$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa File: c087ca59-28b9-32f7-b252-e4f2040cf97f.roa (raw, json) Hash identifier: gqhcQx9JRrNAhNkTRR4e/IWiFA1kZ/bKeDnpCaYuWwg= Subject key identifier: 11:2C:85:EA:85:8D:3B:66:6C:35:CB:DA:46:8D:F5:89:B1:A9:A1:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D51A2CF13E721740B040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396612 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:1a:2c:f1:3e:72:17:40:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=98f04bb3-48a6-4ab6-9302-b7ccc214923c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:c7:8b:bc:cc:f7:0c:15:64:1b:9e:14:71: dc:89:98:db:b6:ac:f0:dd:2d:31:e9:cb:1d:6a:8d: f7:09:77:80:f6:f3:c8:84:a2:1b:a5:ba:20:42:7b: 34:87:fe:f0:0e:59:7b:6d:1a:89:f1:86:89:11:af: fa:ee:66:8c:59:7a:ae:8f:84:74:22:5e:6e:1e:2b: d5:90:a5:70:65:c0:de:a5:c0:8d:c7:cb:4a:bb:ea: 6d:7a:da:27:c4:f6:be:3b:93:ea:a6:ad:f7:6e:52: 35:d7:ec:1f:fd:ae:a3:40:f4:73:13:d2:c6:4d:6b: a5:d8:f4:d4:ce:0f:fa:08:e3:b8:fe:56:8a:8a:d8: e2:3e:f6:c5:e2:0b:18:8f:b8:ce:35:c4:17:5f:db: 30:10:25:54:de:da:29:ec:18:2f:53:9c:34:47:5f: 0c:00:0e:4a:d4:17:c8:44:c4:e8:00:d2:50:5d:19: 13:19:4d:0f:07:ad:83:2e:72:b9:e4:b5:89:c6:db: 37:2b:83:23:de:75:34:88:ac:0d:d7:95:92:b9:2b: 87:aa:34:8b:83:cb:cd:39:da:bd:0b:c9:3a:c5:e2: 08:81:6a:bc:8b:53:7a:40:df:49:5e:e1:1d:f6:fe: 0b:64:a6:22:09:73:ec:c4:85:30:8c:a3:3a:0d:1b: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2C:85:EA:85:8D:3B:66:6C:35:CB:DA:46:8D:F5:89:B1:A9:A1:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:20:92:d7:fe:cf:9a:dd:16:dc:5b:db:e5:18:a2:62:40:c0: 27:a8:27:c4:e3:ae:ed:75:fe:c8:fe:d8:1b:75:27:1c:0a:03: e2:d8:7d:d0:7b:63:dd:18:a7:d2:48:ef:55:ee:22:dd:ed:ec: 6e:b5:ce:e3:21:5c:ac:01:24:82:84:18:75:6a:04:14:e0:99: 6a:6a:38:ce:3f:bd:fd:47:6f:e8:6b:3d:73:3b:1a:9a:2b:e2: 7b:81:4c:41:ec:8b:4e:6a:52:5b:02:7e:5c:0a:a5:ab:ae:67: 98:a9:8f:58:bc:9b:f0:fd:6f:7d:8d:d7:83:cd:7c:19:11:3a: 8b:ba:24:f7:ff:e6:c9:ba:26:63:57:53:a9:79:8f:93:e7:f3: d7:00:53:ce:f0:ef:7e:f2:44:06:26:fa:d5:d3:60:d2:3c:19: ac:0f:2d:bd:58:59:e6:9a:d8:39:38:cc:e5:5e:a3:51:bb:85: 34:bc:82:fc:46:8d:c3:e5:b0:9c:c3:0d:3a:f1:a7:08:db:f7: 70:77:75:15:a3:d6:8f:f6:d1:da:91:39:3c:01:c6:0d:bd:83: 7b:dd:c9:a6:18:df:c8:0b:ca:f7:89:a5:2e:24:39:8f:12:f8: 98:40:f1:8c:e6:4f:ab:33:9d:6c:38:ab:6b:b8:8e:45:f5:76: 49:46:06:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9UaLPE+chdAsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk OThmMDRiYjMtNDhhNi00YWI2LTkzMDItYjdjY2MyMTQ5MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcPHi7zM9wwVZBueFHHciZjbtqzw3S0x6csd ao33CXeA9vPIhKIbpbogQns0h/7wDll7bRqJ8YaJEa/67maMWXquj4R0Il5uHivV kKVwZcDepcCNx8tKu+ptetonxPa+O5Pqpq33blI11+wf/a6jQPRzE9LGTWul2PTU zg/6COO4/laKitjiPvbF4gsYj7jONcQXX9swECVU3top7BgvU5w0R18MAA5K1BfI RMToANJQXRkTGU0PB62DLnK55LWJxts3K4Mj3nU0iKwN15WSuSuHqjSLg8vNOdq9 C8k6xeIIgWq8i1N6QN9JXuEd9v4LZKYiCXPsxIUwjKM6DRv5SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBEsheqFjTtmbDXL2kaN9YmxqaEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzA4N2NhNTktMjhiOS0z MmY3LWIyNTItZTRmMjA0MGNmOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABggktf+z5rdFtxb2+UYomJAwCeoJ8Tjru11/sj+2Bt1JxwKA+LY fdB7Y90Yp9JI71XuIt3t7G61zuMhXKwBJIKEGHVqBBTgmWpqOM4/vf1Hb+hrPXM7 Gpor4nuBTEHsi05qUlsCflwKpauuZ5ipj1i8m/D9b32N14PNfBkROou6JPf/5sm6 JmNXU6l5j5Pn89cAU87w737yRAYm+tXTYNI8GawPLb1YWeaa2Dk4zOVeo1G7hTS8 gvxGjcPlsJzDDTrxpwjb93B3dRWj1o/20dqROTwBxg29g3vdyaYY38gLyveJpS4k OY8S+JhA8YzmT6sznWw4q2u4jkX1dklGBuc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:08:33 2025 by rpki-client