$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa File: ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa (raw, json) Hash identifier: 1Baj0kJIWAGlTmwBxXeHDfmXDVRr4g9JYhvjq0zTG3U= Subject key identifier: 75:9E:1D:43:00:E8:86:90:28:0B:F5:15:F5:85:7D:23:81:DD:07:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D1B42207031BF77C9880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396551 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:b4:22:07:03:1b:f7:7c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=ffa97661-b65c-432a-a4ab-e15609eaa242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:0a:93:58:11:0e:28:a1:ea:bb:17:7a:0c: cb:a2:09:96:30:43:0c:4f:35:86:e4:75:82:6e:3d: 9c:b7:85:d4:d5:df:62:56:81:8b:9b:f6:54:fe:e2: 3d:89:06:67:11:85:76:87:68:0e:1d:de:cc:c1:ee: bd:8d:9a:a3:c6:ee:33:97:3c:01:38:08:eb:d0:33: 63:3d:20:c7:35:61:4d:7d:a9:7a:9d:67:64:f8:83: c8:92:18:ea:71:be:4c:42:f2:50:05:38:51:7c:7e: 6f:ac:cf:f6:e8:19:19:1c:fe:50:5a:46:75:94:dc: 3d:10:a2:a0:45:d6:4d:d3:f6:a8:cb:32:88:f3:93: 7d:65:a2:8c:5e:0d:d8:c5:5d:0c:68:2b:57:5f:d7: ec:9e:b7:fc:b1:04:ac:7e:d6:dd:8b:40:23:d8:ad: 19:13:39:95:a1:90:c6:63:2d:28:19:6a:07:d2:de: 54:b1:6f:f7:7c:b5:ba:1c:88:13:7a:f2:71:0a:f3: e2:05:55:3b:23:be:3b:71:bc:10:c7:96:87:82:3d: c0:78:94:f6:f4:43:3d:41:c4:65:22:03:c1:0d:54: 71:d2:42:7d:fb:b5:22:4d:c8:ff:aa:26:48:f0:7e: 73:9d:5a:48:c6:6c:c4:07:36:5a:94:d4:9c:78:69: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9E:1D:43:00:E8:86:90:28:0B:F5:15:F5:85:7D:23:81:DD:07:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:22:40:3d:1a:e1:65:05:d7:2d:21:a5:00:b3:d3:88:20:5f: a2:ff:87:82:84:be:93:60:3c:c2:e6:9f:43:ae:37:5d:b9:d4: 2e:53:e5:f4:fb:84:62:cd:41:c9:b7:d2:c1:fe:fb:55:03:dd: a8:ec:98:0e:cb:7d:73:23:99:ae:b7:ff:a7:e0:fe:11:72:af: 24:2c:37:48:d2:c2:f2:38:4a:3a:fa:aa:96:2e:c6:15:7b:dc: 03:6c:ce:4b:a9:5e:13:8f:a0:17:89:30:df:6d:46:53:1c:ce: 81:01:d4:cf:5b:a0:6c:a6:34:ff:5b:38:0e:ad:37:8f:55:9f: f4:9c:92:c8:77:d0:3a:89:3c:af:15:7d:be:96:71:0e:ad:bb: e0:40:8f:07:59:d3:57:e0:c7:71:a9:40:3b:be:c8:ba:a3:54: ca:91:1b:68:86:ef:06:b7:a0:a9:12:62:57:1f:49:e0:45:0d: 72:14:b0:39:4f:91:9c:27:9d:13:57:50:8d:8b:5d:4d:1e:55: 3a:df:d7:e0:ce:8d:03:ee:dc:ed:41:82:68:07:4b:20:cc:c6: ca:a0:96:80:12:de:14:02:3b:8c:62:e7:ce:87:e0:1b:77:72: 97:a6:95:77:26:fc:1b:67:da:f6:b4:a1:f0:d1:40:1d:74:14: 9d:e3:bd:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9G0IgcDG/d8mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk ZmZhOTc2NjEtYjY1Yy00MzJhLWE0YWItZTE1NjA5ZWFhMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib4Kk1gRDiih6rsXegzLogmWMEMMTzWG5HWC bj2ct4XU1d9iVoGLm/ZU/uI9iQZnEYV2h2gOHd7Mwe69jZqjxu4zlzwBOAjr0DNj PSDHNWFNfal6nWdk+IPIkhjqcb5MQvJQBThRfH5vrM/26BkZHP5QWkZ1lNw9EKKg RdZN0/aoyzKI85N9ZaKMXg3YxV0MaCtXX9fsnrf8sQSsftbdi0Aj2K0ZEzmVoZDG Yy0oGWoH0t5UsW/3fLW6HIgTevJxCvPiBVU7I747cbwQx5aHgj3AeJT29EM9QcRl IgPBDVRx0kJ9+7UiTcj/qiZI8H5znVpIxmzEBzZalNSceGnj5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHWeHUMA6IaQKAv1FfWFfSOB3QdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY1MjcwNGYtNzk2Ni0z ZjdhLWFlN2QtMWQ3MmZkZjQ0OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAgiQD0a4WUF1y0hpQCz04ggX6L/h4KEvpNgPMLmn0OuN1251C5T 5fT7hGLNQcm30sH++1UD3ajsmA7LfXMjma63/6fg/hFyryQsN0jSwvI4Sjr6qpYu xhV73ANszkupXhOPoBeJMN9tRlMczoEB1M9boGymNP9bOA6tN49Vn/Scksh30DqJ PK8Vfb6WcQ6tu+BAjwdZ01fgx3GpQDu+yLqjVMqRG2iG7wa3oKkSYlcfSeBFDXIU sDlPkZwnnRNXUI2LXU0eVTrf1+DOjQPu3O1BgmgHSyDMxsqgloAS3hQCO4xi586H 4Bt3cpemlXcm/Btn2va0ofDRQB10FJ3jvUU= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:43 2025 by rpki-client