$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa File: db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa (raw, json) Hash identifier: iwFc3PFRDccxRnLhJGk7aQVNUqA5Ktp3P/zwOLHe7SM= Subject key identifier: 22:31:07:48:5E:24:C3:A4:97:55:C4:A9:21:3D:82:75:24:7E:66:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D396065BAF1EBEAC6040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396573 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d3:96:06:5b:af:1e:be:ac:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=3e2ef098-f7df-4b3f-bfab-62ba13caea6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7f:c8:47:da:a6:5c:5b:9c:a1:ed:ec:af:a8: 24:df:27:90:c9:8a:9a:93:ed:3e:ed:dd:3d:65:40: b3:fd:36:5f:f7:c2:26:bf:1c:52:2a:3b:0a:3b:37: 1a:5b:84:95:70:10:db:38:2e:2e:3d:e4:57:d3:c5: 3d:d1:57:d9:8c:9a:b9:eb:c9:bc:5f:66:ea:55:bc: 6d:bb:e5:88:7e:86:84:72:8e:df:9a:2d:11:36:2b: 88:fc:65:25:06:60:9a:08:c3:05:07:5a:eb:28:d2: 69:50:be:67:8e:60:30:af:5f:99:43:0b:73:56:d6: 3c:fa:0c:de:b5:f3:54:68:46:fe:b9:b0:2c:0d:4c: b2:45:df:28:0c:88:66:f4:2e:5f:3c:ac:3a:f9:fc: 17:69:d0:0c:b3:ae:d9:a4:21:69:34:99:01:60:d2: 24:59:b8:95:e9:83:fa:7a:df:48:1c:84:70:ec:1a: 43:a3:9d:76:6d:46:38:44:d2:b4:c3:43:8f:c2:6c: 44:70:0b:7a:16:fb:15:fd:f6:05:a0:8a:54:6e:ef: b1:45:5f:25:fe:0f:7b:d4:0b:7b:d8:f5:5e:6d:59: 38:ae:c6:2c:80:7e:5d:a6:e4:04:2a:4f:cc:ba:1e: 79:3e:c2:03:87:ac:cd:15:b2:d8:29:6c:43:52:ab: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:31:07:48:5E:24:C3:A4:97:55:C4:A9:21:3D:82:75:24:7E:66:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4d:7d:60:9f:d6:3f:39:c4:db:62:19:d3:bf:b7:f0:52:8c: 39:d1:c7:7a:64:1a:56:59:89:1f:b6:2d:e7:b8:33:01:de:de: fc:fd:db:cd:82:34:f8:9e:ba:7e:3a:cc:d5:2a:3b:d3:17:70: 9c:02:64:e3:70:80:1d:d5:db:25:7b:da:0b:a7:95:3e:fa:cf: 7b:31:80:f8:b5:62:f8:5b:7d:b3:58:ba:3a:19:c4:17:51:40: 13:01:22:2b:ee:e1:83:85:b3:d3:d2:dd:e0:e1:64:91:e6:5b: 81:f2:9d:1d:d5:18:0c:ae:a2:a1:4c:37:96:47:5d:15:45:21: f2:21:ae:23:7b:c3:fd:7b:b1:24:26:51:04:06:c9:60:cc:0f: 4c:d7:98:68:da:34:38:2d:3f:fd:e7:85:ac:b3:fc:1d:d6:3d: fa:ee:74:1e:b5:7d:68:ec:29:5a:3a:f4:9f:d1:ef:23:25:09: d0:d9:53:67:96:aa:92:d0:f2:03:28:60:3c:ba:ef:85:41:0d: f5:cf:8e:26:32:69:ce:3c:6b:55:56:e2:78:a0:f1:81:a8:76: a2:62:d1:a9:da:17:6c:3d:c0:12:a2:57:7e:42:6a:1c:91:9e: 74:30:97:0c:9b:cc:16:1e:c8:d0:2d:28:5a:8e:e6:45:8c:40: bc:7f:bb:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9OWBluvHr6sYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk M2UyZWYwOTgtZjdkZi00YjNmLWJmYWItNjJiYTEzY2FlYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH/IR9qmXFucoe3sr6gk3yeQyYqak+0+7d09 ZUCz/TZf98ImvxxSKjsKOzcaW4SVcBDbOC4uPeRX08U90VfZjJq568m8X2bqVbxt u+WIfoaEco7fmi0RNiuI/GUlBmCaCMMFB1rrKNJpUL5njmAwr1+ZQwtzVtY8+gze tfNUaEb+ubAsDUyyRd8oDIhm9C5fPKw6+fwXadAMs67ZpCFpNJkBYNIkWbiV6YP6 et9IHIRw7BpDo512bUY4RNK0w0OPwmxEcAt6FvsV/fYFoIpUbu+xRV8l/g971At7 2PVebVk4rsYsgH5dpuQEKk/Muh55PsIDh6zNFbLYKWxDUqsx1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCIxB0heJMOkl1XEqSE9gnUkfmb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGIyZjJlYzMtNjdmMi0z NWI1LWI1ZmQtMTlmZDgxZWE4Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFNfWCf1j85xNtiGdO/t/BSjDnRx3pkGlZZiR+2Lee4MwHe3vz9 282CNPieun46zNUqO9MXcJwCZONwgB3V2yV72gunlT76z3sxgPi1YvhbfbNYujoZ xBdRQBMBIivu4YOFs9PS3eDhZJHmW4HynR3VGAyuoqFMN5ZHXRVFIfIhriN7w/17 sSQmUQQGyWDMD0zXmGjaNDgtP/3nhayz/B3WPfrudB61fWjsKVo69J/R7yMlCdDZ U2eWqpLQ8gMoYDy674VBDfXPjiYyac48a1VW4nig8YGodqJi0anaF2w9wBKiV35C ahyRnnQwlwybzBYeyNAtKFqO5kWMQLx/u70= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:50 2025 by rpki-client