$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa File: b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa (raw, json) Hash identifier: CkizK3TLVO3RQO9lC1oxx+8/StGSMx4D1Aerjq/5Z+4= Subject key identifier: 44:4D:CC:67:37:0D:41:BC:35:C9:A4:A3:43:C3:4F:58:3E:C6:76:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201E0BEC2F8CB30CFA70C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:0b:ec:2f:8c:b3:0c:fa:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=505b6648-2dac-4165-8964-903d3c8974b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:02:13:b8:df:4b:d6:6a:0e:d7:2c:49:be:77: 95:74:c8:4d:03:89:42:5b:45:fa:9a:83:07:9d:19: 53:38:78:5c:ec:5b:b8:6c:2b:e6:2e:39:9c:ec:d6: 89:34:3a:2f:88:d1:04:b7:76:4d:06:73:5a:68:f6: d5:f1:10:a7:24:10:eb:39:5c:a6:b3:95:9b:e7:0f: 31:00:89:9c:1f:c1:6c:35:a0:da:6d:6f:9f:a3:5e: 6b:56:e2:f5:9b:76:75:03:18:e7:27:73:22:66:98: ad:df:f7:2d:a1:24:e6:43:99:f7:2f:2c:16:90:4d: b8:c6:bc:8b:15:b6:79:97:9e:c7:48:00:03:8c:ea: 79:ee:3d:b2:4f:d9:00:a9:37:20:0b:88:f5:02:c1: d2:d2:15:e2:88:4a:6f:08:29:a0:2f:71:e7:04:7a: 01:e9:69:3f:8d:82:b1:5b:8b:bf:ca:e3:ac:a1:14: 0e:6e:54:2f:c4:2a:15:2a:38:9c:48:e7:0b:1d:90: b6:2e:e4:c1:9d:6a:f2:d0:00:84:9d:52:ec:71:a1: 22:0e:a3:c2:6d:dd:71:b1:87:05:c0:69:af:6f:e5: 58:3a:2e:7c:f3:68:76:01:27:95:92:e9:1d:b4:75: 10:34:b8:17:d1:18:8d:34:46:7b:3b:9f:85:fd:38: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4D:CC:67:37:0D:41:BC:35:C9:A4:A3:43:C3:4F:58:3E:C6:76:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2d:bc:96:aa:09:06:42:10:4b:24:3c:d9:a4:67:3c:bb:98: 33:23:f2:5c:c3:5d:44:b5:9d:92:99:56:18:06:73:cf:d0:d8: 2d:30:be:3f:6f:3e:34:b3:2d:c4:80:45:40:21:38:0b:ff:23: fa:d0:ec:77:4f:6e:5d:48:14:cf:d5:35:45:8c:8f:b7:fa:d2: 8f:0e:14:01:bb:98:ba:95:2f:f1:de:28:06:e9:f5:0b:96:17: 40:22:63:a9:fe:c3:6a:75:bd:6d:23:9a:db:34:41:05:cd:50: 81:dd:21:aa:1a:fa:b7:73:68:37:e2:11:fc:6d:1d:cf:ec:c7: 5a:a6:c2:64:64:8a:dc:9c:3a:d9:39:75:20:95:4e:4a:58:3d: 92:30:63:5f:9b:6c:ec:cd:19:58:7f:49:9e:bb:fa:10:a8:2f: 1e:6c:c2:08:0d:6a:b4:2a:10:ca:7f:00:cf:e9:f2:d7:e7:a0: f0:de:74:43:2d:10:05:65:3d:aa:10:1b:28:3e:54:2a:a9:54: 4b:32:77:92:e4:64:19:ac:a5:27:e9:7e:38:1e:29:c2:73:e5: 8e:4b:4a:2b:80:65:a0:44:c1:b0:bd:dd:2c:51:5e:8d:b0:71: a6:54:8f:3f:94:c5:7e:db:db:9d:ce:e3:45:3b:32:c4:5f:5f: 9f:dc:7d:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB4L7C+Mswz6cMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NTA1YjY2NDgtMmRhYy00MTY1LTg5NjQtOTAzZDNjODk3NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwITuN9L1moO1yxJvneVdMhNA4lCW0X6moMH nRlTOHhc7Fu4bCvmLjmc7NaJNDoviNEEt3ZNBnNaaPbV8RCnJBDrOVyms5Wb5w8x AImcH8FsNaDabW+fo15rVuL1m3Z1AxjnJ3MiZpit3/ctoSTmQ5n3LywWkE24xryL FbZ5l57HSAADjOp57j2yT9kAqTcgC4j1AsHS0hXiiEpvCCmgL3HnBHoB6Wk/jYKx W4u/yuOsoRQOblQvxCoVKjicSOcLHZC2LuTBnWry0ACEnVLscaEiDqPCbd1xsYcF wGmvb+VYOi5882h2ASeVkukdtHUQNLgX0RiNNEZ7O5+F/TjpowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFERNzGc3DUG8Ncmko0PDT1g+xnZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjg5YWJiNzYtZTRlZi0z ZjgwLWFiNDYtZTJkYzFhN2RlZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwtvJaqCQZCEEskPNmkZzy7mDMj8lzDXUS1nZKZVhgGc8/Q2C0w vj9vPjSzLcSARUAhOAv/I/rQ7HdPbl1IFM/VNUWMj7f60o8OFAG7mLqVL/HeKAbp 9QuWF0AiY6n+w2p1vW0jmts0QQXNUIHdIaoa+rdzaDfiEfxtHc/sx1qmwmRkityc Otk5dSCVTkpYPZIwY1+bbOzNGVh/SZ67+hCoLx5swggNarQqEMp/AM/p8tfnoPDe dEMtEAVlPaoQGyg+VCqpVEsyd5LkZBmspSfpfjgeKcJz5Y5LSiuAZaBEwbC93SxR Xo2wcaZUjz+UxX7b253O40U7MsRfX5/cfeA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:08 2025 by rpki-client