$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa File: a5061038-0bb9-3802-a5a4-f801e56e57be.roa (raw, json) Hash identifier: ZsAuvi6UfO78HUpI7OyhLvJ3jfjooUL66EioXAD4/Vw= Subject key identifier: 73:09:65:CE:DF:0D:10:AB:DF:4E:77:AE:33:E5:A4:71:12:70:5C:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849CE9A71E7DF93461383A2FB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7342 IP address blocks: 2620:74:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:71:e7:df:93:46:13:83:a2:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=8e1d25b1-c7ca-4a5f-b3fd-76a95f8c31c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:b2:1f:60:b5:c3:a0:c2:cc:41:89:17:ea: 5e:f2:8b:76:8f:d8:a0:59:49:e2:c6:63:37:55:3c: 97:15:57:1f:3e:7a:96:bb:c4:fc:e5:8c:bd:9c:a8: 90:93:d0:3b:20:33:75:24:62:d2:b6:38:09:85:a2: f2:80:e2:87:a6:a0:ed:82:8b:21:b4:3d:ea:97:08: 1e:a1:70:3a:ea:71:b7:2b:8f:8d:f9:9b:9f:9f:68: f4:8a:df:88:0c:97:a4:b8:1d:50:bd:28:17:4a:52: bb:45:fb:48:22:5f:30:cc:17:86:15:c0:8b:33:42: 70:16:37:9d:7a:78:39:3c:94:aa:47:8a:cc:14:58: 43:dd:63:74:c8:d1:da:93:55:c6:6a:64:37:e7:00: 32:ab:50:1c:7b:b1:37:9d:c0:e6:04:2b:92:a3:c4: 7c:6e:46:d7:9c:61:49:bc:c4:60:a4:7d:39:b1:6d: 50:76:79:28:c8:3a:bd:1d:a0:3d:8e:14:e7:be:ef: b9:05:40:d7:42:6f:4e:af:01:b5:f5:26:e5:a6:41: 2a:9b:bc:b3:73:cf:1a:ab:a6:5e:ee:cd:f0:d5:4d: b7:85:43:ec:70:0e:d5:06:a4:4c:a6:99:10:0b:06: 48:7f:91:26:bd:d8:18:a2:29:54:07:08:62:d1:4b: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:09:65:CE:DF:0D:10:AB:DF:4E:77:AE:33:E5:A4:71:12:70:5C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:61:97:e1:47:63:da:94:3a:68:a7:6c:8c:b8:b4:cc:5a:55: 86:03:42:60:4c:48:b6:f2:78:43:83:8c:c2:a6:d7:72:43:b3: e0:86:6b:d3:34:88:7e:d8:da:01:10:66:d8:09:d6:23:61:e0: 74:53:06:ed:26:83:d7:2d:54:3f:39:6c:7a:4d:6d:6f:3b:69: d8:42:66:60:ae:1d:93:ec:1b:f9:a9:59:85:2b:ef:4a:35:5e: 9c:93:7b:61:3c:d8:ee:ac:0e:96:e6:c6:27:27:e7:f9:7e:42: 92:a3:52:fb:36:f6:96:39:75:08:00:f0:ab:20:f8:40:24:03: 87:c4:88:16:e0:d4:fb:a7:55:b9:3b:47:37:51:d4:90:a9:97: 63:b5:2d:0f:6e:63:88:d0:05:0c:a2:23:3a:07:e1:14:bf:7f: 72:71:6d:dc:a6:d8:71:02:22:e0:62:de:45:82:20:9c:1f:d0: 82:d4:dc:8a:49:27:92:11:78:30:e9:43:a1:31:84:83:6d:6f: a7:a0:15:0e:00:d8:26:3d:b1:04:07:06:4d:22:83:b5:6a:4b: 9b:c6:b8:b0:41:f0:b8:b9:87:d3:9d:b6:43:b9:96:10:64:b9: b7:3b:64:2c:36:7b:e6:15:42:f9:79:ca:d3:cf:d7:b1:60:97: 59:af:f8:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmnHn35NGE4Oi+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OGUxZDI1YjEtYzdjYS00YTVmLWIzZmQtNzZhOTVmOGMzMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW2yH2C1w6DCzEGJF+pe8ot2j9igWUnixmM3 VTyXFVcfPnqWu8T85Yy9nKiQk9A7IDN1JGLStjgJhaLygOKHpqDtgoshtD3qlwge oXA66nG3K4+N+Zufn2j0it+IDJekuB1QvSgXSlK7RftIIl8wzBeGFcCLM0JwFjed eng5PJSqR4rMFFhD3WN0yNHak1XGamQ35wAyq1Ace7E3ncDmBCuSo8R8bkbXnGFJ vMRgpH05sW1QdnkoyDq9HaA9jhTnvu+5BUDXQm9OrwG19SblpkEqm7yzc88aq6Ze 7s3w1U23hUPscA7VBqRMppkQCwZIf5EmvdgYoilUBwhi0Ut4/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHMJZc7fDRCr3053rjPlpHEScFynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUwNjEwMzgtMGJiOS0z ODAyLWE1YTQtZjgwMWU1NmU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNhl+FHY9qUOminbIy4tMxaVYYDQmBMSLbyeEODjMKm13JDs+CG a9M0iH7Y2gEQZtgJ1iNh4HRTBu0mg9ctVD85bHpNbW87adhCZmCuHZPsG/mpWYUr 70o1XpyTe2E82O6sDpbmxicn5/l+QpKjUvs29pY5dQgA8Ksg+EAkA4fEiBbg1Pun Vbk7RzdR1JCpl2O1LQ9uY4jQBQyiIzoH4RS/f3Jxbdym2HECIuBi3kWCIJwf0ILU 3IpJJ5IReDDpQ6ExhINtb6egFQ4A2CY9sQQHBk0ig7VqS5vGuLBB8Li5h9OdtkO5 lhBkubc7ZCw2e+YVQvl5ytPP17Fgl1mv+LI= -----END CERTIFICATE-----Generated at Sun Jun 29 23:07:22 2025 by rpki-client