$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/223b11d2-47b5-3108-9382-47de2de8359b.roa File: 223b11d2-47b5-3108-9382-47de2de8359b.roa (raw, json) Hash identifier: LjTmutDRecdtriXWVuG8v10OLlVIcneuVUegS0GEtvo= Subject key identifier: 79:DF:A2:37:0B:50:5E:13:EB:EE:1C:0A:8B:47:E3:F0:A0:56:5F:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1B6012435FF9E8A7791690E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/223b11d2-47b5-3108-9382-47de2de8359b.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7342 IP address blocks: 2620:74:5d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:12:43:5f:f9:e8:a7:79:16:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=dbb70520-3b71-4f61-8a7b-7f263f026490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6b:05:62:bb:f4:71:58:3f:db:ee:91:77:88: f9:dc:6e:80:fd:cf:75:1d:b4:bf:95:57:22:e6:ef: d6:c4:e8:6a:56:d6:e1:b5:ba:08:5a:53:83:fd:9f: c3:25:e0:ef:25:44:62:50:bb:a7:98:cb:13:c1:a7: cc:bb:40:97:a4:73:ae:b8:22:36:e4:0f:f7:ca:4f: 09:b2:bf:12:75:a0:85:c3:9d:b6:66:2f:86:cd:88: 60:ea:fd:31:c9:b3:a3:b1:56:37:69:de:7e:19:5a: 2d:0f:d6:61:4f:ed:80:01:ee:d8:8d:e1:d3:35:f7: 8b:6f:da:2f:47:80:27:e5:2b:63:cf:30:8e:45:ac: 7b:ac:26:55:fa:1e:50:84:40:18:e4:e0:88:f1:16: 73:55:4c:7f:54:a2:8d:07:52:db:4f:8f:d6:a9:fd: 8f:50:d0:d4:44:f9:7f:7c:81:c0:74:f3:61:00:be: df:76:83:c4:be:6e:8e:e2:c8:52:d0:8b:5e:bd:3a: 46:36:40:d9:58:f4:f4:b1:0c:46:d4:23:d3:8b:1d: 8f:0f:2e:5a:b3:9b:b3:1f:64:8f:8b:27:f8:51:88: 72:80:cb:f1:7c:68:fa:c6:e6:fa:a0:b7:6d:ca:42: ed:a0:ed:a8:51:b8:ae:64:ed:e9:ed:b9:27:7b:dd: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:A2:37:0B:50:5E:13:EB:EE:1C:0A:8B:47:E3:F0:A0:56:5F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/223b11d2-47b5-3108-9382-47de2de8359b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:25:a1:4f:18:b6:fd:fa:77:72:aa:03:69:e6:b4:2e:e5:52: 69:6c:3f:bc:ec:bb:41:43:89:33:26:8a:b6:57:17:67:89:0c: a5:81:fb:a8:ef:25:8c:65:ff:ff:55:b0:e9:fa:37:58:3f:37: ca:82:7d:c0:59:79:9c:b9:ad:63:89:1e:3c:41:e8:d4:00:37: 1e:8a:0d:dd:ce:25:43:b5:bd:7b:f2:2b:07:1a:c1:6d:74:eb: 76:18:d2:07:c4:44:d7:e2:6d:0e:5c:79:10:ea:9e:e8:60:e0: bb:fb:96:f2:2f:c8:31:0c:c8:f2:73:72:fd:7f:ce:bf:43:8c: 81:17:ea:f7:91:46:0e:fc:c1:9c:aa:d5:64:1c:94:dc:19:91: 09:f2:cc:d8:b5:5d:48:7e:9c:0b:99:93:d1:29:1f:7c:be:59: bc:57:3f:bf:30:63:b6:d4:5d:d2:e5:9e:9c:19:bd:6b:7f:6c: 6f:ac:96:e4:6e:e1:3a:aa:44:f0:d1:67:e1:fa:20:72:b7:1c: f2:e4:9f:11:7c:4d:88:5a:02:93:a5:2b:b1:25:70:1f:0c:3e: a2:ec:11:26:e9:4d:9a:1e:9a:f6:72:1f:6e:c1:b2:cb:fc:cf: d7:af:24:5b:b9:22:69:f2:36:e8:8e:cd:c8:aa:a0:7f:02:48: 73:a4:1f:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEobYBJDX/nop3kWkOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZGJiNzA1MjAtM2I3MS00ZjYxLThhN2ItN2YyNjNmMDI2NDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2msFYrv0cVg/2+6Rd4j53G6A/c91HbS/lVci 5u/WxOhqVtbhtboIWlOD/Z/DJeDvJURiULunmMsTwafMu0CXpHOuuCI25A/3yk8J sr8SdaCFw522Zi+GzYhg6v0xybOjsVY3ad5+GVotD9ZhT+2AAe7YjeHTNfeLb9ov R4An5StjzzCORax7rCZV+h5QhEAY5OCI8RZzVUx/VKKNB1LbT4/Wqf2PUNDURPl/ fIHAdPNhAL7fdoPEvm6O4shS0ItevTpGNkDZWPT0sQxG1CPTix2PDy5as5uzH2SP iyf4UYhygMvxfGj6xub6oLdtykLtoO2oUbiuZO3p7bkne93C2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHnfojcLUF4T6+4cCotH4/CgVl/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIzYjExZDItNDdiNS0z MTA4LTkzODItNDdkZTJkZTgzNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAloU8Ytv36d3KqA2nmtC7lUmlsP7zsu0FDiTMmirZXF2eJDKWB +6jvJYxl//9VsOn6N1g/N8qCfcBZeZy5rWOJHjxB6NQANx6KDd3OJUO1vXvyKwca wW1063YY0gfERNfibQ5ceRDqnuhg4Lv7lvIvyDEMyPJzcv1/zr9DjIEX6veRRg78 wZyq1WQclNwZkQnyzNi1XUh+nAuZk9EpH3y+WbxXP78wY7bUXdLlnpwZvWt/bG+s luRu4TqqRPDRZ+H6IHK3HPLknxF8TYhaApOlK7ElcB8MPqLsESbpTZoemvZyH27B ssv8z9evJFu5ImnyNuiOzciqoH8CSHOkH94= -----END CERTIFICATE-----Generated at Tue Jul 1 00:58:38 2025 by rpki-client