$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa File: e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa (raw, json) Hash identifier: 8aBp84fZd2yzGANRVWlIyG13zEi0qdGbNchQNh1vzPc= Subject key identifier: 8E:A0:11:79:CE:78:14:70:74:C1:62:B7:1C:72:1B:62:A2:03:60:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D0F0678B5138902C61C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396560 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:f0:67:8b:51:38:90:2c:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=ad849354-47c8-4142-8dbe-01f3a9bdb8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:01:7e:9b:e0:6d:88:0c:28:28:85:ec:78:1a: 9b:db:d0:90:9b:06:e6:8d:a2:94:3d:59:5d:19:25: ab:06:cf:6a:66:78:78:b2:9a:bc:f6:6f:46:92:08: e6:55:9c:2c:64:b2:c4:62:2b:c1:a3:64:88:bc:e7: 7a:5c:df:af:a1:05:3a:73:d6:41:b2:a5:a0:41:52: 9b:5e:82:16:e0:43:47:06:bc:f0:7f:43:32:b8:5a: 46:2c:75:bb:ea:25:a2:49:2a:a5:13:36:df:11:60: 2c:36:55:6a:1c:79:52:63:0e:f3:6c:ec:52:32:d9: 02:11:46:dd:7c:b6:b7:0d:ff:c6:10:a9:89:b8:84: c7:52:f8:66:3e:1e:f4:e7:d5:31:15:f1:11:f4:d5: fd:93:5b:ae:59:85:44:1c:2b:81:d6:45:6f:3f:e8: 56:5e:14:65:6f:14:4e:7c:13:ab:8a:2e:2b:b5:39: 15:a1:16:76:e7:52:04:8d:4e:14:24:24:99:27:a3: b2:e3:34:cf:d8:82:7b:6d:04:ee:98:7a:a7:19:9a: 24:98:96:2c:a4:e2:bd:73:dd:8c:cb:b2:17:e8:ab: 4a:08:56:d7:41:a2:75:2b:51:bc:9e:7c:9f:bf:4f: 25:d3:dd:f7:86:bd:ae:0e:83:55:13:62:22:cc:2a: 4c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:11:79:CE:78:14:70:74:C1:62:B7:1C:72:1B:62:A2:03:60:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5574a01-b98c-3e5a-9a23-cb253e0c1046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:65:d6:34:84:96:11:df:17:19:d5:3b:49:34:e0:b6:49:69: 50:a0:33:a0:dc:15:3b:bd:71:bb:2f:3f:2a:35:fe:98:3c:10: 1a:5d:58:9d:fc:c0:82:db:63:5c:f5:0c:95:67:ab:c3:7f:b7: 7c:3c:75:f8:82:9b:87:11:02:a6:d3:ba:d4:44:2d:71:18:d7: 4f:79:ff:85:ca:ef:c0:a1:26:10:92:c6:eb:2c:3b:1e:c2:e9: bf:d0:7d:bd:68:25:da:96:d9:8f:79:8e:60:e4:c0:75:2b:b8: 99:a9:b2:e4:af:e6:aa:79:09:3d:fe:5e:e1:c1:3e:03:6b:4e: ba:dc:9e:c3:68:f8:00:0c:82:47:f2:77:f7:3e:e6:12:e5:d6: b5:54:e2:2e:a9:f6:d7:a6:86:6f:c0:83:d9:2e:6f:7c:97:81: d4:05:c6:80:0a:ed:8e:a0:d5:be:d0:c0:1d:04:ae:71:a3:92: 21:0b:1d:aa:76:8c:b2:d6:f5:d8:08:a4:b6:7a:95:d9:68:41: 34:c4:3d:4e:f2:38:e4:0d:34:81:63:8d:09:8e:45:0e:f0:b7: 82:26:f4:e7:03:ee:81:aa:fc:b0:58:1c:eb:7e:39:bd:c0:4b: d3:b0:14:2e:6d:93:73:71:9f:35:15:ab:9b:93:6a:54:01:38: 54:54:3e:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9DwZ4tROJAsYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk YWQ4NDkzNTQtNDdjOC00MTQyLThkYmUtMDFmM2E5YmRiOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAF+m+BtiAwoKIXseBqb29CQmwbmjaKUPVld GSWrBs9qZnh4spq89m9GkgjmVZwsZLLEYivBo2SIvOd6XN+voQU6c9ZBsqWgQVKb XoIW4ENHBrzwf0MyuFpGLHW76iWiSSqlEzbfEWAsNlVqHHlSYw7zbOxSMtkCEUbd fLa3Df/GEKmJuITHUvhmPh7059UxFfER9NX9k1uuWYVEHCuB1kVvP+hWXhRlbxRO fBOrii4rtTkVoRZ251IEjU4UJCSZJ6Oy4zTP2IJ7bQTumHqnGZokmJYspOK9c92M y7IX6KtKCFbXQaJ1K1G8nnyfv08l0933hr2uDoNVE2IizCpM/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI6gEXnOeBRwdMFitxxyG2KiA2AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTU1NzRhMDEtYjk4Yy0z ZTVhLTlhMjMtY2IyNTNlMGMxMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9l1jSElhHfFxnVO0k04LZJaVCgM6DcFTu9cbsvPyo1/pg8EBpd WJ38wILbY1z1DJVnq8N/t3w8dfiCm4cRAqbTutRELXEY1095/4XK78ChJhCSxuss Ox7C6b/Qfb1oJdqW2Y95jmDkwHUruJmpsuSv5qp5CT3+XuHBPgNrTrrcnsNo+AAM gkfyd/c+5hLl1rVU4i6p9temhm/Ag9kub3yXgdQFxoAK7Y6g1b7QwB0ErnGjkiEL Hap2jLLW9dgIpLZ6ldloQTTEPU7yOOQNNIFjjQmORQ7wt4Im9OcD7oGq/LBYHOt+ Ob3AS9OwFC5tk3NxnzUVq5uTalQBOFRUPkQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:19:45 2025 by rpki-client