$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa File: d868d400-3d3e-3000-b381-099279ca3a2b.roa (raw, json) Hash identifier: CfMxTKXc22c26xefHDDMjvGckvjavpf25qzmDwK8C8w= Subject key identifier: 1C:84:86:34:53:13:01:AF:4B:8D:26:43:31:30:27:5A:F6:C4:A0:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D5C2C86FA4F241D052C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 397196 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d5:c2:c8:6f:a4:f2:41:d0:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=75730c63-c5d2-43e2-9866-78e417c347c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e5:ea:73:50:29:51:05:3b:0e:14:8a:cc:ea: f6:af:56:f5:0d:2e:50:0b:e0:9b:9f:99:c0:5b:07: de:4d:22:de:d3:05:fb:70:d0:1e:8f:fd:07:1f:fd: ce:f5:e6:5c:24:24:1d:f6:5d:4b:10:41:f2:25:59: a9:08:30:de:82:aa:dd:49:a8:05:d0:16:6a:96:d2: 5d:de:da:38:4a:ea:d7:a6:bd:fe:38:b4:ac:40:54: 91:81:9c:27:fa:e3:b2:6d:a9:8e:ff:bc:23:23:57: a9:b1:a5:05:ab:ae:c1:b3:75:9c:41:d4:fc:31:4b: 3a:5b:f2:15:15:23:4d:49:3d:6a:a3:6f:46:37:da: c2:fa:2b:da:8e:82:1c:be:d8:95:4c:c3:3c:a9:33: 88:7b:d9:a5:c9:8a:81:f0:88:9a:61:44:17:e1:d4: 7b:c2:ce:9c:a9:72:db:5f:59:55:d8:17:47:e4:85: 5a:2f:77:4d:17:bc:85:d9:dc:76:6b:b1:6e:66:d3: 55:65:7f:d3:44:dd:42:b7:1c:43:08:a4:ce:3f:e1: 8a:6e:76:e0:61:91:b3:ca:e7:b0:02:80:a9:c5:52: f0:df:ec:15:7b:63:17:cf:29:8c:1d:b8:46:f4:a5: ae:45:de:ee:66:6c:39:fb:59:f4:ec:e7:b7:d6:5a: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:84:86:34:53:13:01:AF:4B:8D:26:43:31:30:27:5A:F6:C4:A0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4d:e8:4d:e6:47:72:a5:2a:e3:8e:fc:87:10:e2:42:ce:27: 06:ef:2e:8c:9b:c5:9d:7c:76:b2:61:73:17:73:bf:24:6a:87: 42:ad:53:fe:e0:ab:ea:ae:ba:f9:ef:29:99:ad:ae:e8:c7:9f: 5f:07:b4:8f:01:33:bc:55:28:a9:51:5d:73:91:5e:ea:d2:f0: b3:35:70:bf:f3:a1:a0:3b:06:33:32:51:a0:41:8c:41:e0:02: 8b:82:e7:89:6d:e3:0b:84:56:76:d3:d1:3b:1e:2a:ab:0c:19: 66:f9:b5:58:11:fe:14:c6:a1:03:4c:3a:79:66:30:dc:f3:c9: c7:ed:04:3c:56:9d:6f:f3:88:cf:80:44:d3:ea:bd:6c:fb:6e: 42:40:5b:a0:b3:df:f6:bf:a1:3b:a0:5b:e4:c6:3c:df:39:45: 2d:17:fb:6a:5a:84:35:23:b3:25:9f:ce:2e:9d:e4:a2:a4:2b: e2:21:58:2f:01:87:8c:12:7f:2f:3d:7d:70:94:93:e3:1d:92: 78:21:84:aa:d4:bc:f2:b9:86:11:4e:e3:3a:38:40:31:bc:0c: 5f:eb:c5:a4:9b:18:a1:d0:6c:b5:a2:44:8c:77:34:3a:24:5e: e2:5a:e3:cd:bb:b6:5c:28:0e:68:17:17:40:df:c9:5e:d6:5b: 6c:dc:ee:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9XCyG+k8kHQUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk NzU3MzBjNjMtYzVkMi00M2UyLTk4NjYtNzhlNDE3YzM0N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOXqc1ApUQU7DhSKzOr2r1b1DS5QC+Cbn5nA WwfeTSLe0wX7cNAej/0HH/3O9eZcJCQd9l1LEEHyJVmpCDDegqrdSagF0BZqltJd 3to4SurXpr3+OLSsQFSRgZwn+uOybamO/7wjI1epsaUFq67Bs3WcQdT8MUs6W/IV FSNNST1qo29GN9rC+ivajoIcvtiVTMM8qTOIe9mlyYqB8IiaYUQX4dR7ws6cqXLb X1lV2BdH5IVaL3dNF7yF2dx2a7FuZtNVZX/TRN1CtxxDCKTOP+GKbnbgYZGzyuew AoCpxVLw3+wVe2MXzymMHbhG9KWuRd7uZmw5+1n07Oe31lplVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFByEhjRTEwGvS40mQzEwJ1r2xKAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDg2OGQ0MDAtM2QzZS0z MDAwLWIzODEtMDk5Mjc5Y2EzYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJN6E3mR3KlKuOO/IcQ4kLOJwbvLoybxZ18drJhcxdzvyRqh0Kt U/7gq+quuvnvKZmtrujHn18HtI8BM7xVKKlRXXORXurS8LM1cL/zoaA7BjMyUaBB jEHgAouC54lt4wuEVnbT0TseKqsMGWb5tVgR/hTGoQNMOnlmMNzzycftBDxWnW/z iM+ARNPqvWz7bkJAW6Cz3/a/oTugW+TGPN85RS0X+2pahDUjsyWfzi6d5KKkK+Ih WC8Bh4wSfy89fXCUk+MdknghhKrUvPK5hhFO4zo4QDG8DF/rxaSbGKHQbLWiRIx3 NDokXuJa4827tlwoDmgXF0DfyV7WW2zc7vU= -----END CERTIFICATE-----Generated at Sun Jun 15 19:20:58 2025 by rpki-client