$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa File: 1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa (raw, json) Hash identifier: N7TbW6Qhjx48ejg7hsZccqRO+VYconUuBS9aRJZKksE= Subject key identifier: CD:B6:34:78:38:5B:0B:DE:F7:9D:19:58:1F:E0:A2:2D:DB:33:35:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38796D0CBD539A9117C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396574 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:96:d0:cb:d5:39:a9:11:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=a8e05b1e-a414-40ac-af4e-045a2ce025a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:6a:a5:d5:cd:f6:89:17:2e:9c:0c:62:61: 49:ee:cf:0f:cc:bd:d8:44:a2:fe:65:23:0b:48:70: 5d:3f:2a:f3:0a:b0:56:08:76:c7:7a:41:e6:6f:33: 48:b4:e2:d3:c5:5c:32:80:bb:89:d8:bd:bc:a9:be: 36:d3:ce:3a:63:05:3a:8c:c3:84:bf:2b:bc:00:77: f3:95:dc:c1:04:48:cc:01:2f:36:2b:83:48:72:88: cb:2b:6e:1d:ea:9f:9d:7d:e6:d1:b3:0d:b2:0d:b3: 98:67:f8:7e:f0:2e:b7:90:8e:d1:11:ef:01:55:4e: 1d:18:36:14:cc:4a:77:34:59:83:36:a1:ec:23:c9: 75:df:44:ed:88:9e:46:79:d9:0a:39:61:a3:f4:55: 8a:24:aa:d1:e1:94:7f:13:6c:8c:d6:87:fb:23:dd: 3c:62:24:3e:0d:56:dc:7e:8a:ae:9c:cf:52:9b:43: 0d:3e:e8:c6:bd:a8:3e:5a:17:33:5f:08:c8:82:32: 48:15:9e:57:00:26:17:d2:84:09:ca:3f:0f:3e:9d: 55:03:27:eb:48:21:65:23:9f:1d:42:11:28:07:c6: 82:3e:2f:5c:e8:4e:00:7a:16:a1:2b:6b:24:22:50: 24:5a:08:97:c2:b9:db:b4:2a:43:08:f9:07:73:d0: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B6:34:78:38:5B:0B:DE:F7:9D:19:58:1F:E0:A2:2D:DB:33:35:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:17:58:60:88:e3:8d:a3:59:3e:ee:f5:94:5d:f4:b2:95:25: 14:21:b8:df:d3:11:e9:1a:0f:8f:a5:96:44:d3:56:88:00:6c: 93:ae:ce:a2:67:af:9b:0e:ca:63:72:ab:6f:b5:14:fe:df:c2: c4:84:27:e0:33:31:d9:6c:ae:8e:a9:84:e1:a9:a6:d6:07:88: 6f:dc:52:b8:23:9e:95:98:8b:17:f0:eb:19:c9:b0:cc:44:42: 96:f1:c9:49:fa:15:43:93:a9:8b:c5:1e:8a:64:bf:3c:e7:e4: 61:75:ae:29:ac:a5:43:bc:d1:cb:3d:c4:10:a6:10:45:d9:c6: 30:27:7b:e6:67:5a:6a:d4:b8:96:ff:d7:14:5b:aa:f3:c8:06: 96:f2:06:ec:c5:54:aa:1e:67:04:43:76:06:73:2e:e3:ac:b2: 40:79:98:8e:ce:6c:ab:eb:87:a5:02:13:bf:e7:5e:75:18:86: 07:23:22:98:96:f5:4e:7f:0f:41:b2:9a:79:b0:80:2a:c6:bf: 81:c9:7e:23:df:85:8a:0b:2e:d6:1f:7b:33:51:76:c0:a6:50: fd:48:01:be:ff:60:0d:d8:37:64:dc:a3:df:e0:70:cd:95:55: f8:da:be:a4:c2:9e:63:d8:d8:25:80:18:18:79:f5:5a:e6:d0: f0:34:96:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44eW0MvVOakRfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk YThlMDViMWUtYTQxNC00MGFjLWFmNGUtMDQ1YTJjZTAyNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaBqpdXN9okXLpwMYmFJ7s8PzL3YRKL+ZSML SHBdPyrzCrBWCHbHekHmbzNItOLTxVwygLuJ2L28qb420846YwU6jMOEvyu8AHfz ldzBBEjMAS82K4NIcojLK24d6p+dfebRsw2yDbOYZ/h+8C63kI7REe8BVU4dGDYU zEp3NFmDNqHsI8l130TtiJ5GedkKOWGj9FWKJKrR4ZR/E2yM1of7I908YiQ+DVbc foqunM9Sm0MNPujGvag+WhczXwjIgjJIFZ5XACYX0oQJyj8PPp1VAyfrSCFlI58d QhEoB8aCPi9c6E4AehahK2skIlAkWgiXwrnbtCpDCPkHc9CzFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM22NHg4Wwve950ZWB/goi3bMzX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWY0NzViYmUtZjVkZi0z ZjgzLWExYTQtYWNmMjNhNzI2Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8XWGCI442jWT7u9ZRd9LKVJRQhuN/TEekaD4+llkTTVogAbJOu zqJnr5sOymNyq2+1FP7fwsSEJ+AzMdlsro6phOGpptYHiG/cUrgjnpWYixfw6xnJ sMxEQpbxyUn6FUOTqYvFHopkvzzn5GF1rimspUO80cs9xBCmEEXZxjAne+ZnWmrU uJb/1xRbqvPIBpbyBuzFVKoeZwRDdgZzLuOsskB5mI7ObKvrh6UCE7/nXnUYhgcj IpiW9U5/D0GymnmwgCrGv4HJfiPfhYoLLtYfezNRdsCmUP1IAb7/YA3YN2Tco9/g cM2VVfjavqTCnmPY2CWAGBh59Vrm0PA0lmM= -----END CERTIFICATE-----Generated at Mon Apr 28 22:54:29 2025 by rpki-client