$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa File: 21a4ea39-0e65-3c46-9645-6a40d2e40110.roa (raw, json) Hash identifier: bbR9uaXrDQZ/T8SfkJL6BdtKwkJLHbYfmCZOlyT8QRY= Subject key identifier: 49:18:E5:DB:7C:11:1B:D1:74:71:39:17:98:F1:22:F7:64:5B:40:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E382D4266339D4A182ACE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 397203 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:82:d4:26:63:39:d4:a1:82:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=2c427557-c133-46db-bc14-ca59967cc6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:05:6d:1b:55:fd:85:88:57:e4:2a:63:0e: ff:da:3b:41:fe:89:67:cb:bd:3b:22:20:82:08:14: 29:ea:11:c9:4e:ce:72:ef:12:11:34:1e:28:dd:fa: c8:d5:c1:2c:27:f2:5f:0c:bb:72:39:d2:2a:c5:37: a3:6d:7d:1e:24:06:7d:b5:22:43:bb:9a:7f:99:32: 10:6b:71:b5:10:10:a7:48:60:29:a8:84:b4:21:b6: db:e0:c8:48:5d:d8:69:92:f9:83:aa:15:3c:b3:12: d9:66:71:b4:2d:91:15:8b:82:a0:41:99:4a:2b:83: 82:1e:ae:e5:0f:14:6d:be:c9:cb:14:da:d0:f6:33: 25:20:4f:d5:7f:d2:87:16:46:fa:b9:74:45:ef:4f: 44:16:71:07:1d:90:a5:11:be:af:2a:b3:82:0f:50: 12:15:81:ed:d7:6d:46:a0:fe:df:17:de:ad:47:05: b6:d2:3a:f5:10:bc:54:07:f9:a1:82:7e:cb:c4:0a: 70:3d:c9:3d:ec:a5:df:2e:a3:20:0a:d2:ab:4d:c7: f2:b2:e7:86:6f:6e:ba:40:ee:b6:f8:c7:c7:f7:3a: 4e:36:be:c2:4e:a0:cd:4d:ac:c4:b2:fd:e5:e1:ad: ab:1d:02:04:7e:ba:6a:72:41:36:e4:d0:24:4a:dd: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:E5:DB:7C:11:1B:D1:74:71:39:17:98:F1:22:F7:64:5B:40:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ce:0d:0a:88:ef:20:32:71:5c:48:02:33:ed:44:43:ba:e6: 00:51:da:c0:cf:34:50:65:dc:92:18:1b:33:65:c7:58:ed:80: 48:04:40:33:12:39:31:27:3e:4e:42:51:63:69:bb:71:52:ed: 0d:e5:df:8f:31:95:94:49:01:5e:c2:4f:ff:f8:39:ec:fa:ab: 65:1a:69:46:06:7e:f3:a5:01:f9:94:71:8c:8d:a6:e6:26:a8: d4:4c:c6:42:02:41:ba:8a:4c:0a:d1:d2:c0:b9:c0:27:e0:63: c0:85:ad:9c:ff:f3:97:39:78:0f:50:b7:d4:33:50:40:87:c2: b9:5b:bc:de:db:54:fb:4d:53:06:48:00:08:94:f0:70:e7:3c: 86:de:70:cd:43:45:f3:95:07:31:cf:78:6c:d9:77:11:ca:fa: fc:5a:1a:96:64:85:8d:f7:f9:60:91:81:dc:b8:4a:8b:0a:49: ab:7c:75:c1:ed:b9:49:98:b5:d1:24:db:4a:f0:4e:c5:57:62: 3e:73:b8:ce:b8:4f:30:df:d7:ce:39:52:e0:19:5d:bc:3f:af: f8:dc:bc:4b:cb:2f:e8:f6:ff:7f:cd:eb:48:b0:5c:fd:1c:07: c1:e0:77:db:96:40:38:aa:73:65:f9:89:ed:5d:5c:e4:17:fc: 6e:5b:16:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44LUJmM51KGCrOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk MmM0Mjc1NTctYzEzMy00NmRiLWJjMTQtY2E1OTk2N2NjNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIkFbRtV/YWIV+QqYw7/2jtB/olny707IiCC CBQp6hHJTs5y7xIRNB4o3frI1cEsJ/JfDLtyOdIqxTejbX0eJAZ9tSJDu5p/mTIQ a3G1EBCnSGApqIS0Ibbb4MhIXdhpkvmDqhU8sxLZZnG0LZEVi4KgQZlKK4OCHq7l DxRtvsnLFNrQ9jMlIE/Vf9KHFkb6uXRF709EFnEHHZClEb6vKrOCD1ASFYHt121G oP7fF96tRwW20jr1ELxUB/mhgn7LxApwPck97KXfLqMgCtKrTcfysueGb266QO62 +MfH9zpONr7CTqDNTazEsv3l4a2rHQIEfrpqckE25NAkSt17dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEkY5dt8ERvRdHE5F5jxIvdkW0CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFhNGVhMzktMGU2NS0z YzQ2LTk2NDUtNmE0MGQyZTQwMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvODQqI7yAycVxIAjPtREO65gBR2sDPNFBl3JIYGzNlx1jtgEgE QDMSOTEnPk5CUWNpu3FS7Q3l348xlZRJAV7CT//4Oez6q2UaaUYGfvOlAfmUcYyN puYmqNRMxkICQbqKTArR0sC5wCfgY8CFrZz/85c5eA9Qt9QzUECHwrlbvN7bVPtN UwZIAAiU8HDnPIbecM1DRfOVBzHPeGzZdxHK+vxaGpZkhY33+WCRgdy4SosKSat8 dcHtuUmYtdEk20rwTsVXYj5zuM64TzDf1845UuAZXbw/r/jcvEvLL+j2/3/N60iw XP0cB8Hgd9uWQDiqc2X5ie1dXOQX/G5bFvw= -----END CERTIFICATE-----Generated at Sun Apr 27 17:47:36 2025 by rpki-client