$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa File: 29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa (raw, json) Hash identifier: nCZPLKQbrk7R8Q9BYUArKIdzWnitJY+o2CkyNBlTgMU= Subject key identifier: 14:B3:C7:6E:81:CB:CD:49:C7:2A:33:FC:DF:32:91:85:04:34:60:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E383A71264ADD7AA960E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396562 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:83:a7:12:64:ad:d7:aa:96:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=463734f3-caa7-4efa-9f0b-ccc189881cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:10:19:fd:45:b7:29:f3:38:b1:d4:5f:07: 0f:a4:e4:bf:a7:43:6d:3d:90:61:79:17:95:12:80: 58:10:ae:78:1c:91:d8:04:95:4b:74:1d:78:18:d2: cf:51:20:ab:4a:9b:e1:5a:67:1e:ca:2a:b5:b1:4e: cb:d8:04:5f:f8:18:ba:8d:55:77:d9:0a:94:79:30: 22:d6:36:de:90:b6:79:81:43:72:cc:7c:3c:ed:52: e3:16:4d:ca:b9:60:b1:d4:17:ed:d3:36:c6:12:80: 26:54:31:99:97:35:fd:2d:53:c2:69:b1:c7:9f:0d: 49:76:29:1e:d5:47:5c:80:b1:0c:50:e7:58:42:df: 29:5e:02:b2:42:b1:e3:e5:63:74:fa:86:b4:80:af: cb:0e:3c:22:10:e3:94:cb:2d:80:36:cf:c3:91:e4: 0f:f9:3b:ca:14:9d:0d:78:0e:63:c9:2d:55:6b:29: ef:32:9e:9b:39:d1:0c:cc:e1:02:5c:65:7c:94:de: e0:f8:54:bd:78:54:1a:67:68:60:bf:a6:34:59:b9: 3b:aa:69:e5:65:cd:29:4d:31:b6:6d:a3:70:bf:92: b6:9d:ac:d7:21:49:9b:4c:cc:15:f4:62:d8:6a:38: b6:74:84:63:ac:3a:65:84:ab:1f:e4:4f:f6:3a:e7: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B3:C7:6E:81:CB:CD:49:C7:2A:33:FC:DF:32:91:85:04:34:60:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1e:eb:14:5f:ae:75:11:3e:16:8b:13:a4:f9:e9:1c:36:b4: fe:15:aa:70:5a:f6:ce:48:ac:ea:dc:4a:85:c2:d9:0d:56:8b: 2f:1f:49:fb:92:ad:ac:de:ea:96:ad:0b:fe:b3:3b:c9:af:a5: 90:d6:88:74:70:db:ea:bf:7e:43:88:6c:80:90:e2:51:5a:4e: 76:27:61:61:81:13:bf:f4:c9:c7:e5:ac:83:6b:6d:3e:12:e7: ac:a3:cf:2b:9b:39:a5:cb:ee:37:e4:fa:3d:fa:ef:2e:48:cf: c8:92:c7:ba:2d:51:1c:87:e9:2e:0c:fc:ec:9b:77:84:6b:f9: 77:77:00:74:4b:f6:07:e2:c1:e3:cd:22:ec:44:b3:fc:26:aa: a4:10:dd:35:39:e7:86:9d:0b:e1:f0:4f:17:bb:81:d7:70:3f: 00:a4:56:49:53:3c:dc:f9:f1:db:78:f7:06:fc:3c:96:48:38: 37:5c:fa:10:0b:5d:c1:0a:5a:0f:51:0e:1e:79:c3:5d:63:9d: d9:75:dc:f2:10:2e:77:00:5b:ed:33:cf:cb:af:77:8d:c1:44: a5:ff:d0:26:e7:00:95:5a:86:42:f0:be:7c:4e:83:be:48:b4: 29:39:61:c0:05:d6:97:77:95:13:6f:a7:ce:ba:fe:be:2d:f4: 8d:44:21:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44OnEmSt16qWDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk NDYzNzM0ZjMtY2FhNy00ZWZhLTlmMGItY2NjMTg5ODgxY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxQQGf1FtynzOLHUXwcPpOS/p0NtPZBheReV EoBYEK54HJHYBJVLdB14GNLPUSCrSpvhWmceyiq1sU7L2ARf+Bi6jVV32QqUeTAi 1jbekLZ5gUNyzHw87VLjFk3KuWCx1Bft0zbGEoAmVDGZlzX9LVPCabHHnw1Jdike 1UdcgLEMUOdYQt8pXgKyQrHj5WN0+oa0gK/LDjwiEOOUyy2ANs/DkeQP+TvKFJ0N eA5jyS1VaynvMp6bOdEMzOECXGV8lN7g+FS9eFQaZ2hgv6Y0Wbk7qmnlZc0pTTG2 baNwv5K2nazXIUmbTMwV9GLYaji2dIRjrDplhKsf5E/2Oue7WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSzx26By81Jxyoz/N8ykYUENGBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjlkM2YwNmMtNDkwYi0z MTAwLThjYjItMWY1OGFkYWE5MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUe6xRfrnURPhaLE6T56Rw2tP4VqnBa9s5IrOrcSoXC2Q1Wiy8f SfuSraze6patC/6zO8mvpZDWiHRw2+q/fkOIbICQ4lFaTnYnYWGBE7/0ycflrINr bT4S56yjzyubOaXL7jfk+j367y5Iz8iSx7otURyH6S4M/Oybd4Rr+Xd3AHRL9gfi wePNIuxEs/wmqqQQ3TU554adC+HwTxe7gddwPwCkVklTPNz58dt49wb8PJZIODdc +hALXcEKWg9RDh55w11jndl13PIQLncAW+0zz8uvd43BRKX/0CbnAJVahkLwvnxO g75ItCk5YcAF1pd3lRNvp866/r4t9I1EIaQ= -----END CERTIFICATE-----Generated at Sun Apr 27 23:25:30 2025 by rpki-client