$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa File: ae30b946-695a-3c1c-bfeb-9162e713e318.roa (raw, json) Hash identifier: ZK8Nywt91NafWX1QoidXzTLWcOJnuDnDIS1ePbN07Nw= Subject key identifier: 1A:28:E3:0D:A4:EA:34:34:5A:96:5E:88:08:18:70:D2:30:E3:3E:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D54586F1F9FA76A2B9E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 21313 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:45:86:f1:f9:fa:76:a2:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=9c69c0b4-ed22-4e8d-a474-bb923a818ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:23:60:32:95:6c:d1:73:3f:24:f2:f1:8d: 30:4f:11:2a:54:f9:28:19:a0:5d:96:97:a8:db:4d: 6f:2b:7b:ef:dc:0b:8a:15:49:2b:c2:03:7d:4c:d6: 26:81:3f:25:4a:8c:c3:0d:17:ad:88:00:97:1d:35: fa:7f:bc:e7:d8:dc:7c:a3:f6:6c:bc:21:e4:98:dc: bd:9c:18:7b:e6:c7:b2:47:48:1e:04:26:75:76:61: b5:1c:c4:c7:88:76:3e:53:1b:ca:5f:df:f6:a5:49: 81:a3:bd:1f:14:28:ff:b9:0a:be:cf:dd:43:97:82: bc:7e:0b:4d:09:ce:00:9c:a2:25:09:b7:97:66:c8: c2:11:cf:4d:8d:6c:99:cf:24:a0:15:9b:85:4b:f8: 32:1f:29:d7:7f:8b:9a:52:fd:7c:3e:29:ba:f7:b9: 52:f3:94:a3:67:92:fc:23:fb:93:37:c8:ff:8b:cb: d6:93:9c:3e:17:49:f2:88:26:7d:a0:b9:7a:67:e1: 3c:c4:7f:4d:77:ac:a8:2e:ba:b5:a4:33:e8:23:47: f0:eb:90:f7:d6:46:e3:81:a3:1a:3f:0c:7a:e5:b5: df:fe:97:6c:10:a2:1c:93:0b:a9:29:74:7b:38:5a: 98:fa:74:ff:55:2f:f3:4d:ea:98:4d:f6:34:b5:aa: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:E3:0D:A4:EA:34:34:5A:96:5E:88:08:18:70:D2:30:E3:3E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:59:34:38:24:a5:77:fe:cf:f6:1d:c4:07:b1:b7:97:da:f9: 2a:b7:01:60:81:9e:3b:bf:37:bf:de:57:fc:e4:cf:80:3d:19: 7b:7e:36:5c:00:8a:0f:f7:c9:54:6d:78:ab:dd:9c:56:ea:6e: b8:18:33:99:78:15:d9:2b:52:ca:ef:17:23:d6:e1:57:c0:88: 1e:d5:52:fe:a6:0b:9b:03:8a:ad:c7:df:0f:43:9b:6e:95:5d: 5f:7d:2d:63:03:54:d3:e5:46:a6:15:f8:59:e7:cc:fe:24:44: 39:cc:9d:c2:c9:96:5a:dd:32:60:f8:25:54:02:fb:14:19:8f: 6d:9d:c8:54:42:03:4b:60:f4:28:50:40:4d:24:cd:32:8c:f9: ed:a1:58:c5:ed:2f:b7:63:cf:c3:dc:49:33:d4:56:28:60:ab: f2:ac:08:12:d9:35:94:06:02:ad:33:43:77:4c:e3:4d:78:7f: f4:e8:7e:37:be:f2:9d:74:46:b2:c2:80:20:16:84:83:c2:87: 70:74:18:5a:69:d2:a3:55:e3:56:86:5e:26:09:5c:9c:02:dd: cc:db:30:dc:f2:d4:8f:00:20:8b:b0:c1:44:a3:54:b6:9e:31: 11:80:32:d9:21:2e:5f:07:b2:11:50:fe:10:fb:ce:c6:7f:ff: c1:86:85:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9VFhvH5+naiueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk OWM2OWMwYjQtZWQyMi00ZThkLWE0NzQtYmI5MjNhODE4YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNYjYDKVbNFzPyTy8Y0wTxEqVPkoGaBdlpeo 201vK3vv3AuKFUkrwgN9TNYmgT8lSozDDRetiACXHTX6f7zn2Nx8o/ZsvCHkmNy9 nBh75seyR0geBCZ1dmG1HMTHiHY+UxvKX9/2pUmBo70fFCj/uQq+z91Dl4K8fgtN Cc4AnKIlCbeXZsjCEc9NjWyZzySgFZuFS/gyHynXf4uaUv18Pim697lS85SjZ5L8 I/uTN8j/i8vWk5w+F0nyiCZ9oLl6Z+E8xH9Nd6yoLrq1pDPoI0fw65D31kbjgaMa Pwx65bXf/pdsEKIckwupKXR7OFqY+nT/VS/zTeqYTfY0tapI0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoo4w2k6jQ0WpZeiAgYcNIw4z52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWUzMGI5NDYtNjk1YS0z YzFjLWJmZWItOTE2MmU3MTNlMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5ZNDgkpXf+z/YdxAext5fa+Sq3AWCBnju/N7/eV/zkz4A9GXt+ NlwAig/3yVRteKvdnFbqbrgYM5l4FdkrUsrvFyPW4VfAiB7VUv6mC5sDiq3H3w9D m26VXV99LWMDVNPlRqYV+FnnzP4kRDnMncLJllrdMmD4JVQC+xQZj22dyFRCA0tg 9ChQQE0kzTKM+e2hWMXtL7djz8PcSTPUVihgq/KsCBLZNZQGAq0zQ3dM4014f/To fje+8p10RrLCgCAWhIPCh3B0GFpp0qNV41aGXiYJXJwC3czbMNzy1I8AIIuwwUSj VLaeMRGAMtkhLl8HshFQ/hD7zsZ//8GGhVY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:40:30 2025 by rpki-client