$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa File: e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa (raw, json) Hash identifier: lcqpFTZczd5Inqv9CnZ6uxfskzcYCSwOAeMl7W27KaU= Subject key identifier: D7:50:A7:BE:32:18:B2:93:47:C3:E1:3B:26:F9:91:D6:EA:E4:CC:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D127AEE0FF2C0D1EFF6C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 25485 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:27:ae:e0:ff:2c:0d:1e:ff:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=84d7ee20-0d2f-43a1-b114-ad4e07759255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:40:35:3e:c0:99:3d:c8:50:59:31:bd:a5: f0:35:53:52:dc:1b:2d:7e:15:79:ca:d8:f9:8d:66: f2:15:72:f6:07:5f:5d:76:39:ed:e9:f2:46:ba:6f: e4:d0:71:7d:87:c1:01:bb:cb:9d:6c:bd:50:45:6a: ec:fd:fc:f8:46:5e:f1:45:10:20:dc:ca:b5:ee:47: 48:ab:69:fa:01:ed:ee:70:6b:7d:3b:ef:93:2e:8b: 11:01:89:f4:33:81:95:84:ce:ac:80:62:1c:83:5b: 9b:fa:30:8c:9f:ce:9d:54:03:2b:e3:2f:b9:be:39: 04:7f:d3:7c:72:c2:82:ee:9f:0b:30:68:95:0c:ee: 76:6a:53:49:93:3f:b9:ac:b8:23:ac:69:b4:f1:a3: 75:d2:93:aa:f8:c6:bf:da:47:5e:bb:9f:cd:fb:a2: 50:43:ee:a2:0f:94:d3:75:1d:d0:ae:e2:11:f5:17: fb:48:71:50:96:19:63:64:5c:58:90:d8:88:7c:5a: ca:23:d9:c4:04:5a:36:e4:31:5a:0f:fc:e4:c1:48: 5e:7e:e9:60:e3:93:2f:fa:56:73:23:f3:3a:46:93: 6a:ca:00:4a:1d:66:33:74:5d:47:90:97:40:fc:e1: dc:0a:53:4a:11:91:0b:82:b8:82:55:56:39:f3:ed: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:50:A7:BE:32:18:B2:93:47:C3:E1:3B:26:F9:91:D6:EA:E4:CC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8fc2348-8cc2-37a8-8fe2-a72bceaf1df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ae:3b:57:18:ba:4e:1c:ce:08:2f:30:64:ad:19:4a:b8:7a: b1:e4:27:73:d7:db:fe:3f:db:bf:34:a9:4a:af:81:4c:ac:fd: 80:9f:7a:23:70:4d:04:12:4c:17:06:03:e0:fa:69:36:77:f7: 05:8b:5b:82:96:0d:b4:ff:7a:83:0a:e7:d2:3e:38:67:7c:5c: 75:91:33:af:41:57:3e:2e:c8:a0:10:91:18:2b:ce:73:ef:33: a2:a6:a1:e0:29:07:41:fd:36:32:4d:29:4e:85:78:8f:23:c2: db:c6:67:e1:7d:fa:74:a1:1d:28:4f:4e:ac:4a:06:b1:45:c6: 32:be:07:f7:8b:6d:23:c7:c6:57:bd:04:42:61:44:2e:05:90: 5e:04:28:41:10:9c:9c:88:f6:2f:be:b7:11:c2:e2:fe:98:65: 4d:fe:9b:d7:14:02:61:36:d4:29:b0:36:ce:11:80:63:eb:b0: ef:48:cb:16:a7:f6:e2:b9:5f:e9:26:ba:ce:ea:f7:d0:b8:20: 3c:c8:7d:38:bc:83:00:32:6e:0d:91:1b:c1:51:0c:43:83:22: 67:6f:4a:a0:37:eb:72:fa:6c:24:b4:50:6c:49:06:fa:3f:58: f6:a6:ba:7b:d4:f9:4e:f5:5f:ee:31:3b:d1:ec:aa:cd:54:61: b0:f8:77:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9EnruD/LA0e/2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk ODRkN2VlMjAtMGQyZi00M2ExLWIxMTQtYWQ0ZTA3NzU5MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzlANT7AmT3IUFkxvaXwNVNS3BstfhV5ytj5 jWbyFXL2B19ddjnt6fJGum/k0HF9h8EBu8udbL1QRWrs/fz4Rl7xRRAg3Mq17kdI q2n6Ae3ucGt9O++TLosRAYn0M4GVhM6sgGIcg1ub+jCMn86dVAMr4y+5vjkEf9N8 csKC7p8LMGiVDO52alNJkz+5rLgjrGm08aN10pOq+Ma/2kdeu5/N+6JQQ+6iD5TT dR3QruIR9Rf7SHFQlhljZFxYkNiIfFrKI9nEBFo25DFaD/zkwUhefulg45Mv+lZz I/M6RpNqygBKHWYzdF1HkJdA/OHcClNKEZELgriCVVY58+3S/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNdQp74yGLKTR8PhOyb5kdbq5MywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZThmYzIzNDgtOGNjMi0z N2E4LThmZTItYTcyYmNlYWYxZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmuO1cYuk4czggvMGStGUq4erHkJ3PX2/4/2780qUqvgUys/YCf eiNwTQQSTBcGA+D6aTZ39wWLW4KWDbT/eoMK59I+OGd8XHWRM69BVz4uyKAQkRgr znPvM6KmoeApB0H9NjJNKU6FeI8jwtvGZ+F9+nShHShPTqxKBrFFxjK+B/eLbSPH xle9BEJhRC4FkF4EKEEQnJyI9i++txHC4v6YZU3+m9cUAmE21CmwNs4RgGPrsO9I yxan9uK5X+kmus7q99C4IDzIfTi8gwAybg2RG8FRDEODImdvSqA363L6bCS0UGxJ Bvo/WPamunvU+U71X+4xO9Hsqs1UYbD4dzM= -----END CERTIFICATE-----Generated at Fri Jun 6 19:14:56 2025 by rpki-client