$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3f1735-f9a4-37b5-aa82-01460025de92.roa File: 4c3f1735-f9a4-37b5-aa82-01460025de92.roa (raw, json) Hash identifier: 1m4XQgs1ISSOnJXGoYxmjWDChr6aTzi9dWy4EDoIyC0= Subject key identifier: D4:35:26:4F:0E:5B:64:50:8B:37:0C:9D:4C:39:58:91:0E:75:85:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D5E11F1AB2955461EF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3f1735-f9a4-37b5-aa82-01460025de92.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396577 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:e1:1f:1a:b2:95:54:61:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=78cd7653-de0a-4abf-ac5a-61874888b60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:48:dd:53:79:92:9d:3e:66:28:2c:85:4e: 37:d6:6b:c1:53:12:35:9c:0e:5d:61:df:8a:49:c5: b1:30:a8:81:d3:f7:6c:82:e2:db:ba:39:7e:46:1c: 54:a0:6e:a1:dc:12:96:26:19:99:04:e2:fa:3c:ab: 2a:76:73:6d:4e:bb:18:44:11:02:79:1a:94:f3:a5: 52:8c:9d:33:19:2f:02:c8:bc:d5:85:b2:29:d4:0b: 0e:13:c7:c4:c3:b2:2f:73:fd:e0:2b:5e:29:c2:55: ee:5d:85:16:7c:a1:07:60:84:56:c3:98:95:98:f5: bc:3b:40:51:cc:57:fa:ce:e1:28:24:af:72:85:b4: 4e:c0:fa:c9:3e:78:51:d2:21:74:f6:6f:da:62:87: 27:68:ac:cd:79:2e:46:c3:fb:91:96:76:fc:e4:23: 5f:59:4a:dc:cf:27:c6:26:f4:1e:a2:8b:ac:05:e8: 92:08:e1:7f:2e:87:4f:54:c3:eb:5b:2c:7f:07:0b: c2:30:61:2b:57:fe:29:77:b1:9c:ca:c3:37:9d:b6: 8e:bf:29:58:0a:56:2a:76:ab:b4:59:15:4c:23:43: 2c:d9:a7:f2:3b:23:f4:86:6f:a2:17:24:ab:6e:11: 83:ce:3e:b1:b6:b4:56:c8:6b:65:af:93:e7:81:05: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:26:4F:0E:5B:64:50:8B:37:0C:9D:4C:39:58:91:0E:75:85:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3f1735-f9a4-37b5-aa82-01460025de92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f1:21:fd:ef:9d:be:56:c2:4c:b6:60:ca:a4:aa:33:52:10: fc:5b:24:2b:fa:3a:57:94:f0:ed:e6:56:0f:7a:8d:35:81:e6: 7a:98:d9:9e:ad:8d:b0:2a:c4:ea:b2:40:8b:5d:f2:0e:85:1d: 12:ab:72:bd:68:35:f8:5f:2c:69:6b:8b:15:5a:a5:0d:68:06: 0e:e5:70:fe:8a:74:58:8b:3e:e0:b0:d4:50:f9:87:4a:a0:f1: 02:68:8a:f4:69:aa:54:cf:f9:1e:5f:78:6f:ca:c8:2e:9f:8c: c8:3b:e7:e1:35:90:d4:41:48:0e:a3:e3:da:37:2d:79:f5:33: 36:75:90:ae:6e:0a:9c:6b:69:95:6f:13:38:b1:55:76:d7:25: 07:c1:4c:4a:55:47:46:3f:c5:60:5a:50:c9:84:29:27:82:07: 31:95:95:91:cc:5b:5c:62:68:93:b2:c2:d2:76:83:31:50:fa: 4a:e5:da:f8:66:8e:06:58:07:72:c3:1d:f1:33:19:ca:32:aa: 4e:b1:1a:c6:84:55:64:b0:20:57:5a:0d:1b:a9:16:d7:87:8c: f8:dd:f5:2d:29:82:70:a1:f4:c5:ca:8b:bc:f3:a0:25:cc:2b: af:09:c5:70:f4:64:67:b2:24:85:ea:9a:64:8b:61:86:b1:cd: 4c:27:2c:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9XhHxqylVRh74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk NzhjZDc2NTMtZGUwYS00YWJmLWFjNWEtNjE4NzQ4ODhiNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpxI3VN5kp0+ZigshU431mvBUxI1nA5dYd+K ScWxMKiB0/dsguLbujl+RhxUoG6h3BKWJhmZBOL6PKsqdnNtTrsYRBECeRqU86VS jJ0zGS8CyLzVhbIp1AsOE8fEw7Ivc/3gK14pwlXuXYUWfKEHYIRWw5iVmPW8O0BR zFf6zuEoJK9yhbROwPrJPnhR0iF09m/aYocnaKzNeS5Gw/uRlnb85CNfWUrczyfG JvQeoousBeiSCOF/LodPVMPrWyx/BwvCMGErV/4pd7GcysM3nbaOvylYClYqdqu0 WRVMI0Ms2afyOyP0hm+iFySrbhGDzj6xtrRWyGtlr5PngQUcrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQ1Jk8OW2RQizcMnUw5WJEOdYVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMzZjE3MzUtZjlhNC0z N2I1LWFhODItMDE0NjAwMjVkZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXxIf3vnb5Wwky2YMqkqjNSEPxbJCv6OleU8O3mVg96jTWB5nqY 2Z6tjbAqxOqyQItd8g6FHRKrcr1oNfhfLGlrixVapQ1oBg7lcP6KdFiLPuCw1FD5 h0qg8QJoivRpqlTP+R5feG/KyC6fjMg75+E1kNRBSA6j49o3LXn1MzZ1kK5uCpxr aZVvEzixVXbXJQfBTEpVR0Y/xWBaUMmEKSeCBzGVlZHMW1xiaJOywtJ2gzFQ+krl 2vhmjgZYB3LDHfEzGcoyqk6xGsaEVWSwIFdaDRupFteHjPjd9S0pgnCh9MXKi7zz oCXMK68JxXD0ZGeyJIXqmmSLYYaxzUwnLGA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:45:46 2025 by rpki-client