:75:74:8e:12:00:57:b1:ec: 1c:b3:95:05:c1:93:ea:83:f4:a0:f4:70:0b:13:40: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5C:03:F8:ED:51:DD:96:0E:FF:D0:A6:E0:14:4C:C9:E7:07:C0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a575e46f-6c2c-3661-925e-248f010bf59d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:08:a4:2e:88:55:60:d1:03:41:61:ca:2c:a0:fb:ec:ba:17: 24:dd:32:c3:09:66:a4:aa:68:02:d7:c2:7f:76:29:07:99:6d: ae:ad:5f:9c:6d:7c:2a:fc:b5:30:8e:2d:53:ea:61:ab:9e:c6: 86:cf:86:ed:33:03:69:88:c9:ce:36:f6:e9:61:6e:cf:9f:8e: 2f:f6:6a:c8:6b:60:84:f9:a8:aa:f3:49:67:ef:d2:c3:34:b7: ff:bb:e4:ed:ca:e1:c5:85:e9:89:b2:4e:4f:ba:9c:f8:4f:66: ce:fe:41:73:ee:d8:0e:82:ee:50:02:ad:34:fe:93:d6:aa:7f: ae:59:4e:41:4c:d4:d9:5b:b9:c7:65:0f:07:94:0f:2e:72:82: 4f:3e:9b:12:80:8c:5e:6a:84:89:20:70:4e:c7:91:28:6b:4b: 2c:71:90:67:05:e1:0c:c0:b1:a1:62:b5:5e:f9:b9:d0:47:85: a0:66:40:6c:3e:f3:09:fa:42:dc:c8:4d:62:ff:df:db:2b:6e: 26:0d:bd:3f:65:46:18:3c:77:13:74:d7:17:d0:f9:7b:7f:5b: b2:51:1b:03:57:ed:0e:d3:ba:9f:70:f8:65:75:86:bd:e7:25: 29:ea:c2:dc:79:f8:95:b0:78:6c:fe:f6:9f:d6:b3:e4:26:16: 47:c2:73:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9ViQrtrMiF24VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk ZjZjZmUzOGQtYTgxZi00ZjM1LTkyY2UtNDllMDg2ZTEyMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4mwRdcJK/rbQ7sHKNSk7yPS8JrXKDpf952j 8J7P32EDDACrD66qedGyd577cRWWYMhnKivRaqfm3113OBfPQXkasOlsiNW1MjxS KQ7jEbveTUI7tWIua5+74vxcKMJ+jqi7K7IdduYOYSJMCW0u82t7XqedyiH4BvTh lpH7aBNstx5kHE6izVkxWGnWATSXW7qjY+EnqGUx/x+4eIUdi0XeYddab+Doep2t 8W3CXO259UBsjJnofyjjJG4r+00RB1CX7fOKMJ9nHf882eHNJ75VGkLK4QwTO5Hy uEboWKwrFvp2JtOydXSOEgBXsewcs5UFwZPqg/Sg9HALE0BTdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLhcA/jtUd2WDv/QpuAUTMnnB8CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU3NWU0NmYtNmMyYy0z NjYxLTkyNWUtMjQ4ZjAxMGJmNTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIoIpC6IVWDRA0Fhyiyg++y6FyTdMsMJZqSqaALXwn92KQeZba6t X5xtfCr8tTCOLVPqYauexobPhu0zA2mIyc429ulhbs+fji/2ashrYIT5qKrzSWfv 0sM0t/+75O3K4cWF6YmyTk+6nPhPZs7+QXPu2A6C7lACrTT+k9aqf65ZTkFM1Nlb ucdlDweUDy5ygk8+mxKAjF5qhIkgcE7HkShrSyxxkGcF4QzAsaFitV75udBHhaBm QGw+8wn6QtzITWL/39srbiYNvT9lRhg8dxN01xfQ+Xt/W7JRGwNX7Q7Tup9w+GV1 hr3nJSnqwtx5+JWweGz+9p/Ws+QmFkfCc88= -----END CERTIFICATE-----Generated at Sat Jun 7 04:23:25 2025 by rpki-client