$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa File: 2dc5c1b6-0ae9-388d-a815-6302292992c9.roa (raw, json) Hash identifier: pWPsBaPR7NwPHkfZ1ykx+FFQ4SpyeUGVGK2Ryw5PTXg= Subject key identifier: 8D:83:B4:B0:C9:F4:75:BB:FA:0B:71:09:DA:71:9F:1B:6A:78:7C:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21F1FC4A386F09EFD5A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 396613 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:1f:c4:a3:86:f0:9e:fd:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=2e6e1e8d-6e45-401e-83f7-9affab88354e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:df:59:d2:e5:c8:7a:5a:da:20:61:fa:92: f1:c6:db:e9:4a:92:17:fb:63:d5:d7:19:b6:c4:9a: 20:46:7c:58:27:f3:42:a4:d5:a9:54:77:82:6b:1e: 0f:71:50:83:88:e9:b8:fc:af:47:78:c2:e5:65:31: a7:e6:9c:9b:15:e3:1d:bf:9b:7a:88:ee:b4:f3:47: 71:92:58:22:9b:a9:25:85:ab:89:6c:ac:aa:08:23: aa:27:22:9a:04:1f:f7:68:7c:23:aa:de:d1:7b:5e: 4f:f3:ee:2a:01:bd:5b:5e:bc:61:33:7f:2d:7d:ca: dd:e3:97:e5:bf:d8:aa:f7:85:5d:1c:c2:9b:e0:ab: a0:60:15:41:12:81:39:ae:2a:a8:14:2b:bd:a6:30: 3b:1a:4f:6c:66:f4:d8:f8:90:6f:fe:5d:cb:6e:3a: ce:c2:2d:b4:2c:e4:fb:f2:bd:cf:e0:eb:e7:d7:46: 05:9c:63:ff:1e:20:40:b0:6d:44:c6:17:da:28:d6: 45:1e:15:98:e3:69:f0:00:b7:e2:8a:ec:66:73:20: cb:93:cd:3d:fd:90:a5:da:c5:42:d4:31:d6:f9:b7: e5:94:20:63:9d:71:1f:52:f2:6d:ee:a6:d9:c9:b0: 05:bb:29:9e:a3:f5:5d:c1:1b:55:27:fb:5e:78:76: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:B4:B0:C9:F4:75:BB:FA:0B:71:09:DA:71:9F:1B:6A:78:7C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c3:21:64:e6:04:0e:6e:3a:83:96:90:af:e9:64:fd:f3:cd: a6:71:28:9d:63:bd:56:ca:38:84:cc:1c:7c:e1:4b:a8:eb:64: 4a:1c:af:c0:2b:ec:d0:93:e7:7c:b3:74:ed:16:5f:dc:9f:8a: 27:2b:f3:a2:f8:93:48:c6:7d:b1:67:c5:22:49:a0:39:ef:51: 9c:88:67:60:c7:06:e2:22:ad:aa:03:8a:0c:bb:89:47:fd:ba: 57:a2:ee:3d:e4:98:2c:a3:05:49:13:00:56:5f:46:fd:d8:79: 91:09:a0:6d:5b:59:6f:d3:47:ed:00:e5:16:9a:bf:4a:46:8a: 5a:f2:27:be:a8:fb:2c:e3:d8:e9:d2:b6:7f:dc:ba:b8:f4:69: 3b:f4:58:97:52:01:9c:79:f6:97:a8:fd:96:3b:67:65:47:b7: 11:81:cf:05:e4:4f:1d:31:2c:d6:29:05:0a:97:3d:91:14:cf: 14:dc:98:1f:a5:19:2f:ce:0a:f5:1d:58:58:8d:4f:d3:e9:f3: 0c:17:2b:39:06:31:bf:db:fe:bc:6d:8d:93:30:cb:fd:60:b6: 3a:09:05:4a:34:d2:86:c5:59:cd:76:e5:a0:df:95:51:eb:5f: b8:fe:af:87:c2:4b:ba:bb:ae:4b:eb:37:2f:60:e2:98:2b:d6: 7b:65:e3:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh8fxKOG8J79WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk MmU2ZTFlOGQtNmU0NS00MDFlLTgzZjctOWFmZmFiODgzNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/jfWdLlyHpa2iBh+pLxxtvpSpIX+2PV1xm2 xJogRnxYJ/NCpNWpVHeCax4PcVCDiOm4/K9HeMLlZTGn5pybFeMdv5t6iO6080dx klgim6klhauJbKyqCCOqJyKaBB/3aHwjqt7Re15P8+4qAb1bXrxhM38tfcrd45fl v9iq94VdHMKb4KugYBVBEoE5riqoFCu9pjA7Gk9sZvTY+JBv/l3LbjrOwi20LOT7 8r3P4Ovn10YFnGP/HiBAsG1ExhfaKNZFHhWY42nwALfiiuxmcyDLk809/ZCl2sVC 1DHW+bfllCBjnXEfUvJt7qbZybAFuymeo/VdwRtVJ/teeHZKewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI2DtLDJ9HW7+gtxCdpxnxtqeHzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRjNWMxYjYtMGFlOS0z ODhkLWE4MTUtNjMwMjI5Mjk5MmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPDIWTmBA5uOoOWkK/pZP3zzaZxKJ1jvVbKOITMHHzhS6jrZEoc r8Ar7NCT53yzdO0WX9yfiicr86L4k0jGfbFnxSJJoDnvUZyIZ2DHBuIiraoDigy7 iUf9ulei7j3kmCyjBUkTAFZfRv3YeZEJoG1bWW/TR+0A5Raav0pGilryJ76o+yzj 2OnStn/curj0aTv0WJdSAZx59peo/ZY7Z2VHtxGBzwXkTx0xLNYpBQqXPZEUzxTc mB+lGS/OCvUdWFiNT9Pp8wwXKzkGMb/b/rxtjZMwy/1gtjoJBUo00obFWc125aDf lVHrX7j+r4fCS7q7rkvrNy9g4pgr1ntl4xk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:28 2025 by rpki-client