$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa File: 10198ceb-22cd-3b41-998f-be711e0e98d0.roa (raw, json) Hash identifier: 0hfy74Ui9mFw/dIpw3IWMEwPGSdC62gE4wRsB1c/Izs= Subject key identifier: 84:9F:AB:15:2B:DA:00:C5:88:33:20:E8:D9:DE:F4:9D:85:05:FD:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A00DAEF12B6452D8717D67A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:ef:12:b6:45:2d:87:17:d6:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=f5c223d0-a531-42ae-97fa-04e5af689e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:82:1d:24:bd:a0:b1:b2:2d:8f:cc:93:9c: 41:eb:2d:39:3f:28:e4:79:e7:87:1f:44:3a:05:e5: e0:40:0e:2e:d0:a9:49:5b:24:25:af:ea:df:a3:a9: d2:2e:d2:fe:8d:cd:14:cf:58:8e:80:84:97:b1:a8: 3e:f6:00:bd:75:00:89:ac:02:ad:b2:f7:21:68:5d: 50:a4:fa:07:15:69:c1:3d:83:4a:de:5f:c1:08:30: 5d:19:9f:84:d3:25:83:cc:37:18:c2:8f:fb:c9:0e: d1:16:35:26:e4:5b:e4:33:45:3a:b3:c1:7f:11:64: 0d:ed:29:20:b4:58:16:e8:ed:db:68:68:09:dc:1b: 03:59:34:48:bb:94:88:cc:44:bf:2e:3d:54:19:fa: ee:2e:2b:13:8e:ca:1a:ee:6a:32:41:a1:92:be:2f: f5:a4:55:c1:a8:db:90:e8:be:3d:a4:3e:40:2f:c1: 3d:1f:9e:be:e8:fa:ab:09:01:c5:b1:cc:61:91:a7: b6:3d:e2:58:27:ba:03:75:eb:61:79:c6:e7:db:24: 1f:18:36:56:ca:04:17:59:66:68:4c:e5:20:4e:b8: 97:5f:41:a0:5e:da:04:a7:27:1c:dd:d4:e5:5b:71: ec:fd:3e:c8:53:b9:c6:28:ce:71:00:05:c9:88:af: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9F:AB:15:2B:DA:00:C5:88:33:20:E8:D9:DE:F4:9D:85:05:FD:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f7:6c:6b:7e:c1:8c:21:9a:8f:55:8d:f3:a2:a8:b5:46:4a: 0b:74:06:cd:65:e3:57:15:50:80:0b:9d:51:4b:96:c1:cf:b3: e8:4f:a0:85:a0:a8:41:e5:99:e5:76:d7:10:15:31:68:71:d4: 04:4f:7d:88:8e:24:1b:f3:6a:55:21:63:da:90:09:ef:6b:5b: ad:8e:f1:26:ad:85:ac:b5:e8:47:e6:87:0a:ac:ad:b2:51:5e: 3d:d8:9c:7c:7e:fa:b0:21:bd:44:ff:0c:ff:0b:aa:2b:75:c1: 9e:9f:d6:bd:ec:ed:cf:19:20:72:e9:22:ac:67:f1:95:01:ff: 7e:b3:0f:89:72:de:60:9a:47:5c:d0:d3:25:77:71:1e:fd:75: 6e:82:84:30:3b:0e:30:6e:7a:f5:80:6c:3e:c5:47:5f:b7:e1: 62:f8:c4:86:28:3d:88:5f:18:f3:a4:80:5a:3f:e9:b7:be:65: 82:b8:98:18:b5:66:3a:5e:c9:e4:70:17:a0:e0:e1:52:34:1d: 0e:b6:51:9f:18:f0:c2:cb:f4:0a:fa:b2:12:f7:61:a9:ba:4d: bf:88:67:ca:e5:54:2d:af:e0:b1:38:8d:a1:c8:c4:e1:15:c5: 62:7d:07:18:49:b4:7c:30:e0:21:87:d6:26:c1:28:15:62:63: b1:1a:64:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2u8StkUthxfWeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZjVjMjIzZDAtYTUzMS00MmFlLTk3ZmEtMDRlNWFmNjg5ZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2WCHSS9oLGyLY/Mk5xB6y05PyjkeeeHH0Q6 BeXgQA4u0KlJWyQlr+rfo6nSLtL+jc0Uz1iOgISXsag+9gC9dQCJrAKtsvchaF1Q pPoHFWnBPYNK3l/BCDBdGZ+E0yWDzDcYwo/7yQ7RFjUm5FvkM0U6s8F/EWQN7Skg tFgW6O3baGgJ3BsDWTRIu5SIzES/Lj1UGfruLisTjsoa7moyQaGSvi/1pFXBqNuQ 6L49pD5AL8E9H56+6PqrCQHFscxhkae2PeJYJ7oDdethecbn2yQfGDZWygQXWWZo TOUgTriXX0GgXtoEpycc3dTlW3Hs/T7IU7nGKM5xAAXJiK+VcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFISfqxUr2gDFiDMg6Nne9J2FBf1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTAxOThjZWItMjJjZC0z YjQxLTk5OGYtYmU3MTFlMGU5OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFP3bGt+wYwhmo9VjfOiqLVGSgt0Bs1l41cVUIALnVFLlsHPs+hP oIWgqEHlmeV21xAVMWhx1ARPfYiOJBvzalUhY9qQCe9rW62O8Sathay16Efmhwqs rbJRXj3YnHx++rAhvUT/DP8Lqit1wZ6f1r3s7c8ZIHLpIqxn8ZUB/36zD4ly3mCa R1zQ0yV3cR79dW6ChDA7DjBuevWAbD7FR1+34WL4xIYoPYhfGPOkgFo/6be+ZYK4 mBi1ZjpeyeRwF6Dg4VI0HQ62UZ8Y8MLL9Ar6shL3Yam6Tb+IZ8rlVC2v4LE4jaHI xOEVxWJ9BxhJtHww4CGH1ibBKBViY7EaZGY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:56:15 2025 by rpki-client