$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8c16e6a-b8ff-3e3f-bbfb-587ffd8f8617.roa File: b8c16e6a-b8ff-3e3f-bbfb-587ffd8f8617.roa (raw, json) Hash identifier: f/kYvALV/Ehk8fpiM3sYuaDnEI8jVy47sWQuvuJfE3I= Subject key identifier: DE:DB:35:95:AF:2A:DA:5F:A4:FB:46:3A:A5:5D:DE:A8:3C:83:9B:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D4393254DDED64784B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8c16e6a-b8ff-3e3f-bbfb-587ffd8f8617.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396570 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:39:32:54:dd:ed:64:78:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=3763e3c4-8ca3-41ee-875e-549c5ddbae61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:1c:84:78:ea:43:8c:bb:45:c3:7b:19:83: 9e:06:42:be:57:c7:94:72:ac:89:66:0f:69:26:3a: 74:f5:b3:5f:81:00:01:29:6b:f9:8b:68:41:e6:5d: d3:b7:ed:14:a7:5c:0b:c1:9c:fc:85:55:77:2b:0b: f9:94:2e:08:21:90:3d:e4:ec:b5:ac:fd:20:cc:ac: ce:50:f0:8c:37:dd:c2:1a:ab:5e:a4:f4:6d:65:91: c2:ee:ee:7c:99:fa:d3:f6:39:5c:76:21:63:6f:c4: 9f:3b:80:f5:a0:cf:fa:a5:b2:b5:71:31:ba:1b:12: 02:aa:0b:a0:2f:cf:2e:50:d9:a7:2b:6f:44:ac:bb: 47:6b:c6:7c:75:e9:90:87:c3:7c:10:f1:95:21:5d: bb:f3:b1:f2:a5:66:87:68:13:48:53:59:d1:b8:06: ef:bd:b9:1a:26:86:6a:f4:54:39:1d:cd:48:13:0e: 7c:ef:f2:f5:88:51:7b:1d:17:cd:b2:b1:1e:f5:81: be:0c:f2:41:71:26:7e:e3:59:ce:b7:60:22:42:42: 0e:7f:be:2a:62:62:4e:1e:b8:76:e8:0f:b0:08:3b: 19:40:94:2a:47:d8:e2:7e:b1:16:0a:c6:40:91:00: 97:ae:ff:f4:ae:53:92:b7:9c:67:66:d0:b7:9a:98: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DB:35:95:AF:2A:DA:5F:A4:FB:46:3A:A5:5D:DE:A8:3C:83:9B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8c16e6a-b8ff-3e3f-bbfb-587ffd8f8617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:54:b4:18:86:14:10:a9:4b:2f:d3:39:2b:56:2d:58:32: 6c:4f:d0:d5:b5:45:d7:95:6f:48:92:23:48:fe:a0:63:75:c3: 15:08:09:ea:8e:ff:18:89:9e:95:66:7d:6f:bf:2c:e9:ea:08: 0c:0d:06:e1:75:8f:73:ad:46:bb:da:f1:a5:7a:a5:f1:40:1e: 21:6c:73:ad:44:29:91:dd:40:ee:23:e6:71:81:77:ad:50:9d: a9:d6:86:f0:7b:c6:96:ca:c0:df:52:e7:11:44:37:30:46:dd: 20:d4:c8:25:41:bf:1e:1d:24:e0:9b:a3:68:ec:b9:e2:d8:2a: 66:61:75:ee:bd:ff:cb:4b:89:40:c3:cf:f0:4b:fe:44:34:a6: 21:5d:80:27:9f:47:8f:8d:cf:f5:99:be:b1:39:31:fe:af:1d: 59:81:ee:62:ed:b2:5a:f3:72:35:ed:25:dc:83:f1:e7:78:a6: 45:20:86:73:aa:5c:b4:56:c2:46:06:e2:de:73:e0:b2:de:fe: 61:23:96:5d:60:f7:e1:14:aa:60:b0:a2:67:43:8e:37:2c:a2: be:71:c9:f4:14:39:39:5b:45:85:cb:bc:c8:20:75:e8:ad:12: d0:e7:96:4e:c2:2d:d8:b0:de:46:5c:20:6c:52:90:59:a6:22: 51:47:79:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9Q5MlTd7WR4S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk Mzc2M2UzYzQtOGNhMy00MWVlLTg3NWUtNTQ5YzVkZGJhZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+8chHjqQ4y7RcN7GYOeBkK+V8eUcqyJZg9p Jjp09bNfgQABKWv5i2hB5l3Tt+0Up1wLwZz8hVV3Kwv5lC4IIZA95Oy1rP0gzKzO UPCMN93CGqtepPRtZZHC7u58mfrT9jlcdiFjb8SfO4D1oM/6pbK1cTG6GxICqgug L88uUNmnK29ErLtHa8Z8demQh8N8EPGVIV2787HypWaHaBNIU1nRuAbvvbkaJoZq 9FQ5Hc1IEw587/L1iFF7HRfNsrEe9YG+DPJBcSZ+41nOt2AiQkIOf74qYmJOHrh2 6A+wCDsZQJQqR9jifrEWCsZAkQCXrv/0rlOSt5xnZtC3mphw/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN7bNZWvKtpfpPtGOqVd3qg8g5tXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhjMTZlNmEtYjhmZi0z ZTNmLWJiZmItNTg3ZmZkOGY4NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIBVLQYhhQQqUsv0zkrVi1YMmxP0NW1RdeVb0iSI0j+oGN1wxUI CeqO/xiJnpVmfW+/LOnqCAwNBuF1j3OtRrva8aV6pfFAHiFsc61EKZHdQO4j5nGB d61QnanWhvB7xpbKwN9S5xFENzBG3SDUyCVBvx4dJOCbo2jsueLYKmZhde69/8tL iUDDz/BL/kQ0piFdgCefR4+Nz/WZvrE5Mf6vHVmB7mLtslrzcjXtJdyD8ed4pkUg hnOqXLRWwkYG4t5z4LLe/mEjll1g9+EUqmCwomdDjjcsor5xyfQUOTlbRYXLvMgg deitEtDnlk7CLdiw3kZcIGxSkFmmIlFHef8= -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:49 2025 by rpki-client