$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa File: 830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa (raw, json) Hash identifier: wiR1zJbhRp8S9KI6KFt5nx8ODhOuVaKx4u3kIgvCAZg= Subject key identifier: 20:9F:4D:34:86:1E:4F:F7:06:AB:21:F1:F3:F2:2C:DD:14:67:A5:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849ED4FDAC18D13DABEEC2374C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:da:c1:8d:13:da:be:ec:23:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=e32c56e3-d4a8-4a89-ad66-b61095dc003b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:9a:79:9d:fe:86:a8:92:e1:3f:86:60:d4: e3:ba:bc:39:62:f7:06:4a:17:3a:1f:a5:03:05:15: 37:61:11:3b:3c:bb:de:b2:3e:0b:94:22:f1:ea:cf: 79:43:88:52:cc:db:e3:41:5b:8a:9a:78:37:67:9f: 29:7b:2f:0f:cd:58:53:09:4d:e3:8a:d4:81:a3:7d: 90:69:e0:b8:36:58:7c:ed:e8:10:77:36:81:61:94: 91:fd:7a:fe:86:6c:75:42:cb:1c:a8:23:d5:9f:47: f6:63:15:db:1e:59:bf:ef:05:61:71:0f:2d:ab:0e: 00:fb:13:20:c3:13:ca:55:54:a6:66:85:31:f5:05: f6:6f:9a:12:b7:38:34:47:e2:d4:b8:25:55:87:e5: 0b:c2:59:12:69:ef:3e:4e:8c:09:ce:bf:60:6d:35: 40:e3:e3:73:9c:60:b0:7b:c7:b8:cf:b2:94:97:21: 35:22:bf:23:7a:97:d4:f4:39:e3:a3:77:a1:00:23: 5d:d6:d5:a8:8b:ea:71:3b:b1:09:b4:4d:dc:f7:b7: 27:d3:d9:e4:e8:17:59:69:7f:a0:aa:50:fb:df:be: 1d:ff:b0:27:0f:7c:0e:c6:a4:09:6e:2c:1d:14:a3: cb:b4:ab:43:0e:c3:44:28:ef:32:09:5e:80:7b:47: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:4D:34:86:1E:4F:F7:06:AB:21:F1:F3:F2:2C:DD:14:67:A5:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8d:c0:5f:d5:19:54:df:30:96:0b:a0:86:a1:42:51:ad:d7: 90:ca:ed:0e:73:89:39:5a:94:fb:bc:cd:96:99:83:f8:72:71: 67:d2:a0:be:ee:b3:00:ba:19:3b:03:e2:12:f5:fa:de:ad:da: e8:b1:41:54:af:54:41:22:9e:35:be:4a:55:d2:fa:32:30:c9: fa:67:69:f0:42:b2:e0:3b:58:e4:af:f3:94:29:c5:3a:35:e0: e1:7d:8d:eb:27:a9:37:ba:f9:05:55:05:35:17:d2:fd:75:b1: f9:ba:ac:e4:77:7f:23:5e:28:8f:20:24:49:24:4a:5d:ce:15: 47:62:99:a2:a8:70:ee:b0:9c:2e:67:7b:93:d2:75:bb:d1:65: 3e:5d:d4:c7:27:41:42:fb:e6:6a:17:70:49:a1:99:f4:2f:3d: ca:3b:78:5c:10:57:ed:0c:c8:ad:60:12:4d:28:46:77:06:0f: f8:65:41:89:6d:cd:fc:cf:c3:2a:0d:d6:d5:a2:65:0c:27:6b: 93:9b:50:0a:82:9a:d9:0a:63:db:b2:6c:67:91:41:75:21:2b: 2d:b4:46:8e:51:34:4c:56:e4:21:bd:60:9d:c0:12:51:c6:41: e4:f3:96:ce:e0:62:44:4f:6d:b7:c3:0b:e9:b5:49:63:48:94: dc:7f:6b:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEntT9rBjRPavuwjdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZTMyYzU2ZTMtZDRhOC00YTg5LWFkNjYtYjYxMDk1ZGMwMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwSaeZ3+hqiS4T+GYNTjurw5YvcGShc6H6UD BRU3YRE7PLvesj4LlCLx6s95Q4hSzNvjQVuKmng3Z58pey8PzVhTCU3jitSBo32Q aeC4Nlh87egQdzaBYZSR/Xr+hmx1QsscqCPVn0f2YxXbHlm/7wVhcQ8tqw4A+xMg wxPKVVSmZoUx9QX2b5oStzg0R+LUuCVVh+ULwlkSae8+TowJzr9gbTVA4+NznGCw e8e4z7KUlyE1Ir8jepfU9Dnjo3ehACNd1tWoi+pxO7EJtE3c97cn09nk6BdZaX+g qlD7374d/7AnD3wOxqQJbiwdFKPLtKtDDsNEKO8yCV6Ae0dnNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCfTTSGHk/3Bqsh8fPyLN0UZ6WLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODMwZDI4YTUtOTU5MS0z MGI1LWIyMWQtNzFhNDZiOGU0ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHuNwF/VGVTfMJYLoIahQlGt15DK7Q5ziTlalPu8zZaZg/hycWfS oL7uswC6GTsD4hL1+t6t2uixQVSvVEEinjW+SlXS+jIwyfpnafBCsuA7WOSv85Qp xTo14OF9jesnqTe6+QVVBTUX0v11sfm6rOR3fyNeKI8gJEkkSl3OFUdimaKocO6w nC5ne5PSdbvRZT5d1McnQUL75moXcEmhmfQvPco7eFwQV+0MyK1gEk0oRncGD/hl QYltzfzPwyoN1tWiZQwna5ObUAqCmtkKY9uybGeRQXUhKy20Ro5RNExW5CG9YJ3A ElHGQeTzls7gYkRPbbfDC+m1SWNIlNx/a9E= -----END CERTIFICATE-----Generated at Sun Jun 15 17:51:11 2025 by rpki-client