$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa File: 5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa (raw, json) Hash identifier: 6Irw3YZuMHNMK8AHfs/b4Qgj9b3fWbukR4fsOVxEUV8= Subject key identifier: 34:7D:33:F3:AB:AB:C1:F9:54:38:34:34:DA:BE:52:79:6B:8B:93:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201E7268D8A33037130200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:72:68:d8:a3:30:37:13:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=db3d0716-dfe2-45e3-a269-eac626ce4228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:37:6a:68:0e:5c:52:4d:5e:ad:dd:32:b1: 86:07:93:93:9c:e6:aa:51:f3:c4:48:9c:78:92:dc: 18:85:93:17:35:e8:f3:54:b2:cf:ad:c0:26:5f:81: 29:d6:fe:f4:cf:7d:9a:a0:1d:db:8e:df:9b:a7:86: 13:84:41:7b:86:2d:05:98:c9:ea:f1:d9:30:62:44: c6:3f:97:fc:f9:ac:60:dd:18:42:90:d4:28:5b:2e: 88:50:00:ef:54:ff:cd:3c:72:db:95:bd:a5:db:74: 8a:ab:45:7c:9a:51:54:95:31:13:fe:82:7f:30:b0: 3f:48:e7:04:36:86:17:7f:0d:58:5b:2a:61:8a:59: 65:6d:b4:40:85:43:57:d9:3d:04:63:f8:53:c0:c9: cf:fa:37:75:fa:f2:fe:62:0e:66:cd:2c:e2:d3:00: c7:c8:8d:c1:59:ad:f1:9f:6c:4f:b1:66:02:6b:a2: 6f:35:fa:c9:0e:09:f9:ba:0f:3c:d3:6f:cc:a8:0e: e6:13:ab:69:bd:b4:cd:e3:2e:dc:e1:53:7c:bc:bc: f4:be:1c:23:58:cd:38:80:7e:3e:25:f5:8e:46:b3: 98:01:92:28:9c:89:61:36:0c:18:16:d4:78:5c:38: 8d:0b:4b:fa:e3:3c:04:91:5b:de:cd:f7:97:f9:ba: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7D:33:F3:AB:AB:C1:F9:54:38:34:34:DA:BE:52:79:6B:8B:93:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2a:6d:58:f8:ee:90:32:9e:88:ab:a1:00:a8:51:a1:e4:15: 5d:a3:5c:4f:b4:51:5d:63:fd:ad:82:b8:03:3d:9f:82:29:84: 1d:36:ed:45:8d:91:97:5c:ca:20:f7:3e:9b:16:c1:58:b2:a7: e5:eb:2a:58:c3:4f:09:b0:ad:b8:c0:40:f0:18:40:f3:1e:dc: 88:8e:07:73:a3:ab:36:7c:d6:9f:2d:55:80:09:08:d0:58:66: 79:25:38:00:5c:07:e0:89:7f:db:22:5e:1b:52:bf:81:08:93: 5d:a1:20:8f:a8:a1:ea:57:0b:5f:ea:0f:0e:e4:46:bd:76:ff: f5:80:c9:e2:fa:c5:05:86:bf:7d:93:aa:6a:70:d9:0a:21:be: c3:1e:23:40:0d:64:17:e4:7c:92:4e:d7:62:01:45:84:4e:86: b2:9f:28:3d:74:73:a3:08:15:53:4f:bb:11:d7:82:fd:e5:56: ea:33:0b:fc:60:41:8c:92:9d:f3:5c:61:6c:e0:6d:c6:78:c8: 02:c0:83:54:83:75:d6:49:c8:c1:51:0c:9e:d4:1c:62:dd:2a: 72:75:59:7b:1b:a1:3b:a7:2c:5d:7b:fc:51:72:2e:89:73:73: ea:b2:ec:72:dc:50:8e:99:eb:95:24:8e:5f:a3:ce:9f:c2:c8: 46:41:87:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB5yaNijMDcTAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZGIzZDA3MTYtZGZlMi00NWUzLWEyNjktZWFjNjI2Y2U0MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W03amgOXFJNXq3dMrGGB5OTnOaqUfPESJx4 ktwYhZMXNejzVLLPrcAmX4Ep1v70z32aoB3bjt+bp4YThEF7hi0FmMnq8dkwYkTG P5f8+axg3RhCkNQoWy6IUADvVP/NPHLblb2l23SKq0V8mlFUlTET/oJ/MLA/SOcE NoYXfw1YWyphilllbbRAhUNX2T0EY/hTwMnP+jd1+vL+Yg5mzSzi0wDHyI3BWa3x n2xPsWYCa6JvNfrJDgn5ug8802/MqA7mE6tpvbTN4y7c4VN8vLz0vhwjWM04gH4+ JfWORrOYAZIonIlhNgwYFtR4XDiNC0v64zwEkVvezfeX+boFUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDR9M/Orq8H5VDg0NNq+Unlri5OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWEwMmE2YTgtYzQ2Ni0z ZGJhLWI0ZDgtMTkwZjRjMmFkYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABQqbVj47pAynoiroQCoUaHkFV2jXE+0UV1j/a2CuAM9n4IphB02 7UWNkZdcyiD3PpsWwViyp+XrKljDTwmwrbjAQPAYQPMe3IiOB3OjqzZ81p8tVYAJ CNBYZnklOABcB+CJf9siXhtSv4EIk12hII+ooepXC1/qDw7kRr12//WAyeL6xQWG v32Tqmpw2QohvsMeI0ANZBfkfJJO12IBRYROhrKfKD10c6MIFVNPuxHXgv3lVuoz C/xgQYySnfNcYWzgbcZ4yALAg1SDddZJyMFRDJ7UHGLdKnJ1WXsboTunLF17/FFy Lolzc+qy7HLcUI6Z65Ukjl+jzp/CyEZBh2E= -----END CERTIFICATE-----Generated at Sun Jun 15 19:02:44 2025 by rpki-client