$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa File: d5ac50c2-a63c-3075-a528-1119e3ffee83.roa (raw, json) Hash identifier: dNSLQWZ/0qhXWNtktmYkqpzPzyI+4LntLYxXoLb/Avg= Subject key identifier: EE:48:B2:B5:99:1F:54:9B:86:1C:6D:9B:6C:E1:F1:A3:B6:AD:23:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D2F506AD4A3F712F16C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396595 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:f5:06:ad:4a:3f:71:2f:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=2211c809-8d62-4437-92fe-7fa6d6c7c95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:ea:18:1d:e5:2c:b3:78:f1:dc:bc:21:aa: 32:34:53:e8:1b:eb:19:09:27:00:e1:36:3a:4a:d7: b7:af:16:04:d5:e1:0d:ca:23:60:36:7a:ec:a6:14: 75:dd:a3:9e:e5:3d:0e:ba:f1:64:c0:8d:ce:f7:d7: 20:85:e3:f8:f9:c9:12:3a:9c:41:c0:fa:65:93:33: 78:99:33:75:18:b7:d2:f6:af:ad:bb:7f:95:76:82: 61:3a:7f:08:40:3b:05:b8:3e:ce:50:7b:44:e5:42: ca:2b:d2:fa:90:56:6f:85:8f:50:03:71:5e:95:9f: bd:bd:08:3e:db:50:d7:a6:ce:9c:31:59:5e:fe:1a: 4a:44:1f:96:5b:8e:98:dc:aa:e1:37:74:b3:5b:fb: c8:a0:95:05:34:fd:b7:be:fd:f6:73:c3:f6:48:a9: d6:f4:1d:de:8f:89:49:bc:af:c9:2c:5b:05:04:69: dc:1b:ed:67:0a:b8:9f:28:86:c8:c9:47:c6:30:31: f4:85:fc:66:e0:da:c9:76:89:70:62:bc:76:63:03: bc:51:1f:f7:f2:a3:76:74:ea:4a:de:2b:87:57:91: 3b:68:bd:b0:aa:f1:59:a4:bb:16:0f:54:51:e6:96: 1c:f6:f1:f0:df:e9:2f:bd:10:b4:97:de:2c:6b:15: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:48:B2:B5:99:1F:54:9B:86:1C:6D:9B:6C:E1:F1:A3:B6:AD:23:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:55:62:9e:2e:2e:6b:3b:62:25:a9:d8:70:8a:d2:8e:71:60: 78:24:49:b7:2a:cf:a0:48:9e:73:88:43:aa:a4:97:c6:9b:f3: 62:60:5d:9d:88:f1:50:db:43:82:01:39:bf:16:cf:bd:7b:fc: b9:19:7b:73:2d:08:52:a5:27:bb:b2:cc:43:e7:f7:d3:28:f8: eb:23:6c:e6:cd:91:d5:03:ac:46:e1:d2:71:f1:95:56:34:1e: 5d:60:01:f4:d4:62:b4:f9:26:6a:d0:2e:74:bf:6a:0d:59:73: 99:77:41:76:16:09:df:ad:b9:31:c3:82:38:f5:3b:68:29:98: 3f:bb:5c:f4:45:cf:35:0d:c6:b7:b1:25:20:0e:33:4d:ae:8e: 8d:19:1b:59:8c:a9:6a:14:51:7a:a4:f5:34:9a:d1:0d:5f:8e: 66:36:00:b8:ca:da:79:19:f4:29:7f:be:b4:32:34:b2:4a:9e: 79:4b:95:34:06:ad:fd:e8:f4:96:50:e1:fd:92:80:01:0b:e1: c3:0e:49:3c:16:e7:20:3a:74:5b:e5:3c:a0:a1:1d:91:42:88: af:b0:05:33:0a:98:c4:de:f5:98:2c:a7:45:4e:94:c8:23:24: e1:e3:2e:66:81:89:33:dd:74:98:49:b7:79:51:0b:2f:cf:a4: d3:d2:59:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9L1Bq1KP3EvFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk MjIxMWM4MDktOGQ2Mi00NDM3LTkyZmUtN2ZhNmQ2YzdjOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvPqGB3lLLN48dy8IaoyNFPoG+sZCScA4TY6 Ste3rxYE1eENyiNgNnrsphR13aOe5T0OuvFkwI3O99cgheP4+ckSOpxBwPplkzN4 mTN1GLfS9q+tu3+VdoJhOn8IQDsFuD7OUHtE5ULKK9L6kFZvhY9QA3FelZ+9vQg+ 21DXps6cMVle/hpKRB+WW46Y3KrhN3SzW/vIoJUFNP23vv32c8P2SKnW9B3ej4lJ vK/JLFsFBGncG+1nCrifKIbIyUfGMDH0hfxm4NrJdolwYrx2YwO8UR/38qN2dOpK 3iuHV5E7aL2wqvFZpLsWD1RR5pYc9vHw3+kvvRC0l94saxWjYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO5IsrWZH1Sbhhxtm2zh8aO2rSP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDVhYzUwYzItYTYzYy0z MDc1LWE1MjgtMTExOWUzZmZlZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhVYp4uLms7YiWp2HCK0o5xYHgkSbcqz6BInnOIQ6qkl8ab82Jg XZ2I8VDbQ4IBOb8Wz717/LkZe3MtCFKlJ7uyzEPn99Mo+OsjbObNkdUDrEbh0nHx lVY0Hl1gAfTUYrT5JmrQLnS/ag1Zc5l3QXYWCd+tuTHDgjj1O2gpmD+7XPRFzzUN xrexJSAOM02ujo0ZG1mMqWoUUXqk9TSa0Q1fjmY2ALjK2nkZ9Cl/vrQyNLJKnnlL lTQGrf3o9JZQ4f2SgAEL4cMOSTwW5yA6dFvlPKChHZFCiK+wBTMKmMTe9Zgsp0VO lMgjJOHjLmaBiTPddJhJt3lRCy/PpNPSWT4= -----END CERTIFICATE-----Generated at Sat Jun 7 04:16:17 2025 by rpki-client