$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa File: fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa (raw, json) Hash identifier: gEuWtN/inePAIrDVPeKMU5790cIjb9a693YGeSeL5w0= Subject key identifier: 7F:00:BA:2B:DA:5A:96:4B:54:EB:7B:A5:D8:12:1D:4E:19:7D:5C:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A2C201E973E54ABC3687124A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 2620:74:ae::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1e:97:3e:54:ab:c3:68:71:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=de9ad138-e144-42b4-b91f-9d096378d048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:15:08:e1:42:ab:b6:03:62:3f:00:d0:7f: 0a:33:66:ec:4b:96:12:8c:12:4b:79:9d:9e:9e:a9: 58:d9:0c:b0:db:ff:0d:45:64:71:d4:2c:d2:c0:e3: 23:07:1a:5f:4c:b0:04:95:f9:ef:1c:88:4d:9e:4e: b7:dd:7f:bb:c0:9e:58:8c:b2:bb:e0:4e:31:70:9c: 24:a9:db:28:fa:a4:47:0f:2a:85:eb:6f:be:9f:0d: 79:88:58:e3:44:13:95:a8:64:72:d8:62:11:d4:e6: 8f:cb:d1:58:83:8d:6b:06:81:54:55:bd:3e:ce:9b: dc:6e:1d:d7:82:e4:8f:ed:41:a7:99:48:0c:62:a2: 0c:b6:ba:af:df:88:aa:55:5c:f8:a4:73:b0:c4:70: 25:d0:d4:4e:8d:11:b8:3c:9a:c4:d0:ba:95:1d:35: a7:7b:ec:c4:ce:b1:aa:3f:ad:9f:56:e5:39:94:17: 44:4b:10:5f:d6:2a:cb:fd:89:65:fc:ae:41:3c:d1: a8:75:2a:59:48:74:83:0b:b6:4d:ee:91:ca:cc:01: bd:22:72:0f:06:a5:34:c9:33:d6:86:90:36:63:34: 0a:0d:36:3a:00:5b:b4:c0:39:b9:91:ce:48:68:1f: 6b:b0:c1:ed:52:13:52:d6:4c:45:aa:89:84:00:73: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:00:BA:2B:DA:5A:96:4B:54:EB:7B:A5:D8:12:1D:4E:19:7D:5C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ae::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d1:79:aa:69:59:0c:29:5d:3b:c6:53:a2:0f:d4:16:af:1a: 94:48:e3:e4:b9:55:5f:1b:ad:28:49:bf:fb:21:dd:7d:dc:2f: d3:c7:11:75:91:20:7e:8d:db:0d:5b:73:b6:21:a4:06:05:14: aa:5b:72:a8:83:5c:1f:d0:8f:fd:7a:a7:16:00:99:93:66:01: a7:9f:45:ca:e6:dc:8c:15:5d:5f:37:8c:5a:c9:d6:8a:26:e7: c0:5d:4b:b9:f1:e1:58:68:6d:f3:56:27:83:a3:24:47:33:15: 72:73:57:41:cf:6d:b1:cf:e5:e2:b6:fe:70:41:0b:12:3a:3a: 44:3e:a6:58:d1:98:6f:d4:ac:80:bf:f0:48:cc:8f:df:fa:13: 1a:95:e4:a7:1a:70:32:b4:b7:ab:57:51:a4:88:ab:f6:4a:97: 95:a6:6d:8c:99:46:c1:09:43:b5:3a:bc:5f:37:40:38:a1:a5: 45:ed:75:3e:ba:d3:94:fd:c4:d9:8d:aa:12:c1:63:7b:a7:14: 59:2a:cc:27:b9:17:dc:48:d5:df:ba:99:d8:90:d4:68:99:fe: cb:88:51:48:56:64:6a:df:eb:9b:21:8c:7c:13:c0:46:e7:74: 9d:12:71:fb:cb:fe:18:c4:ec:a7:7b:24:c7:9c:c1:8e:9f:bb: 8f:15:74:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEosIB6XPlSrw2hxJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZGU5YWQxMzgtZTE0NC00MmI0LWI5MWYtOWQwOTYzNzhkMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmScVCOFCq7YDYj8A0H8KM2bsS5YSjBJLeZ2e nqlY2Qyw2/8NRWRx1CzSwOMjBxpfTLAElfnvHIhNnk633X+7wJ5YjLK74E4xcJwk qdso+qRHDyqF62++nw15iFjjRBOVqGRy2GIR1OaPy9FYg41rBoFUVb0+zpvcbh3X guSP7UGnmUgMYqIMtrqv34iqVVz4pHOwxHAl0NROjRG4PJrE0LqVHTWne+zEzrGq P62fVuU5lBdESxBf1irL/Yll/K5BPNGodSpZSHSDC7ZN7pHKzAG9InIPBqU0yTPW hpA2YzQKDTY6AFu0wDm5kc5IaB9rsMHtUhNS1kxFqomEAHOxfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8AuivaWpZLVOt7pdgSHU4ZfVx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI1NGNlODgtMWFmMi0z OWY5LThiZDAtYTc3ZjVhNDQwMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdACu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnReappWQwpXTvGU6IP1BavGpRI4+S5VV8brShJv/sh3X3cL9PH EXWRIH6N2w1bc7YhpAYFFKpbcqiDXB/Qj/16pxYAmZNmAaefRcrm3IwVXV83jFrJ 1oom58BdS7nx4VhobfNWJ4OjJEczFXJzV0HPbbHP5eK2/nBBCxI6OkQ+pljRmG/U rIC/8EjMj9/6ExqV5KcacDK0t6tXUaSIq/ZKl5WmbYyZRsEJQ7U6vF83QDihpUXt dT6605T9xNmNqhLBY3unFFkqzCe5F9xI1d+6mdiQ1GiZ/suIUUhWZGrf65shjHwT wEbndJ0ScfvL/hjE7Kd7JMecwY6fu48VdJE= -----END CERTIFICATE-----Generated at Sun Jun 15 20:46:53 2025 by rpki-client