$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00cd6d55-2a80-39c3-bec8-212dde2f2267.roa File: 00cd6d55-2a80-39c3-bec8-212dde2f2267.roa (raw, json) Hash identifier: 5tbOSVHcyfwa5cTgfHKzAGULGkD2gwpIHieQ29hserM= Subject key identifier: 40:7E:8A:D0:AC:C7:A7:72:16:AF:77:F4:B5:18:F8:13:69:08:B6:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D63B2232F4202697FB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00cd6d55-2a80-39c3-bec8-212dde2f2267.roa Signing time: Tue 03 Jun 2025 12:47:23 +0000 ROA not before: Tue 03 Jun 2025 12:47:23 +0000 ROA not after: Mon 01 Sep 2025 12:47:23 +0000 asID: 396552 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d6:3b:22:32:f4:20:26:97:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:23 2025 GMT Not After : Sep 1 12:47:23 2025 GMT Subject: CN=3e188a80-1fcc-453c-b31f-0320af2e17ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:18:ca:de:8e:b5:91:5f:c7:8b:43:b7:7c: 01:97:9c:cb:a2:c4:98:61:3c:6a:91:69:f8:f9:51: c9:47:40:6b:4d:8a:26:6b:7f:45:5d:20:be:75:9f: 0e:7b:ad:63:f0:ef:d6:4c:5b:f4:13:66:e1:a6:02: 45:48:50:b4:9d:73:00:16:28:24:f4:7a:a0:f4:42: 7b:98:a3:7b:11:bf:34:2c:38:ec:9a:66:73:04:e0: 3c:c4:72:a2:8b:4d:b8:b8:99:fc:ff:1e:ac:64:66: a0:e2:3f:26:9d:47:75:74:a7:ba:e7:e9:13:af:2e: f8:8b:2b:4c:e8:ce:f4:48:6c:65:fe:a2:f5:c3:64: 24:e0:5e:dc:a6:2e:f2:9e:95:0e:73:8e:33:fb:f5: fb:e4:f5:bd:2b:3d:f4:24:cf:18:1b:b2:9b:6f:83: 38:c7:95:fe:4d:92:9b:56:f6:93:83:af:68:57:59: e8:2c:ae:c1:6d:dd:da:dd:3e:81:0c:0b:b4:52:bb: a6:6d:9d:e8:2f:3a:e1:59:db:0f:64:b6:52:9f:10: f5:3f:f4:14:97:ef:2b:d2:1b:c1:98:36:b1:17:dd: 58:65:66:8a:03:f3:db:bc:f7:e4:69:50:51:02:ed: 70:9b:21:0c:1e:da:e7:70:18:e1:77:75:c8:de:79: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:8A:D0:AC:C7:A7:72:16:AF:77:F4:B5:18:F8:13:69:08:B6:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00cd6d55-2a80-39c3-bec8-212dde2f2267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:81:56:1e:fd:21:dd:09:75:c1:55:55:e5:62:2c:26:eb:12: 43:32:6f:26:f8:26:01:90:33:e3:3f:7e:b7:50:8a:20:bc:9a: 39:f0:46:d4:95:55:f5:c5:f2:c8:10:63:b2:9a:23:07:60:10: da:4c:7b:b4:d2:aa:75:59:65:76:30:5a:36:73:36:8c:bd:74: 2f:40:af:bb:77:8f:b4:a3:5a:55:72:08:99:9d:b2:60:ab:83: 20:d1:9d:a4:9a:a0:04:9e:94:74:1e:60:91:77:9f:f5:fa:e6: ba:4a:36:d8:5e:21:4e:2d:ac:b8:86:bf:21:60:fb:95:4e:ab: ba:86:74:90:40:d7:3f:19:bf:b3:83:22:56:b0:54:af:d2:d9: 0b:90:38:cf:35:2b:c9:ea:c3:50:1a:58:43:a3:7c:63:7f:59: fe:84:4c:16:53:b3:f9:66:4d:85:cf:9c:5c:06:34:ee:d3:08: bf:1f:90:99:45:52:3b:ba:72:b3:7d:38:e1:a5:49:6a:36:2e: 38:c1:11:db:2e:62:9f:73:54:3c:bf:f9:20:8f:30:76:a8:71: 11:85:c5:0a:cc:c0:5b:c9:4d:04:88:28:a2:e3:79:2a:37:5e: af:68:e3:d3:00:8c:9a:89:13:d7:55:83:2b:06:bd:d8:71:b6: 2e:b0:aa:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9Y7IjL0ICaX+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyM1oXDTI1MDkwMTEyNDcyM1owLzEtMCsGA1UEAxMk M2UxODhhODAtMWZjYy00NTNjLWIzMWYtMDMyMGFmMmUxN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iwYyt6OtZFfx4tDt3wBl5zLosSYYTxqkWn4 +VHJR0BrTYoma39FXSC+dZ8Oe61j8O/WTFv0E2bhpgJFSFC0nXMAFigk9Hqg9EJ7 mKN7Eb80LDjsmmZzBOA8xHKii024uJn8/x6sZGag4j8mnUd1dKe65+kTry74iytM 6M70SGxl/qL1w2Qk4F7cpi7ynpUOc44z+/X75PW9Kz30JM8YG7Kbb4M4x5X+TZKb VvaTg69oV1noLK7Bbd3a3T6BDAu0UrumbZ3oLzrhWdsPZLZSnxD1P/QUl+8r0hvB mDaxF91YZWaKA/PbvPfkaVBRAu1wmyEMHtrncBjhd3XI3nkNAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEB+itCsx6dyFq939LUY+BNpCLbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDBjZDZkNTUtMmE4MC0z OWMzLWJlYzgtMjEyZGRlMmYyMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+BVh79Id0JdcFVVeViLCbrEkMybyb4JgGQM+M/frdQiiC8mjnw RtSVVfXF8sgQY7KaIwdgENpMe7TSqnVZZXYwWjZzNoy9dC9Ar7t3j7SjWlVyCJmd smCrgyDRnaSaoASelHQeYJF3n/X65rpKNtheIU4trLiGvyFg+5VOq7qGdJBA1z8Z v7ODIlawVK/S2QuQOM81K8nqw1AaWEOjfGN/Wf6ETBZTs/lmTYXPnFwGNO7TCL8f kJlFUju6crN9OOGlSWo2LjjBEdsuYp9zVDy/+SCPMHaocRGFxQrMwFvJTQSIKKLj eSo3Xq9o49MAjJqJE9dVgysGvdhxti6wqgw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:56:06 2025 by rpki-client