$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3604f523-17c9-3d9b-87a0-a62bba81b495.roa File: 3604f523-17c9-3d9b-87a0-a62bba81b495.roa (raw, json) Hash identifier: t2Bvz2cD3ZnsfQPtliO2JrQ5e4YNjCu04vTxh04oJhw= Subject key identifier: 4D:7E:A7:94:0E:AD:C2:E5:CF:34:5F:30:07:A4:2C:BA:74:BC:5C:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D1FC2F929CCE3053E4AD Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3604f523-17c9-3d9b-87a0-a62bba81b495.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396599 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d1:fc:2f:92:9c:ce:30:53:e4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=4366750b-efba-469b-a37a-4d1717038146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:f2:40:fa:d9:e2:2d:d9:3d:a5:82:25:25: e1:13:61:22:45:9e:bc:fc:03:52:ac:ca:8c:2d:6a: f6:b8:30:c7:e3:b0:5e:9a:39:14:a5:c9:6a:93:ff: 3b:6e:34:eb:ba:a3:91:43:bc:a7:9c:d1:ce:c3:32: 68:8b:83:fa:f1:6b:8f:3a:e5:09:c8:0f:08:a0:e7: 13:24:cf:40:81:e6:51:40:1f:91:9f:48:66:4d:13: ed:9d:8f:db:8b:dd:43:6e:7e:fc:63:a1:29:80:8a: e7:bf:c6:3d:c2:40:05:4d:3d:64:d4:8b:3a:2f:cc: b3:44:67:e9:b3:83:61:17:bb:d2:24:53:6e:6b:7d: ef:15:12:ab:95:53:6d:ea:48:17:47:32:63:9f:28: aa:9f:38:6d:c9:b5:84:49:0a:3d:dc:ef:ab:8f:f7: 87:3b:2c:1c:70:b3:39:b6:74:d5:e1:fc:53:78:09: 76:95:a4:67:15:59:10:e1:56:01:75:30:47:2a:ee: fd:d4:9c:e3:fb:a4:b9:db:c7:b1:87:c8:8c:b5:17: d0:92:2e:c6:3a:9f:69:95:be:9d:fd:96:46:28:22: e8:4d:c2:af:9c:f9:5a:ee:10:26:f5:96:cf:3a:fe: c0:3b:8d:7a:40:e9:be:97:46:1a:9d:7d:fa:a0:a0: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7E:A7:94:0E:AD:C2:E5:CF:34:5F:30:07:A4:2C:BA:74:BC:5C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3604f523-17c9-3d9b-87a0-a62bba81b495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:67:32:f8:4b:a2:05:e7:16:10:d9:3f:d1:cc:10:50:ef:ce: 7e:23:43:d2:74:be:d1:72:49:5e:f1:8a:5d:f1:42:18:50:8d: a1:56:c0:fb:50:b5:47:35:f3:85:c5:af:fd:59:24:ea:ab:43: 4a:40:e2:b8:a8:14:62:f4:66:24:07:a8:ef:81:c7:ac:16:da: 5c:af:c9:46:1b:cd:b8:a5:95:e4:ca:e2:b7:41:67:7a:c2:0e: ad:b9:ac:63:89:f9:da:ec:47:ef:61:d2:04:6d:67:8b:19:99: fe:3f:2f:66:75:d5:4b:5c:ca:03:3a:3a:4c:60:03:fc:1b:0d: b0:8c:6c:b6:a2:de:e5:b7:9f:49:7e:e5:99:10:eb:7d:6d:64: 60:14:1d:f1:32:69:2c:4a:1d:a8:a5:3e:d4:de:75:10:29:19: 72:c5:71:29:e1:ba:a9:34:96:4e:ff:41:b0:56:e7:f9:25:56: ec:97:62:61:37:46:a9:6c:b6:52:80:23:cc:aa:1d:f1:8e:c5: ca:2d:b7:97:34:e5:6c:27:20:56:cd:be:2c:40:7d:8e:03:ba: 88:7c:36:80:b1:93:b8:6b:b9:00:ab:50:82:69:47:b5:f0:ca: 17:da:16:4c:02:67:9e:34:3a:64:8c:d3:38:4d:76:26:ab:85: 53:a4:c6:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9H8L5KczjBT5K0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk NDM2Njc1MGItZWZiYS00NjliLWEzN2EtNGQxNzE3MDM4MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx7yQPrZ4i3ZPaWCJSXhE2EiRZ68/ANSrMqM LWr2uDDH47BemjkUpclqk/87bjTruqORQ7ynnNHOwzJoi4P68WuPOuUJyA8IoOcT JM9AgeZRQB+Rn0hmTRPtnY/bi91Dbn78Y6EpgIrnv8Y9wkAFTT1k1Is6L8yzRGfp s4NhF7vSJFNua33vFRKrlVNt6kgXRzJjnyiqnzhtybWESQo93O+rj/eHOywccLM5 tnTV4fxTeAl2laRnFVkQ4VYBdTBHKu791Jzj+6S528exh8iMtRfQki7GOp9plb6d /ZZGKCLoTcKvnPla7hAm9ZbPOv7AO416QOm+l0YanX36oKC0gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE1+p5QOrcLlzzRfMAekLLp0vFyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzYwNGY1MjMtMTdjOS0z ZDliLTg3YTAtYTYyYmJhODFiNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGxnMvhLogXnFhDZP9HMEFDvzn4jQ9J0vtFySV7xil3xQhhQjaFW wPtQtUc184XFr/1ZJOqrQ0pA4rioFGL0ZiQHqO+Bx6wW2lyvyUYbzbilleTK4rdB Z3rCDq25rGOJ+drsR+9h0gRtZ4sZmf4/L2Z11UtcygM6OkxgA/wbDbCMbLai3uW3 n0l+5ZkQ631tZGAUHfEyaSxKHailPtTedRApGXLFcSnhuqk0lk7/QbBW5/klVuyX YmE3RqlstlKAI8yqHfGOxcott5c05WwnIFbNvixAfY4Duoh8NoCxk7hruQCrUIJp R7XwyhfaFkwCZ540OmSM0zhNdiarhVOkxng= -----END CERTIFICATE-----Generated at Sun Jun 15 17:52:31 2025 by rpki-client