$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa File: f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa (raw, json) Hash identifier: GI4O6wf/1+nx9zio0ta5PmQMMxHMPSiUFwvjckebHKU= Subject key identifier: B4:8E:D7:D4:1D:87:09:30:11:91:EA:1B:6F:CB:A2:5B:E5:51:67:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D61E6B7F860D661A7900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa Signing time: Tue 03 Jun 2025 12:47:23 +0000 ROA not before: Tue 03 Jun 2025 12:47:23 +0000 ROA not after: Mon 01 Sep 2025 12:47:23 +0000 asID: 20362 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d6:1e:6b:7f:86:0d:66:1a:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:23 2025 GMT Not After : Sep 1 12:47:23 2025 GMT Subject: CN=84df9996-f620-4c2c-a54e-44ea8652aab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:94:b4:2d:93:01:03:e2:3c:0b:55:35:a7: ab:cb:89:2c:7b:85:32:2a:78:6e:8d:fd:4e:fe:49: 87:8b:8f:69:ae:2a:f8:28:e2:d9:97:6b:db:27:3c: 98:4f:66:24:66:50:09:71:0e:c4:d9:ee:3b:43:43: 3d:74:8c:75:d5:19:d5:92:68:20:91:b1:d0:1a:49: ea:57:2f:10:57:fa:f6:49:fe:dc:68:e9:0d:c9:b2: 3a:9e:bd:47:4c:f7:d3:65:15:63:02:14:2e:cd:43: 36:32:0a:4d:a7:fe:86:4d:f6:ff:1e:18:9e:2f:72: fa:67:3b:c4:85:38:b6:8b:3a:2e:e5:16:dd:79:17: 3c:0a:f3:2f:73:5f:54:51:62:4a:3c:be:a1:60:9b: 4e:9f:5b:2d:26:52:86:de:1b:a6:e4:89:71:10:f2: 05:4a:ab:0d:9b:90:70:57:40:12:19:e8:9c:62:f5: 64:00:91:2b:f8:21:0c:2d:46:a4:6c:f3:96:ab:91: 3b:3a:ff:75:84:36:97:b8:e3:a9:94:09:69:0c:a4: 82:45:27:8f:3e:fe:a2:bc:cf:88:1b:44:11:a7:cb: 8e:08:77:d7:bb:4f:1c:51:e0:d0:87:10:01:c9:c1: 1b:c9:ef:44:22:6d:c1:95:2f:f4:45:82:09:5a:8b: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8E:D7:D4:1D:87:09:30:11:91:EA:1B:6F:CB:A2:5B:E5:51:67:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2b5f1a3-28d2-323d-8ee8-5de388bfd4f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b5:24:bd:2e:17:be:c5:65:f4:1a:59:01:6c:11:68:4e:d9: 34:fc:76:00:13:f2:6b:21:a3:66:5b:46:c0:d8:8b:62:70:f7: 39:0a:fb:9b:c4:4c:8f:48:13:2e:a4:f2:1b:c4:b3:4e:6a:32: 26:60:ba:6b:03:e9:85:5d:72:c0:5f:95:de:df:b2:f8:19:e9: 41:c0:27:96:3c:39:b9:72:a4:1f:3e:52:07:98:1a:b0:2f:1e: 9c:90:b7:f5:3e:44:d3:d7:75:46:bc:2f:78:8c:95:d8:58:94: 5f:95:e3:65:9a:ea:1d:a6:47:8d:15:85:40:ab:3d:01:ec:e1: 7f:e4:ae:c3:89:27:ec:ce:90:25:b2:8a:27:3e:58:3b:00:2e: 20:ed:5b:56:9f:22:fa:aa:dd:9f:aa:16:e8:3d:c5:0b:5d:60: fa:6d:51:9e:9c:f2:af:66:75:4b:a7:6f:dc:4d:91:c0:15:32: f7:3f:30:a3:0d:c1:65:c6:9c:5a:3c:a6:86:95:24:a6:16:00: a3:36:de:21:c5:a5:b5:96:8e:60:fb:69:ea:f8:e2:1d:4f:3e: 20:0c:f1:0e:9a:e1:d4:90:22:ce:4a:97:12:4e:32:73:0f:87: 76:e7:11:0e:90:26:af:31:f5:db:30:25:c6:c6:56:99:8f:83: e5:b8:33:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9Yea3+GDWYaeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyM1oXDTI1MDkwMTEyNDcyM1owLzEtMCsGA1UEAxMk ODRkZjk5OTYtZjYyMC00YzJjLWE1NGUtNDRlYTg2NTJhYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle2UtC2TAQPiPAtVNaery4kse4UyKnhujf1O /kmHi49prir4KOLZl2vbJzyYT2YkZlAJcQ7E2e47Q0M9dIx11RnVkmggkbHQGknq Vy8QV/r2Sf7caOkNybI6nr1HTPfTZRVjAhQuzUM2MgpNp/6GTfb/HhieL3L6ZzvE hTi2izou5RbdeRc8CvMvc19UUWJKPL6hYJtOn1stJlKG3hum5IlxEPIFSqsNm5Bw V0ASGeicYvVkAJEr+CEMLUakbPOWq5E7Ov91hDaXuOOplAlpDKSCRSePPv6ivM+I G0QRp8uOCHfXu08cUeDQhxABycEbye9EIm3BlS/0RYIJWoukNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSO19QdhwkwEZHqG2/LolvlUWelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjJiNWYxYTMtMjhkMi0z MjNkLThlZTgtNWRlMzg4YmZkNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADW1JL0uF77FZfQaWQFsEWhO2TT8dgAT8msho2ZbRsDYi2Jw9zkK +5vETI9IEy6k8hvEs05qMiZgumsD6YVdcsBfld7fsvgZ6UHAJ5Y8OblypB8+UgeY GrAvHpyQt/U+RNPXdUa8L3iMldhYlF+V42Wa6h2mR40VhUCrPQHs4X/krsOJJ+zO kCWyiic+WDsALiDtW1afIvqq3Z+qFug9xQtdYPptUZ6c8q9mdUunb9xNkcAVMvc/ MKMNwWXGnFo8poaVJKYWAKM23iHFpbWWjmD7aer44h1PPiAM8Q6a4dSQIs5KlxJO MnMPh3bnEQ6QJq8x9dswJcbGVpmPg+W4M/E= -----END CERTIFICATE-----Generated at Fri Jun 6 19:36:28 2025 by rpki-client