$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa File: 28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa (raw, json) Hash identifier: 67Nei21g1KFI60jKgBJqx0SamyUQgmfyR4lg7J3ykno= Subject key identifier: EF:15:38:4A:0F:84:DE:A7:3C:22:1C:80:40:8A:70:E1:33:B9:B8:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E385AEF178D3D5AAB14C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 396564 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:ae:f1:78:d3:d5:aa:b1:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=e43fde1e-9a39-434e-9c1e-9e21826512b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:bf:63:2a:09:28:be:85:cf:fb:f7:6f:a9: b8:ca:95:5d:0b:13:74:be:40:9f:22:1b:a7:3e:61: 68:c4:97:18:4d:07:f6:eb:d8:21:b2:77:78:c0:ef: 05:d3:95:89:19:45:41:ef:17:7b:0d:84:c3:ce:2a: 99:36:5f:ec:46:12:b3:36:60:01:85:03:32:47:eb: ef:87:99:87:c8:29:d7:91:df:f5:29:9c:2c:f8:68: d8:92:33:89:1d:95:14:38:19:89:3c:f6:b7:28:fe: 59:e2:56:1a:e0:20:88:a3:2c:d4:0b:04:af:43:7f: 47:4e:91:4b:4a:ae:3b:7e:6d:e0:09:38:3d:ea:e2: 53:23:8a:7b:4b:47:d3:97:25:19:ee:d6:2b:9b:3a: f4:8b:0a:be:eb:1e:a0:9c:6a:e5:34:5d:0c:4a:16: a9:21:fa:ab:f9:c2:ce:ae:e8:62:43:78:17:93:f8: d0:1e:19:b7:4b:02:60:d4:89:21:72:5b:52:79:2e: a4:68:a8:dd:04:46:37:91:97:49:8c:1e:0b:36:e5: d6:bf:20:dd:db:a2:6f:06:64:8e:df:8d:fb:59:ba: c5:6b:cb:81:a7:88:46:30:83:ea:19:2c:bc:bb:2a: 19:93:27:1b:24:84:b6:c6:d7:7c:c3:2f:63:71:53: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:15:38:4A:0F:84:DE:A7:3C:22:1C:80:40:8A:70:E1:33:B9:B8:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:93:60:40:cf:eb:44:07:bd:29:cf:6f:40:bc:3e:2e:4d:3c: eb:1d:c8:83:4d:58:00:c8:98:89:d7:b3:c2:05:9c:f0:d8:a4: cc:36:c4:b2:35:b6:d2:f7:71:10:d0:ff:79:0a:19:e0:d4:dc: 0a:79:21:1c:c9:bc:76:af:b2:7f:e1:22:6f:59:90:35:51:11: 7c:a7:9f:97:f3:01:bf:15:4e:ce:cb:4f:f3:ca:f7:57:68:87: 64:eb:9e:f7:2b:c7:e1:4e:43:5c:49:c0:2b:bd:b8:38:47:8c: a3:94:1e:cf:45:50:af:d1:d2:7c:de:a9:e5:ad:58:b8:3e:a0: 35:57:46:94:59:2b:05:5a:e8:28:19:d6:40:59:d7:9a:66:ed: 8e:bc:6a:71:22:4f:36:48:13:40:a2:51:72:2f:d4:3d:55:4c: a1:6b:49:0b:7e:20:1f:00:35:67:10:83:65:41:20:4a:28:70: 4e:7b:5d:75:0b:70:a5:b8:7e:02:eb:4b:a9:56:c6:26:10:08: de:55:62:e1:a2:a7:46:67:28:b5:17:98:a3:50:07:b3:98:44: d3:c2:7b:df:44:22:ed:18:94:f1:4a:15:bd:6e:dd:92:94:de: 62:4d:67:03:66:c2:3c:b3:8d:08:ca:a4:f1:ae:34:6a:59:bb: 8c:ea:99:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44Wu8XjT1aqxTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk ZTQzZmRlMWUtOWEzOS00MzRlLTljMWUtOWUyMTgyNjUxMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1G/YyoJKL6Fz/v3b6m4ypVdCxN0vkCfIhun PmFoxJcYTQf269ghsnd4wO8F05WJGUVB7xd7DYTDziqZNl/sRhKzNmABhQMyR+vv h5mHyCnXkd/1KZws+GjYkjOJHZUUOBmJPPa3KP5Z4lYa4CCIoyzUCwSvQ39HTpFL Sq47fm3gCTg96uJTI4p7S0fTlyUZ7tYrmzr0iwq+6x6gnGrlNF0MShapIfqr+cLO ruhiQ3gXk/jQHhm3SwJg1IkhcltSeS6kaKjdBEY3kZdJjB4LNuXWvyDd26JvBmSO 3437WbrFa8uBp4hGMIPqGSy8uyoZkycbJIS2xtd8wy9jcVPJwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO8VOEoPhN6nPCIcgECKcOEzubiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NDJkYmYtM2U4NC0z NWNhLWI4ZWMtZWU3MmVmNDJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2TYEDP60QHvSnPb0C8Pi5NPOsdyINNWADImInXs8IFnPDYpMw2 xLI1ttL3cRDQ/3kKGeDU3Ap5IRzJvHavsn/hIm9ZkDVREXynn5fzAb8VTs7LT/PK 91doh2Trnvcrx+FOQ1xJwCu9uDhHjKOUHs9FUK/R0nzeqeWtWLg+oDVXRpRZKwVa 6CgZ1kBZ15pm7Y68anEiTzZIE0CiUXIv1D1VTKFrSQt+IB8ANWcQg2VBIEoocE57 XXULcKW4fgLrS6lWxiYQCN5VYuGip0ZnKLUXmKNQB7OYRNPCe99EIu0YlPFKFb1u 3ZKU3mJNZwNmwjyzjQjKpPGuNGpZu4zqmYw= -----END CERTIFICATE-----Generated at Sun Apr 27 22:17:44 2025 by rpki-client