$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa File: 86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa (raw, json) Hash identifier: 3p72WlfxAV4FHHhCwzBee1+spTcFdh3Rdgy9iCFLXWU= Subject key identifier: E8:C9:58:18:77:87:56:84:76:EF:8B:98:C7:3E:EA:AF:10:FF:4D:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D0980F2037BA6277C200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa Signing time: Tue 03 Jun 2025 12:47:20 +0000 ROA not before: Tue 03 Jun 2025 12:47:20 +0000 ROA not after: Mon 01 Sep 2025 12:47:20 +0000 asID: 396614 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d0:98:0f:20:37:ba:62:77:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:20 2025 GMT Not After : Sep 1 12:47:20 2025 GMT Subject: CN=22be40c6-3339-4a70-bce2-58c6bcfe510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:ea:63:8e:35:36:cd:94:fd:f5:df:7f:0e: 54:0e:57:0b:80:f6:31:5b:e7:46:bd:58:5f:d6:d5: 61:76:87:a3:26:b4:9a:7b:94:86:43:79:74:97:b1: a8:15:3e:8e:4f:38:27:17:c7:57:32:b8:8c:54:7a: d6:00:e0:95:81:f0:a8:74:d0:64:92:ae:57:db:d9: c0:3a:9a:b9:e7:89:c9:39:ba:7e:33:22:f6:7b:13: 61:80:bb:84:8a:39:47:2b:a3:c2:11:bb:e7:db:b6: 0b:c6:43:37:6c:4a:f2:5d:b2:7d:39:13:f0:94:13: 89:af:91:72:b6:5a:2b:7e:44:99:06:c4:02:95:a7: 75:81:36:89:cf:d6:b6:5b:dc:ee:06:50:54:a6:b3: 65:83:94:d9:10:14:2a:a9:b7:ba:65:62:53:14:98: f7:be:5a:7b:b6:e1:b6:17:f7:09:7f:60:dd:3b:07: 8a:37:d5:c1:95:86:ab:15:5b:df:e0:61:d6:4e:e9: b7:d4:15:0e:ce:ee:7f:e2:74:10:86:cf:0a:72:e2: da:ed:9c:e6:df:1c:9d:e1:26:d4:b1:69:a0:5e:57: 96:c9:58:d2:1e:04:e6:d8:14:d5:d2:d6:d5:82:0f: f1:c7:a9:d6:ba:51:cd:98:86:fb:51:8f:46:f1:ad: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C9:58:18:77:87:56:84:76:EF:8B:98:C7:3E:EA:AF:10:FF:4D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:01:71:71:d0:18:11:3b:81:b2:a0:34:78:65:dd:d3:3e:a3: 8a:28:5d:2f:a0:50:61:8d:27:e0:19:23:4c:13:f9:82:a8:db: 4a:f3:e8:ef:b2:f1:f2:05:cc:9d:10:51:f9:a9:00:01:ae:1b: 90:cf:e2:84:a7:ab:f3:59:4c:69:28:ca:9d:b9:5f:77:67:a7: 2b:2c:3b:50:68:20:66:66:44:5d:dc:23:9c:4a:d4:6a:c6:eb: c5:5f:15:17:0b:be:c1:15:b2:3b:3f:0c:d0:db:e7:82:fa:7c: 20:73:a0:14:5c:d0:28:c0:23:27:53:3e:00:8a:c0:33:3d:88: d2:b4:70:cc:ed:03:17:31:4e:57:5b:70:04:1b:2a:b6:f3:34: a4:4a:11:52:a7:21:4f:00:9a:c4:43:0c:1f:7a:50:9b:2a:10: fa:67:a7:37:62:2b:03:a9:7e:c5:9e:ee:4b:e6:48:14:52:09: 18:f0:2d:67:71:8b:48:87:3b:ab:55:a7:02:33:b8:df:a2:a5: 3b:41:1c:e6:36:a0:44:bc:76:2d:4d:ef:5b:a7:71:81:08:7f: 1d:fa:34:e2:01:ab:aa:78:26:53:29:0d:1c:68:85:30:b1:d9: db:3e:7d:76:c3:88:d1:c2:77:3b:27:17:f9:ae:e3:0a:a0:6c: 74:d5:d8:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9CYDyA3umJ3wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMFoXDTI1MDkwMTEyNDcyMFowLzEtMCsGA1UEAxMk MjJiZTQwYzYtMzMzOS00YTcwLWJjZTItNThjNmJjZmU1MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr97qY441Ns2U/fXffw5UDlcLgPYxW+dGvVhf 1tVhdoejJrSae5SGQ3l0l7GoFT6OTzgnF8dXMriMVHrWAOCVgfCodNBkkq5X29nA Opq554nJObp+MyL2exNhgLuEijlHK6PCEbvn27YLxkM3bEryXbJ9ORPwlBOJr5Fy tlorfkSZBsQClad1gTaJz9a2W9zuBlBUprNlg5TZEBQqqbe6ZWJTFJj3vlp7tuG2 F/cJf2DdOweKN9XBlYarFVvf4GHWTum31BUOzu5/4nQQhs8KcuLa7Zzm3xyd4SbU sWmgXleWyVjSHgTm2BTV0tbVgg/xx6nWulHNmIb7UY9G8a2VOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjJWBh3h1aEdu+LmMc+6q8Q/02FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODZjZDMyMTItMDYzZS0z N2EyLWIyMzgtYWMyOGY3ZDdhOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwBcXHQGBE7gbKgNHhl3dM+o4ooXS+gUGGNJ+AZI0wT+YKo20rz 6O+y8fIFzJ0QUfmpAAGuG5DP4oSnq/NZTGkoyp25X3dnpyssO1BoIGZmRF3cI5xK 1GrG68VfFRcLvsEVsjs/DNDb54L6fCBzoBRc0CjAIydTPgCKwDM9iNK0cMztAxcx TldbcAQbKrbzNKRKEVKnIU8AmsRDDB96UJsqEPpnpzdiKwOpfsWe7kvmSBRSCRjw LWdxi0iHO6tVpwIzuN+ipTtBHOY2oES8di1N71uncYEIfx36NOIBq6p4JlMpDRxo hTCx2ds+fXbDiNHCdzsnF/mu4wqgbHTV2BA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:38:47 2025 by rpki-client