$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa File: 2dd55a0f-7178-33d2-a173-746a78dd0360.roa (raw, json) Hash identifier: YEeumcmvvUNA1pznFGg3ME9iyoMR4yQY4+zQl2OZ4EU= Subject key identifier: 71:B6:F2:7F:82:05:23:B0:6D:4A:A3:3F:EB:36:71:1A:85:4F:D7:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38384E1F387E35AA39E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396567 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:83:84:e1:f3:87:e3:5a:a3:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=376deec3-3673-44a7-b264-949c162044ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:3a:f3:1b:5b:f6:04:e3:78:c7:91:0f:4e: da:8d:65:24:2e:40:52:4d:30:a2:b7:fd:06:28:34: d7:6f:64:1f:81:54:76:87:74:57:96:7d:18:ad:bf: eb:a8:f9:b4:e6:c1:ba:e8:ff:07:87:68:cd:1f:81: 51:2e:13:b3:56:b1:3d:ef:27:75:23:87:29:58:3f: 28:8c:3a:0e:56:98:58:e9:21:ff:8f:28:8b:0d:6c: a4:39:2a:2a:e3:10:ee:ed:56:76:e7:13:0e:f4:9c: 2c:1c:27:f8:98:35:82:1d:75:40:c7:42:0b:04:76: 17:36:7e:0e:ed:0d:f4:6a:68:83:d3:51:49:89:67: f1:20:e4:f0:b9:57:59:1e:94:d2:b6:49:77:0d:57: 2c:6f:39:41:10:9b:19:7e:9c:b4:16:5b:b4:be:53: a1:82:27:15:0b:c4:4f:15:77:b3:e4:28:d5:32:7b: a4:4e:91:e1:c4:d3:ba:55:6b:a6:f6:41:26:b6:2d: 05:f1:7b:c3:46:4d:d5:15:39:cb:14:bb:a9:8f:0b: 6e:a9:2f:a0:92:a5:84:1e:3e:be:74:4e:51:af:23: 32:be:80:8b:fc:ba:cf:b2:0e:bd:09:99:5c:23:92: 60:aa:07:c4:f3:f9:95:aa:e7:d3:62:9e:52:2f:ec: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B6:F2:7F:82:05:23:B0:6D:4A:A3:3F:EB:36:71:1A:85:4F:D7:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1c:e4:e1:90:ef:2e:ff:c7:ce:ff:24:91:00:6f:08:bc:38: d1:bb:08:c1:ae:7e:5e:28:6c:75:45:ad:3a:27:89:93:1a:3e: 17:ce:91:dc:3c:13:7e:86:c6:9f:61:cb:12:65:70:3a:19:49: 7c:91:b6:4b:0c:b6:c4:54:bf:06:e9:ed:9d:75:86:c1:c3:63: 56:fa:d2:21:14:a6:ba:a2:8a:b1:d7:b0:f2:35:49:49:86:bf: 33:a6:69:c3:e5:17:32:b2:32:08:36:63:d7:70:ec:8a:ed:88: c1:69:51:cb:d1:30:91:0f:bd:01:88:c7:c5:f3:11:26:14:41: fa:1f:dc:ca:9c:62:8d:27:25:9c:b4:20:d3:ac:57:f4:93:42: 1d:ff:14:6d:27:f6:c4:ec:c2:b3:46:f3:70:60:8c:58:b0:b1: 1e:2a:3b:64:6d:90:2b:f3:ab:80:d8:29:5d:be:61:f8:d1:ea: 1e:5d:00:b3:37:78:4b:fd:5f:7f:13:f3:78:cd:68:83:67:23: e6:da:cf:b7:fb:a3:21:3c:13:0c:a6:e6:26:68:6a:c3:c3:1c: 89:fc:db:9f:1f:d5:7f:09:61:b8:85:83:a7:b2:91:6f:42:c0: fb:8c:c9:dd:a3:ed:b1:7f:3e:37:27:fb:c3:3c:a6:71:01:cf: ac:e5:2c:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44OE4fOH41qjngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk Mzc2ZGVlYzMtMzY3My00NGE3LWIyNjQtOTQ5YzE2MjA0NGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRo68xtb9gTjeMeRD07ajWUkLkBSTTCit/0G KDTXb2QfgVR2h3RXln0Yrb/rqPm05sG66P8Hh2jNH4FRLhOzVrE97yd1I4cpWD8o jDoOVphY6SH/jyiLDWykOSoq4xDu7VZ25xMO9JwsHCf4mDWCHXVAx0ILBHYXNn4O 7Q30amiD01FJiWfxIOTwuVdZHpTStkl3DVcsbzlBEJsZfpy0Flu0vlOhgicVC8RP FXez5CjVMnukTpHhxNO6VWum9kEmti0F8XvDRk3VFTnLFLupjwtuqS+gkqWEHj6+ dE5RryMyvoCL/LrPsg69CZlcI5JgqgfE8/mVqufTYp5SL+xyfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHG28n+CBSOwbUqjP+s2cRqFT9fgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRkNTVhMGYtNzE3OC0z M2QyLWExNzMtNzQ2YTc4ZGQwMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHAc5OGQ7y7/x87/JJEAbwi8ONG7CMGufl4obHVFrToniZMaPhfO kdw8E36Gxp9hyxJlcDoZSXyRtksMtsRUvwbp7Z11hsHDY1b60iEUprqiirHXsPI1 SUmGvzOmacPlFzKyMgg2Y9dw7IrtiMFpUcvRMJEPvQGIx8XzESYUQfof3MqcYo0n JZy0INOsV/STQh3/FG0n9sTswrNG83BgjFiwsR4qO2RtkCvzq4DYKV2+YfjR6h5d ALM3eEv9X38T83jNaINnI+baz7f7oyE8Ewym5iZoasPDHIn8258f1X8JYbiFg6ey kW9CwPuMyd2j7bF/Pjcn+8M8pnEBz6zlLIo= -----END CERTIFICATE-----Generated at Mon Apr 28 06:43:17 2025 by rpki-client