$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa File: b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa (raw, json) Hash identifier: d3NicbQPvVGbCeIT9WRcsknBYN5duv/F8LkWoz/VPXc= Subject key identifier: B7:CE:88:37:1D:EC:25:2F:E5:2E:33:01:E1:9C:84:A5:5B:5B:61:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D657D68A0BC26AE636C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa Signing time: Tue 03 Jun 2025 12:47:23 +0000 ROA not before: Tue 03 Jun 2025 12:47:23 +0000 ROA not after: Mon 01 Sep 2025 12:47:23 +0000 asID: 36632 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d6:57:d6:8a:0b:c2:6a:e6:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:23 2025 GMT Not After : Sep 1 12:47:23 2025 GMT Subject: CN=3c53b6ba-6511-473c-bb7a-892724880f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:ac:59:55:75:1a:19:02:0d:72:89:4e:7b: 4e:78:13:32:72:6e:c3:80:ba:12:ee:7f:8f:a6:b4: 81:45:46:a6:8a:7c:14:27:38:9e:74:da:ec:5d:ea: 86:f7:36:37:24:26:27:86:d2:34:0e:9a:c8:83:67: 05:1a:92:a8:9f:5c:d2:b4:fe:1e:73:5c:2b:67:2a: 76:f4:cf:55:42:c1:7b:23:cc:30:b9:74:97:96:13: f3:f6:28:e6:47:66:71:b2:54:a7:c3:4e:47:b8:8e: c5:07:7d:c6:fd:06:3d:a8:4a:74:29:64:f8:45:b0: 4c:44:ca:a6:23:8f:bf:2f:49:2f:8c:a0:50:01:c4: 7c:05:b5:54:82:29:e7:9a:9f:15:8f:13:73:d1:22: 78:78:37:f7:f4:1a:56:ed:8c:81:37:3d:c3:d7:6d: c6:b8:b4:39:de:36:9c:20:0b:c8:ba:78:0f:7b:48: a9:b0:6a:73:39:b2:57:f8:d6:82:8d:61:a9:b5:19: cd:e4:60:1b:6f:ee:38:e7:1a:b2:b4:db:b0:9a:11: c1:6f:c1:07:53:42:6a:93:41:3a:15:4d:d9:8e:b0: 7e:d3:3c:29:b1:0a:95:f5:1e:91:fd:13:32:98:23: b9:3e:0c:75:62:ba:5d:c9:2f:7b:a7:a6:44:78:7f: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CE:88:37:1D:EC:25:2F:E5:2E:33:01:E1:9C:84:A5:5B:5B:61:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3e:3b:f4:60:c8:8b:ad:25:1f:76:46:ed:e1:e1:a8:26:77: 0a:36:49:c1:4d:f3:29:ea:60:97:32:7c:0e:e7:61:c4:57:e4: 6c:cd:47:2e:22:b8:29:2e:01:cc:ee:d3:3c:ec:e6:54:1d:80: 1b:3a:8b:ca:b4:73:ee:44:0f:df:e8:a0:c6:4a:5f:32:2e:ed: 68:ce:f6:a9:aa:e9:a0:70:41:fb:fb:b9:03:94:7f:bd:5c:ba: d4:48:2a:bd:00:a5:eb:d7:db:76:8e:4a:fe:f8:a8:12:e8:ec: cb:f6:73:62:1c:a0:bf:18:82:3f:07:c1:da:a6:87:e6:25:6f: 83:33:48:00:4b:a0:f4:50:58:a3:11:91:49:d8:16:05:97:c3: 3a:7e:d8:6f:71:0f:e8:48:bf:04:f1:48:0c:57:ac:d2:15:8b: 02:27:e6:86:4b:a8:50:b2:1f:dc:38:a6:21:27:e0:38:44:d8: a5:66:56:9e:43:d0:ef:f6:ca:8b:95:ca:97:46:e8:b1:b3:39: 1c:71:98:7c:be:ed:74:b3:3a:5f:e5:c6:88:a3:46:18:f8:5a: c5:dc:b5:8c:75:33:28:fc:e6:e2:7f:cc:5d:bb:29:d2:cf:d2: ab:50:6b:c7:70:ea:e1:56:53:a1:c7:a4:d3:11:cb:f6:21:bd: 5f:a9:80:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9ZX1ooLwmrmNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyM1oXDTI1MDkwMTEyNDcyM1owLzEtMCsGA1UEAxMk M2M1M2I2YmEtNjUxMS00NzNjLWJiN2EtODkyNzI0ODgwZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDCsWVV1GhkCDXKJTntOeBMycm7DgLoS7n+P prSBRUaminwUJziedNrsXeqG9zY3JCYnhtI0DprIg2cFGpKon1zStP4ec1wrZyp2 9M9VQsF7I8wwuXSXlhPz9ijmR2ZxslSnw05HuI7FB33G/QY9qEp0KWT4RbBMRMqm I4+/L0kvjKBQAcR8BbVUginnmp8VjxNz0SJ4eDf39BpW7YyBNz3D123GuLQ53jac IAvIungPe0ipsGpzObJX+NaCjWGptRnN5GAbb+445xqytNuwmhHBb8EHU0Jqk0E6 FU3ZjrB+0zwpsQqV9R6R/RMymCO5Pgx1YrpdyS97p6ZEeH80WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfOiDcd7CUv5S4zAeGchKVbW2E2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIyMjdmYjAtNGQ0Yi0z MDg5LThiZWMtODBjMGZlMmE0NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAU+O/RgyIutJR92Ru3h4agmdwo2ScFN8ynqYJcyfA7nYcRX5GzN Ry4iuCkuAczu0zzs5lQdgBs6i8q0c+5ED9/ooMZKXzIu7WjO9qmq6aBwQfv7uQOU f71cutRIKr0ApevX23aOSv74qBLo7Mv2c2IcoL8Ygj8Hwdqmh+Ylb4MzSABLoPRQ WKMRkUnYFgWXwzp+2G9xD+hIvwTxSAxXrNIViwIn5oZLqFCyH9w4piEn4DhE2KVm Vp5D0O/2youVypdG6LGzORxxmHy+7XSzOl/lxoijRhj4WsXctYx1Myj85uJ/zF27 KdLP0qtQa8dw6uFWU6HHpNMRy/YhvV+pgGs= -----END CERTIFICATE-----Generated at Sat Jun 7 04:18:39 2025 by rpki-client