$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa File: 2b829613-62cd-3ed2-8ad3-7b36febc6235.roa (raw, json) Hash identifier: 5lh4OzDm6jdDmTPVWM3sIx7uvEdtcxs10IUnFJAKCSk= Subject key identifier: C4:19:D3:DE:AB:F4:53:4B:8B:9C:1D:9D:B2:B6:87:0C:D8:DD:E0:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3839638550B9A01153FB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396565 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:83:96:38:55:0b:9a:01:15:3f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=b442ac7d-8427-4058-a93b-09f869263a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c9:87:d6:b0:2b:f1:e1:99:b6:d1:6e:2e:a3: ad:77:aa:37:c5:0f:ea:86:44:f0:a9:08:21:22:34: 47:e4:96:83:75:6a:5c:db:35:59:54:03:27:26:65: 21:fc:b9:be:7b:79:de:6a:37:de:08:70:9d:b2:50: bd:6f:19:32:ab:b9:5a:74:f5:68:05:6b:1a:76:ef: 62:d4:91:50:b5:32:f3:1e:ae:a2:ea:ff:22:b2:c7: 85:1e:bb:2d:b5:eb:93:37:47:5b:21:1c:52:44:98: 99:fe:54:56:74:2f:76:58:f0:e9:41:13:9c:79:a2: 54:12:bd:46:ee:ca:4d:3b:82:d0:87:45:72:b0:91: fc:b5:5f:cc:e1:4e:11:15:93:38:1d:3e:a3:4e:d5: 48:b9:e7:df:3a:29:8b:31:6c:b1:0f:47:48:0d:42: 71:be:c9:d6:f8:0d:b5:4b:eb:41:26:3f:61:26:55: 28:f0:65:56:d5:41:80:32:73:15:4a:af:0b:bf:3c: e4:1d:87:1c:77:ed:97:49:d2:8b:bf:8c:d3:32:79: b0:44:3d:79:b2:e7:d5:d4:ca:ab:37:41:57:10:8a: 7c:09:d0:86:04:af:fc:41:2b:a1:38:48:eb:85:d8: 40:e4:ea:18:4b:09:ef:28:31:4e:9f:49:0e:1a:ea: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:19:D3:DE:AB:F4:53:4B:8B:9C:1D:9D:B2:B6:87:0C:D8:DD:E0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:48:88:6d:51:f2:b5:67:ef:77:63:7a:ae:26:e3:15:2c:f2: 98:fc:cd:e4:85:05:3b:50:bf:79:1f:ad:84:84:38:50:d2:80: ba:4d:f4:80:ee:9b:55:f1:6a:e9:c7:0b:82:dd:19:4a:bb:33: cc:02:03:47:75:9d:6b:73:c6:44:49:3e:c9:3b:6d:56:91:17: 14:60:5e:9e:a7:a8:f2:c4:a4:ff:67:b5:5a:3e:b4:8e:aa:a5: 56:57:35:d2:a8:09:62:9f:82:3f:fc:ef:4c:06:96:47:78:c3: 59:0f:64:3e:a9:5f:9e:86:4d:6a:83:d7:4b:ae:fc:82:71:76: 98:7e:09:4c:26:ca:f1:80:02:56:77:83:3d:18:d8:6e:e0:7c: f2:d4:77:5b:5b:f8:bc:a2:dc:c2:91:88:0c:0f:96:c0:c7:4f: 03:a7:f5:92:e7:9b:35:bc:0c:be:b8:d4:6d:13:7b:b9:95:7f: df:71:49:31:ef:74:55:8d:a3:6f:ec:98:ff:f0:16:f8:d8:90: 91:35:fa:0d:c3:a2:ec:ba:9c:5d:61:c7:48:1f:af:cb:02:37: f2:02:da:37:48:d3:13:3d:bf:23:61:3d:28:cf:44:ce:9f:00: a3:38:de:24:6d:3a:3f:82:e7:04:b4:39:dc:ec:9b:28:5e:19: 39:2a:79:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44OWOFULmgEVP7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk YjQ0MmFjN2QtODQyNy00MDU4LWE5M2ItMDlmODY5MjYzYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMmH1rAr8eGZttFuLqOtd6o3xQ/qhkTwqQgh IjRH5JaDdWpc2zVZVAMnJmUh/Lm+e3neajfeCHCdslC9bxkyq7ladPVoBWsadu9i 1JFQtTLzHq6i6v8isseFHrstteuTN0dbIRxSRJiZ/lRWdC92WPDpQROceaJUEr1G 7spNO4LQh0VysJH8tV/M4U4RFZM4HT6jTtVIueffOimLMWyxD0dIDUJxvsnW+A21 S+tBJj9hJlUo8GVW1UGAMnMVSq8LvzzkHYccd+2XSdKLv4zTMnmwRD15sufV1Mqr N0FXEIp8CdCGBK/8QSuhOEjrhdhA5OoYSwnvKDFOn0kOGupPZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMQZ096r9FNLi5wdnbK2hwzY3eCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4Mjk2MTMtNjJjZC0z ZWQyLThhZDMtN2IzNmZlYmM2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFIiG1R8rVn73djeq4m4xUs8pj8zeSFBTtQv3kfrYSEOFDSgLpN 9IDum1XxaunHC4LdGUq7M8wCA0d1nWtzxkRJPsk7bVaRFxRgXp6nqPLEpP9ntVo+ tI6qpVZXNdKoCWKfgj/870wGlkd4w1kPZD6pX56GTWqD10uu/IJxdph+CUwmyvGA AlZ3gz0Y2G7gfPLUd1tb+Lyi3MKRiAwPlsDHTwOn9ZLnmzW8DL641G0Te7mVf99x STHvdFWNo2/smP/wFvjYkJE1+g3Douy6nF1hx0gfr8sCN/IC2jdI0xM9vyNhPSjP RM6fAKM43iRtOj+C5wS0OdzsmyheGTkqeRE= -----END CERTIFICATE-----Generated at Sun Apr 27 20:16:59 2025 by rpki-client