$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa File: 2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa (raw, json) Hash identifier: XIu97o2lwQnu1/QHMQGdKY4xYIfo6NP7pOq3lWDbfhw= Subject key identifier: 74:82:0C:99:3C:6C:01:2A:DD:AE:1D:E2:CF:27:2A:BC:70:E1:73:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E389971A2E3E3274A8CFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 36630 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:97:1a:2e:3e:32:74:a8:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=6db6e27a-ec02-4127-82d0-743aa0f944d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:eb:23:2e:be:68:15:2c:3d:80:3f:67:c9:07: 21:26:af:0a:70:7e:b9:67:32:8b:9f:f1:f7:d6:8c: 01:48:0b:19:b2:72:f7:1e:47:c0:3b:10:11:72:e0: fb:bb:ff:50:72:d0:f8:7f:3b:ff:3c:3f:e5:8d:40: 26:77:32:2c:cc:22:60:a1:8e:47:64:21:c8:85:b3: b8:02:95:08:5b:0d:7c:bf:2d:72:b9:c0:0f:c0:1f: 85:47:63:45:13:18:41:31:94:c9:97:19:53:7e:9e: 0c:8c:c6:1c:aa:ee:bb:fb:d5:29:0b:ee:94:5d:fa: 91:7c:3e:4f:a7:eb:62:d4:81:bf:74:0d:80:6c:23: 3c:02:72:5a:8b:d1:22:d4:aa:ae:8f:bb:36:59:b0: 6e:c7:89:0f:8a:23:23:5e:87:93:ae:c6:97:7b:e1: 41:4d:e3:79:95:27:ba:eb:f0:c2:57:f4:4c:af:1d: 44:91:20:38:0b:39:01:16:68:11:b0:76:6f:c6:0c: 11:3a:27:cf:a1:cb:3c:06:ff:e8:0a:f6:8c:c3:b7: 52:a3:ed:ee:54:2f:86:f4:12:e7:74:4e:af:11:b2: 70:66:4b:41:da:cd:92:4a:18:34:7b:a8:ec:a0:a3: a3:3c:a0:bc:41:47:a6:76:eb:6e:1c:27:22:6a:ce: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:82:0C:99:3C:6C:01:2A:DD:AE:1D:E2:CF:27:2A:BC:70:E1:73:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0d:d7:9b:4b:0d:42:72:49:4b:75:f9:17:9a:12:15:84:9c: 6c:64:db:fb:a6:e2:be:a8:da:e8:fb:95:3c:2b:7b:fb:17:06: 40:07:a5:5b:f5:d3:68:84:66:1b:b1:ff:fc:74:1c:b6:38:25: e9:7d:dd:76:d5:72:e5:5b:7c:09:47:87:a1:72:b4:db:e5:7a: 93:e2:ad:63:14:c1:72:8e:db:f6:51:70:91:5b:fa:6f:00:10: ae:b2:33:b6:59:d0:d2:39:e9:69:a6:51:ef:19:d3:d1:f5:1f: a6:7d:e2:1f:6a:71:cd:1a:6b:e0:1d:f2:29:7d:d3:ac:2f:08: 4c:88:2e:d0:39:6b:79:54:62:37:10:41:4f:99:0b:ea:e9:8a: 18:4d:4d:54:74:9e:88:32:44:7e:c2:7f:50:e9:5e:3f:0a:be: 8a:66:4d:03:21:59:12:34:a8:6d:fe:3b:0c:ec:bd:86:63:d1: a7:46:b9:cf:88:a1:f6:47:f3:e6:18:ca:a4:e2:38:fa:16:19: 91:f8:3e:1e:d0:c7:49:00:95:5c:40:db:00:54:95:a4:40:b8: dd:0c:70:50:70:c5:26:5b:8e:09:f3:e9:8e:b7:32:47:73:b5: c2:ba:61:0b:54:4e:59:ab:1b:0a:8d:f3:f3:cf:7e:b5:3f:85: c6:a0:2a:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44mXGi4+MnSoz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk NmRiNmUyN2EtZWMwMi00MTI3LTgyZDAtNzQzYWEwZjk0NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhusjLr5oFSw9gD9nyQchJq8KcH65ZzKLn/H3 1owBSAsZsnL3HkfAOxARcuD7u/9QctD4fzv/PD/ljUAmdzIszCJgoY5HZCHIhbO4 ApUIWw18vy1yucAPwB+FR2NFExhBMZTJlxlTfp4MjMYcqu67+9UpC+6UXfqRfD5P p+ti1IG/dA2AbCM8AnJai9Ei1Kquj7s2WbBux4kPiiMjXoeTrsaXe+FBTeN5lSe6 6/DCV/RMrx1EkSA4CzkBFmgRsHZvxgwROifPocs8Bv/oCvaMw7dSo+3uVC+G9BLn dE6vEbJwZktB2s2SShg0e6jsoKOjPKC8QUemdutuHCcias6a+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHSCDJk8bAEq3a4d4s8nKrxw4XNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRjZjgyNmMtZDdkZS0z MWJiLTgwZDQtMTA4OGE2ZjBjMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUN15tLDUJySUt1+ReaEhWEnGxk2/um4r6o2uj7lTwre/sXBkAH pVv102iEZhux//x0HLY4Jel93XbVcuVbfAlHh6FytNvlepPirWMUwXKO2/ZRcJFb +m8AEK6yM7ZZ0NI56WmmUe8Z09H1H6Z94h9qcc0aa+Ad8il906wvCEyILtA5a3lU YjcQQU+ZC+rpihhNTVR0nogyRH7Cf1DpXj8KvopmTQMhWRI0qG3+OwzsvYZj0adG uc+IofZH8+YYyqTiOPoWGZH4Ph7Qx0kAlVxA2wBUlaRAuN0McFBwxSZbjgnz6Y63 MkdztcK6YQtUTlmrGwqN8/PPfrU/hcagKpM= -----END CERTIFICATE-----Generated at Sun Apr 27 17:52:29 2025 by rpki-client