$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f922387-c372-3943-a3d2-d872a8378668.roa File: 0f922387-c372-3943-a3d2-d872a8378668.roa (raw, json) Hash identifier: IBjFY6iSo90qtnfa8A8+PGpZHpT6KCr3bf9zr1qhIaA= Subject key identifier: 4F:6B:71:08:05:FB:46:49:1A:B2:A6:1F:EE:AE:AE:00:3A:9C:D8:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D4FD79DA5100D2D53880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f922387-c372-3943-a3d2-d872a8378668.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396554 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:fd:79:da:51:00:d2:d5:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=76b11fc6-3ed6-47ce-b757-f7b6cd751bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:40:72:a1:2a:18:86:14:56:5e:46:ba:99: 18:12:7e:c3:ef:fd:d9:24:a2:af:38:e7:0b:64:68: c6:1f:68:8e:c9:ae:1e:1e:90:0b:b8:29:31:4e:38: 7e:3d:4d:38:17:29:04:1c:c9:57:0b:dd:51:8b:6e: bf:4f:71:a1:45:54:84:bd:57:66:35:82:65:b5:20: 16:a3:04:7f:b8:4a:42:3c:88:ac:bc:69:c4:e1:4a: bd:94:ab:38:5e:48:04:df:4d:c7:a7:ec:2c:72:ae: 7d:c4:1e:c0:78:06:ec:c6:df:2e:34:48:a4:8b:da: b5:d8:f4:e8:d9:a7:62:6a:37:5b:20:0e:37:55:57: af:6e:12:36:e4:94:de:58:94:76:c6:28:0c:c9:85: e6:fa:cf:48:e2:37:ae:da:50:d3:d4:f5:0c:91:55: 9e:a6:d7:5a:32:b7:39:b0:0e:7e:9e:ce:fd:71:58: 27:c5:a4:ec:c6:20:7a:29:0b:bd:9e:e4:60:92:6f: 75:6e:aa:b6:84:57:d5:6a:9e:6d:f8:cf:e9:4b:2e: 24:3a:dc:78:2c:5d:72:d9:d2:39:f3:34:3d:43:8b: 53:1c:78:23:b1:ea:d6:66:a6:fe:4c:4c:6d:19:7b: 8e:a7:ed:88:5d:ee:1e:15:36:df:e4:5f:cc:b1:27: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:71:08:05:FB:46:49:1A:B2:A6:1F:EE:AE:AE:00:3A:9C:D8:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f922387-c372-3943-a3d2-d872a8378668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7f:0b:9a:33:d4:9f:36:86:78:d4:97:c3:76:29:21:44:98: e0:a1:fc:4d:5a:cf:30:2d:a0:e0:54:ad:0e:f1:5e:e3:e6:1e: 2a:5a:29:a1:b4:70:70:8a:2f:44:f1:df:a1:e8:cf:89:89:39: f5:7f:5c:10:00:b9:ec:91:8c:57:ce:c5:57:e5:fb:25:05:f5: d7:3d:0b:fd:34:ec:d3:56:82:22:f9:40:80:31:76:e4:ab:e3: e9:ef:b6:02:19:b8:65:fb:66:1c:68:ea:9e:16:69:2f:08:24: 9c:44:ab:d2:8e:0e:91:e9:a2:f6:a6:1b:4c:bf:b1:68:80:92: 07:95:41:f0:44:25:49:03:4e:8d:26:13:92:a3:99:8b:3f:49: 07:02:c3:01:33:87:a3:96:9b:80:9c:84:7c:58:6b:da:dd:82: 04:d0:54:dd:97:cd:96:fa:de:a7:1e:da:2e:2b:e3:2a:5d:6f: f8:6a:1b:95:72:b7:56:28:bd:4d:66:b1:2e:3c:6e:0c:4d:c3: 74:1e:1a:c3:b6:28:32:93:03:6e:d6:1f:e4:5c:45:bd:d7:a7: ca:be:ab:f7:25:a0:42:39:04:3d:98:9f:ff:b6:c5:91:af:95: e5:6b:59:a9:77:b2:fd:06:58:75:6d:a0:89:75:d5:b1:d1:0c: 06:80:b2:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9T9edpRANLVOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk NzZiMTFmYzYtM2VkNi00N2NlLWI3NTctZjdiNmNkNzUxYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswFAcqEqGIYUVl5GupkYEn7D7/3ZJKKvOOcL ZGjGH2iOya4eHpALuCkxTjh+PU04FykEHMlXC91Ri26/T3GhRVSEvVdmNYJltSAW owR/uEpCPIisvGnE4Uq9lKs4XkgE303Hp+wscq59xB7AeAbsxt8uNEiki9q12PTo 2adiajdbIA43VVevbhI25JTeWJR2xigMyYXm+s9I4jeu2lDT1PUMkVWeptdaMrc5 sA5+ns79cVgnxaTsxiB6KQu9nuRgkm91bqq2hFfVap5t+M/pSy4kOtx4LF1y2dI5 8zQ9Q4tTHHgjserWZqb+TExtGXuOp+2IXe4eFTbf5F/MsSdz2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9rcQgF+0ZJGrKmH+6urgA6nNjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY5MjIzODctYzM3Mi0z OTQzLWEzZDItZDg3MmE4Mzc4NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5/C5oz1J82hnjUl8N2KSFEmOCh/E1azzAtoOBUrQ7xXuPmHipa KaG0cHCKL0Tx36Hoz4mJOfV/XBAAueyRjFfOxVfl+yUF9dc9C/007NNWgiL5QIAx duSr4+nvtgIZuGX7Zhxo6p4WaS8IJJxEq9KODpHpovamG0y/sWiAkgeVQfBEJUkD To0mE5KjmYs/SQcCwwEzh6OWm4CchHxYa9rdggTQVN2XzZb63qce2i4r4ypdb/hq G5Vyt1YovU1msS48bgxNw3QeGsO2KDKTA27WH+RcRb3Xp8q+q/cloEI5BD2Yn/+2 xZGvleVrWal3sv0GWHVtoIl11bHRDAaAssk= -----END CERTIFICATE-----Generated at Sun Jun 15 22:00:24 2025 by rpki-client