$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa File: 3b462fa8-0361-3b16-9418-ac7da4982a9e.roa (raw, json) Hash identifier: t3zDqKsuBzdb/0sq/VcBeDADpPDrt0Y0aGgSJvtuf4Y= Subject key identifier: 15:E9:D5:51:22:8B:11:C0:AF:60:73:63:AF:C1:8F:F1:F2:D1:4F:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D0D3261192609FCDD700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 19836 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:d3:26:11:92:60:9f:cd:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=d835c4fd-5168-4bb0-ad84-7ab91e2c97da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:dc:fd:9a:8a:59:b2:3c:00:b4:c4:8f:fa:61: 1b:71:01:9c:18:68:a9:28:80:23:81:aa:d7:6e:d7: 35:b8:19:c6:9c:c6:06:d7:1f:e2:5c:37:05:5d:43: 70:8d:cd:53:72:74:a5:48:d6:6c:e3:13:df:f7:7d: 49:37:68:f5:cf:ae:5b:3f:bb:df:f5:e0:ef:1d:de: a3:91:29:f3:47:46:41:6d:c1:e4:49:ad:a3:50:70: 43:54:b1:61:b0:18:c0:1c:60:b9:88:94:b0:65:ac: ed:53:2d:4d:9a:92:7f:6a:c0:5d:47:eb:a5:d6:db: 4e:35:54:01:bd:83:bb:8c:6c:f5:b1:e6:84:6a:9f: 4c:6c:a4:ef:c0:42:b1:91:f0:c4:e1:4d:49:d7:ac: 74:fc:50:8f:71:c3:69:95:f7:09:2e:e9:a9:e2:e1: 36:b8:a8:d3:36:de:f1:66:0f:9e:5b:36:63:9e:aa: dc:64:77:f3:a2:0d:34:86:e5:cd:6b:bc:23:e6:fa: b8:8e:46:ee:cb:f4:be:33:26:ab:4a:d2:ae:69:49: d4:7d:71:26:68:b2:4b:62:7c:2d:ea:ee:8d:d9:94: 16:6c:f2:82:51:f2:d6:10:56:8f:9f:a9:07:93:71: 48:85:6d:91:eb:bc:23:af:36:3c:e6:7d:ed:df:04: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E9:D5:51:22:8B:11:C0:AF:60:73:63:AF:C1:8F:F1:F2:D1:4F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:80:04:cc:6a:a2:ac:ad:a9:e4:bd:78:a5:d1:2d:77:8f: 6f:96:d6:9c:ba:ef:f3:08:2e:3f:a3:25:a6:49:9e:cc:a5:55: 77:38:b4:0c:f6:1c:98:db:3d:f0:9f:4f:1f:b3:5b:59:8c:77: 96:68:7d:65:a8:6e:ea:e0:bf:72:b4:11:40:07:86:3d:18:c1: d7:3c:17:3c:bb:3a:36:18:b4:f4:06:40:cc:3c:47:9b:9b:05: ac:91:c3:cf:82:5f:4b:fc:57:ad:63:1e:76:f3:48:2d:98:c6: 5b:ec:4d:78:3c:5c:9a:b1:1b:e1:59:9c:a9:c1:49:5b:cf:27: ac:d5:b6:cc:a6:3d:62:f4:fa:31:32:95:ca:6c:7c:dc:58:8b: d7:42:93:04:b5:39:f8:fd:e7:8d:43:de:c8:1a:07:97:10:8f: c6:8c:2f:6b:9b:dd:b7:f5:07:81:f4:9d:c6:2f:e3:60:3f:9a: 27:03:cc:8a:e6:bd:67:ee:7a:84:d3:1d:c4:9e:49:b7:a6:ec: ea:2e:dc:4d:25:fc:3b:d1:ec:64:04:9c:46:d8:a8:23:6f:dd: 55:83:fe:65:fd:b9:8a:fa:f5:27:46:43:33:91:9e:87:49:a8: 5c:6b:b2:7e:ac:24:50:b1:11:97:1b:41:eb:ad:cb:f9:a0:78: 41:1c:fa:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9DTJhGSYJ/N1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk ZDgzNWM0ZmQtNTE2OC00YmIwLWFkODQtN2FiOTFlMmM5N2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Nz9mopZsjwAtMSP+mEbcQGcGGipKIAjgarX btc1uBnGnMYG1x/iXDcFXUNwjc1TcnSlSNZs4xPf931JN2j1z65bP7vf9eDvHd6j kSnzR0ZBbcHkSa2jUHBDVLFhsBjAHGC5iJSwZaztUy1NmpJ/asBdR+ul1ttONVQB vYO7jGz1seaEap9MbKTvwEKxkfDE4U1J16x0/FCPccNplfcJLump4uE2uKjTNt7x Zg+eWzZjnqrcZHfzog00huXNa7wj5vq4jkbuy/S+MyarStKuaUnUfXEmaLJLYnwt 6u6N2ZQWbPKCUfLWEFaPn6kHk3FIhW2R67wjrzY85n3t3wRcuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBXp1VEiixHAr2BzY6/Bj/Hy0U/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I0NjJmYTgtMDM2MS0z YjE2LTk0MTgtYWM3ZGE0OTgyYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHTgATMaqKsrankvXil0S13j2+W1py67/MILj+jJaZJnsylVXc4 tAz2HJjbPfCfTx+zW1mMd5ZofWWoburgv3K0EUAHhj0Ywdc8Fzy7OjYYtPQGQMw8 R5ubBayRw8+CX0v8V61jHnbzSC2YxlvsTXg8XJqxG+FZnKnBSVvPJ6zVtsymPWL0 +jEylcpsfNxYi9dCkwS1Ofj9541D3sgaB5cQj8aML2ub3bf1B4H0ncYv42A/micD zIrmvWfueoTTHcSeSbem7Oou3E0l/DvR7GQEnEbYqCNv3VWD/mX9uYr69SdGQzOR nodJqFxrsn6sJFCxEZcbQeuty/mgeEEc+rY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:42:53 2025 by rpki-client