$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa File: 4548f520-15a9-3a02-9b0b-596986e2e25b.roa (raw, json) Hash identifier: JaJce6g/ntyJ36xaodTj/pOMl6WW93q+M/3vlBDVqag= Subject key identifier: 66:AC:7F:F6:57:9C:24:99:C5:D6:CF:9E:AF:FB:06:10:06:38:97:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A14658003E9897A422D8780E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 0 IP address blocks: 2620:74:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:80:03:e9:89:7a:42:2d:87:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=50ad4951-a527-4b29-b2c5-1e0579af54f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:3d:be:4f:9b:6c:5b:d6:ab:8b:87:e7:d2: f6:7b:7c:39:36:88:3b:60:ab:35:4e:f1:71:5e:33: 18:80:75:a1:71:ec:88:cd:b9:c7:fd:1f:2d:ad:be: 9c:34:1c:64:b6:3b:6f:59:bb:79:45:23:dd:84:9d: 39:cc:49:51:82:47:23:44:2e:f3:b7:ab:89:ad:3b: 21:2b:a1:b1:3c:61:b4:ee:20:b6:63:fc:bd:01:b1: 8c:54:03:e7:76:40:ce:92:05:7f:9c:24:55:34:12: c2:e0:83:bb:c9:22:01:71:2c:ae:c4:5c:85:cf:ca: e4:16:09:c6:95:76:cd:eb:a6:46:6c:64:88:12:d1: 51:69:d1:4e:ee:2b:16:66:31:47:03:c8:70:75:dc: d8:ab:fa:ef:6d:ca:b1:13:dc:9d:d6:cd:8b:cb:66: 4b:4e:24:ba:7e:b5:72:5a:bb:ea:df:9d:a7:24:88: c3:0c:fa:d1:a1:ff:65:00:16:f2:48:16:9f:ca:71: 44:6f:4b:30:e7:69:3e:5f:d9:3b:ab:48:21:47:75: 21:b1:b0:61:e6:54:0a:2d:c8:68:59:eb:c9:54:09: a0:80:07:94:61:da:6c:d4:7e:09:cf:ba:32:6f:be: 86:64:a8:22:cd:61:12:42:9a:b5:ed:ee:4d:e8:c2: da:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AC:7F:F6:57:9C:24:99:C5:D6:CF:9E:AF:FB:06:10:06:38:97:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2d:7c:ad:9b:06:37:1b:8e:32:7a:0c:6d:3d:fd:07:f7:9a: f3:75:73:53:9b:4a:6f:0d:53:c8:fc:9b:24:38:da:23:80:e7: 39:87:ae:d4:45:bb:f6:4d:d6:ac:3f:f6:79:d9:2e:1b:a3:28: f3:70:7b:bd:d9:a7:8b:98:22:b3:a1:1a:4b:c4:e4:86:f5:f6: 08:d2:c1:d7:b6:55:9d:47:cd:59:91:1a:5f:bb:95:40:6d:43: 30:d8:d0:37:8e:ff:43:51:1e:82:a2:3a:fe:d1:db:bc:d1:a2: c9:c2:30:a8:2a:57:4a:1c:e1:1c:fe:7e:c5:d0:e2:c0:56:f9: 4b:b5:ef:b4:27:c0:78:79:39:72:00:fe:86:5f:b8:01:dd:27: 1b:ec:8a:0f:8e:71:49:b9:36:07:1b:ca:19:eb:05:5c:e8:7f: 3f:b4:eb:02:ee:06:f7:cb:e8:ed:0e:8c:5e:8c:d8:8b:8c:fb: 48:d8:55:81:6a:f8:ec:0b:61:2a:18:cf:36:fb:a9:8e:25:ed: 18:9c:e6:b4:97:e7:ee:42:f2:c2:b9:8c:4b:ba:92:a0:74:26: 03:a3:87:bc:9e:fd:1a:c9:2d:fc:1e:ec:5d:a1:d7:f3:2d:f1: a5:e7:5a:41:be:da:a5:86:94:87:85:49:7a:77:6b:cd:62:3b: d7:aa:f8:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZYAD6Yl6Qi2HgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NTBhZDQ5NTEtYTUyNy00YjI5LWIyYzUtMWUwNTc5YWY1NGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioM9vk+bbFvWq4uH59L2e3w5Nog7YKs1TvFx XjMYgHWhceyIzbnH/R8trb6cNBxktjtvWbt5RSPdhJ05zElRgkcjRC7zt6uJrTsh K6GxPGG07iC2Y/y9AbGMVAPndkDOkgV/nCRVNBLC4IO7ySIBcSyuxFyFz8rkFgnG lXbN66ZGbGSIEtFRadFO7isWZjFHA8hwddzYq/rvbcqxE9yd1s2Ly2ZLTiS6frVy Wrvq352nJIjDDPrRof9lABbySBafynFEb0sw52k+X9k7q0ghR3UhsbBh5lQKLcho WevJVAmggAeUYdps1H4Jz7oyb76GZKgizWESQpq17e5N6MLaTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGasf/ZXnCSZxdbPnq/7BhAGOJchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU0OGY1MjAtMTVhOS0z YTAyLTliMGItNTk2OTg2ZTJlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIYtfK2bBjcbjjJ6DG09/Qf3mvN1c1ObSm8NU8j8myQ42iOA5zmH rtRFu/ZN1qw/9nnZLhujKPNwe73Zp4uYIrOhGkvE5Ib19gjSwde2VZ1HzVmRGl+7 lUBtQzDY0DeO/0NRHoKiOv7R27zRosnCMKgqV0oc4Rz+fsXQ4sBW+Uu177QnwHh5 OXIA/oZfuAHdJxvsig+OcUm5NgcbyhnrBVzofz+06wLuBvfL6O0OjF6M2IuM+0jY VYFq+OwLYSoYzzb7qY4l7Ric5rSX5+5C8sK5jEu6kqB0JgOjh7ye/RrJLfwe7F2h 1/Mt8aXnWkG+2qWGlIeFSXp3a81iO9eq+I0= -----END CERTIFICATE-----Generated at Sun Jun 29 11:49:18 2025 by rpki-client