$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90f31479-7391-3292-a9d8-27271c1f9d96.roa File: 90f31479-7391-3292-a9d8-27271c1f9d96.roa (raw, json) Hash identifier: bEevJpGToDwuXLWNwQWqxhoKk9XHuLnU6W/mHiEWSa0= Subject key identifier: 11:AD:5F:C0:85:1A:C1:18:FC:D3:9C:31:42:EB:AB:79:54:A9:1D:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F2E554A743286978169D3A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90f31479-7391-3292-a9d8-27271c1f9d96.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 7342 IP address blocks: 2620:74:82::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:54:a7:43:28:69:78:16:9d:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=8368b5c9-dd0c-4532-86d8-7f87dba61127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:10:4b:cf:7d:ae:2c:99:3f:cf:af:c1:d5: 94:e9:5f:24:ac:a5:d0:d1:e4:0a:40:bf:e6:cf:f4: ad:23:9f:f1:e8:bf:13:99:47:1f:a1:0e:86:db:08: 57:06:44:d0:45:0f:a3:22:82:7f:50:fb:54:eb:ab: e0:40:ad:9f:a1:7c:22:4d:20:2b:ee:be:38:0f:78: b6:14:cf:01:f8:c9:5b:2e:97:90:c2:a3:ee:46:d4: fb:64:06:b3:08:c2:a6:e9:3a:4b:22:97:5c:f1:68: 18:26:0a:89:58:6e:c3:0e:ae:8f:19:26:80:a7:50: bf:30:b5:73:7f:fe:e9:00:41:f1:55:ce:27:07:f3: a1:cf:52:67:b8:81:9e:51:85:7b:68:3e:18:08:a6: bb:f4:52:bb:c3:54:dd:85:c5:ab:be:9a:01:11:85: d0:68:82:fa:96:b8:e0:76:a0:34:69:1f:c2:b0:88: 04:6b:43:6b:a7:65:27:4a:98:4b:09:6c:a6:c3:1f: 7a:ff:25:6d:e6:96:61:4e:f3:63:69:f1:d4:f7:e5: b0:9c:82:e5:fd:19:a5:69:17:2e:b4:73:78:8e:b2: 6e:74:86:d6:bb:67:0f:5a:ac:3d:c7:52:72:88:72: 42:51:63:54:c4:ab:4c:2a:cb:44:1c:44:e4:d7:c3: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AD:5F:C0:85:1A:C1:18:FC:D3:9C:31:42:EB:AB:79:54:A9:1D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90f31479-7391-3292-a9d8-27271c1f9d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:82::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:38:af:85:ba:de:a7:82:ec:ef:2d:63:5f:cc:77:20:f6:e6: 62:48:d4:42:29:69:f9:e2:6b:31:5f:90:f7:1a:5f:7d:c2:5e: c9:fe:65:b3:a6:0d:34:ed:17:24:f6:c4:28:5f:c6:63:16:0e: 3d:cb:53:28:0e:30:c7:23:f4:1e:22:12:c1:aa:74:70:ed:da: 00:db:68:e3:d4:f7:38:56:c3:2d:0e:f9:a1:8b:5f:1e:5c:6c: 38:5f:1e:bc:7c:34:7b:c7:db:b6:3b:91:ab:62:20:73:a1:57: 01:41:d4:18:6c:9d:2d:7c:d7:bb:39:f8:f4:e8:57:8c:f3:fe: 04:42:0d:e9:b5:cd:f6:93:5c:41:0c:20:a6:4f:b5:39:21:4d: b9:b1:f6:2c:a3:c9:d1:7f:3b:2f:72:f0:c8:3f:a8:b4:e0:f0: f7:f2:d8:2e:7b:d5:70:e7:fe:b7:16:c9:ec:51:77:a3:74:c6: 4d:07:f6:92:11:af:64:c3:9d:1f:df:26:c7:d6:ee:a1:9f:a0: 95:80:fe:8d:28:ea:8b:70:ad:7d:e0:c1:11:5d:eb:5b:b9:a3: 43:1c:84:9b:35:b6:6b:fb:32:46:cf:0b:65:34:9f:23:8c:5c: 1d:1a:28:93:a3:94:0b:c7:3e:82:28:8a:e3:d5:53:bd:d5:d4: 31:58:2a:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5VSnQyhpeBadOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ODM2OGI1YzktZGQwYy00NTMyLTg2ZDgtN2Y4N2RiYTYxMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoMQS899riyZP8+vwdWU6V8krKXQ0eQKQL/m z/StI5/x6L8TmUcfoQ6G2whXBkTQRQ+jIoJ/UPtU66vgQK2foXwiTSAr7r44D3i2 FM8B+MlbLpeQwqPuRtT7ZAazCMKm6TpLIpdc8WgYJgqJWG7DDq6PGSaAp1C/MLVz f/7pAEHxVc4nB/Ohz1JnuIGeUYV7aD4YCKa79FK7w1TdhcWrvpoBEYXQaIL6lrjg dqA0aR/CsIgEa0Nrp2UnSphLCWymwx96/yVt5pZhTvNjafHU9+WwnILl/RmlaRcu tHN4jrJudIbWu2cPWqw9x1JyiHJCUWNUxKtMKstEHETk18ODHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBGtX8CFGsEY/NOcMULrq3lUqR0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBmMzE0NzktNzM5MS0z MjkyLWE5ZDgtMjcyNzFjMWY5ZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGk4r4W63qeC7O8tY1/MdyD25mJI1EIpafniazFfkPcaX33CXsn+ ZbOmDTTtFyT2xChfxmMWDj3LUygOMMcj9B4iEsGqdHDt2gDbaOPU9zhWwy0O+aGL Xx5cbDhfHrx8NHvH27Y7katiIHOhVwFB1BhsnS1817s5+PToV4zz/gRCDem1zfaT XEEMIKZPtTkhTbmx9iyjydF/Oy9y8Mg/qLTg8Pfy2C571XDn/rcWyexRd6N0xk0H 9pIRr2TDnR/fJsfW7qGfoJWA/o0o6otwrX3gwRFd61u5o0MchJs1tmv7MkbPC2U0 nyOMXB0aKJOjlAvHPoIoiuPVU73V1DFYKlM= -----END CERTIFICATE-----Generated at Tue Jul 1 04:05:58 2025 by rpki-client