$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9d6ccb1-0539-3856-b352-b145944aee48.roa File: f9d6ccb1-0539-3856-b352-b145944aee48.roa (raw, json) Hash identifier: ZBarmiijllnrRM/ubNXdEneNTrU/WZ+RA8JteYPDAOU= Subject key identifier: 54:BD:D1:FD:8E:F8:DF:40:3F:A5:B3:AF:14:01:F9:8F:7C:4C:02:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D4E0B3148843F7D22218 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9d6ccb1-0539-3856-b352-b145944aee48.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396617 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:e0:b3:14:88:43:f7:d2:22:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=627b9873-4ba6-44a2-8acd-e5d3afed22e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:42:7e:a2:0a:0d:72:e9:59:6f:19:4b:99: af:66:0d:0b:30:f6:c1:57:06:85:79:d6:4e:b8:42: f3:46:4a:d6:3d:cc:ae:47:04:68:52:5d:c6:21:03: 3a:05:f4:dd:3e:b3:02:a8:49:ca:d8:f2:a8:c0:5d: 02:c2:3f:ab:3e:5a:a1:86:6c:f2:cd:e0:a4:f6:1c: 5e:08:f2:83:1f:b1:5a:ae:10:c5:ac:d9:3a:f9:7a: a4:2e:c1:b9:b5:3a:49:89:06:60:13:59:4b:44:3b: a7:2f:52:88:54:ec:27:3c:51:10:1c:98:f7:f5:a1: 79:ab:73:56:e5:0c:eb:61:d7:ef:72:8a:ce:33:88: df:d6:7c:4e:b3:b7:85:b0:e6:7b:5e:dc:2c:48:a0: 89:55:dc:51:1a:6c:a4:dd:fe:6f:5c:68:25:1a:67: 21:34:d1:c1:57:a4:30:e1:9b:2b:77:21:5a:5d:e2: 4f:e1:0b:76:ed:d4:66:d6:64:27:4e:b3:f8:c1:99: 18:f1:b7:67:16:34:01:ef:19:a9:e7:a6:99:2c:95: 31:b2:bc:af:b3:c6:5a:18:07:a7:80:aa:ce:0a:9b: 6a:15:e8:f0:1b:11:4f:51:da:63:f6:e1:bc:21:02: 1d:07:80:b4:3d:33:49:11:64:f0:3f:71:76:d6:87: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BD:D1:FD:8E:F8:DF:40:3F:A5:B3:AF:14:01:F9:8F:7C:4C:02:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9d6ccb1-0539-3856-b352-b145944aee48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6a:31:bf:86:0d:c8:e3:1c:43:e2:3c:30:75:d2:f9:f6:43: bc:15:c6:00:63:e6:93:22:e8:b5:0f:8c:d1:a5:d7:9e:04:d4: a0:1a:50:7c:3d:97:3c:19:49:be:87:1e:4e:da:36:96:21:c8: 99:d9:bf:08:48:60:8a:d5:48:d5:71:2e:fc:96:29:f1:66:19: 9c:92:ac:74:b8:a6:a5:c1:fb:db:f0:0a:67:b8:f0:88:24:a6: f9:9d:b0:a0:b1:6d:86:b9:6c:6c:0e:b7:f3:a3:14:0d:ff:66: 85:5b:b3:83:ef:7c:ee:97:24:50:a6:e0:96:ba:a9:88:f4:ee: 82:ba:57:76:53:40:05:7d:1d:de:4a:38:54:fe:10:0a:35:4b: 30:46:e9:63:70:ae:98:23:9e:8e:8f:72:f6:de:07:bd:2b:dc: e4:81:2d:68:1f:a0:a8:76:df:e4:2d:96:37:cf:eb:11:c2:28: d4:bd:a7:6e:7a:92:66:24:55:ec:d4:25:1d:bb:e0:9f:de:5b: f4:e1:1b:cf:a1:ae:2b:84:b7:9f:a4:5c:4d:e0:50:81:6c:fd: c1:40:c8:60:d0:fc:5e:11:e8:cb:52:54:a5:1b:dc:74:a7:eb: 0c:35:76:61:d6:ed:1d:23:49:e4:7a:13:00:da:e6:9c:2c:84: a7:2d:38:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9TgsxSIQ/fSIhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk NjI3Yjk4NzMtNGJhNi00NGEyLThhY2QtZTVkM2FmZWQyMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3pCfqIKDXLpWW8ZS5mvZg0LMPbBVwaFedZO uELzRkrWPcyuRwRoUl3GIQM6BfTdPrMCqEnK2PKowF0Cwj+rPlqhhmzyzeCk9hxe CPKDH7FarhDFrNk6+XqkLsG5tTpJiQZgE1lLRDunL1KIVOwnPFEQHJj39aF5q3NW 5QzrYdfvcorOM4jf1nxOs7eFsOZ7XtwsSKCJVdxRGmyk3f5vXGglGmchNNHBV6Qw 4ZsrdyFaXeJP4Qt27dRm1mQnTrP4wZkY8bdnFjQB7xmp56aZLJUxsryvs8ZaGAen gKrOCptqFejwGxFPUdpj9uG8IQIdB4C0PTNJEWTwP3F21octSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFS90f2O+N9AP6WzrxQB+Y98TAIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjlkNmNjYjEtMDUzOS0z ODU2LWIzNTItYjE0NTk0NGFlZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtqMb+GDcjjHEPiPDB10vn2Q7wVxgBj5pMi6LUPjNGl154E1KAa UHw9lzwZSb6HHk7aNpYhyJnZvwhIYIrVSNVxLvyWKfFmGZySrHS4pqXB+9vwCme4 8IgkpvmdsKCxbYa5bGwOt/OjFA3/ZoVbs4PvfO6XJFCm4Ja6qYj07oK6V3ZTQAV9 Hd5KOFT+EAo1SzBG6WNwrpgjno6PcvbeB70r3OSBLWgfoKh23+QtljfP6xHCKNS9 p256kmYkVezUJR274J/eW/ThG8+hriuEt5+kXE3gUIFs/cFAyGDQ/F4R6MtSVKUb 3HSn6ww1dmHW7R0jSeR6EwDa5pwshKctOCo= -----END CERTIFICATE-----Generated at Fri Jun 6 19:45:02 2025 by rpki-client