$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa File: 2fe844bc-d58b-357d-8a03-037039e894bd.roa (raw, json) Hash identifier: /WC4tNv78+3uvirArbPZiA/3jvFZdTtx8pEh15RLDHk= Subject key identifier: A1:EA:6A:B5:48:02:85:FF:40:8F:C9:6E:08:32:17:5A:44:88:D6:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849ED4FD844958C0F5DDAF79580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 7342 IP address blocks: 2620:74:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d8:44:95:8c:0f:5d:da:f7:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=ceaf526f-3fb3-43e3-a625-e2004e8f4439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0c:d7:da:5c:55:a8:35:5d:03:65:2f:81:f1: 6c:59:66:d9:92:43:54:b9:87:f7:dc:8e:57:b9:c8: de:2b:6d:a1:7f:d6:9b:be:77:7a:2e:c8:a8:07:27: 79:00:1e:9b:9b:07:1c:7f:a4:6a:b3:24:9f:8d:71: d0:b8:8f:99:dd:d3:6d:71:a6:5c:af:60:f0:98:45: 33:a4:f4:43:a0:c7:ce:bb:a6:cc:62:30:2f:d6:ff: 87:ff:fc:40:29:c0:60:bb:b1:ff:01:18:71:55:f0: c5:38:77:6a:2b:ca:80:d8:11:36:94:5a:02:40:c9: 95:3c:bc:df:66:a0:39:cf:fd:42:c5:0d:a5:c4:a7: a7:60:79:cd:8f:cf:e7:42:1d:29:d5:5e:5f:82:13: 07:5c:f5:1b:f3:05:1d:12:2c:9c:f5:d2:26:4f:f3: ba:53:3c:f5:9b:7d:18:df:e3:fa:79:87:94:84:45: d7:4b:52:2f:6f:1a:43:4e:f1:a0:42:b7:36:a4:85: 97:91:ee:19:45:9a:0d:88:8e:a7:8a:84:f4:99:ac: c2:ad:56:02:45:14:07:67:02:ec:b4:11:56:c9:f7: b4:3c:45:06:35:3a:bc:78:cf:d4:e5:85:f1:40:bb: 15:10:ed:e7:c8:be:44:fe:3a:d3:04:9f:06:34:09: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EA:6A:B5:48:02:85:FF:40:8F:C9:6E:08:32:17:5A:44:88:D6:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cd:63:9b:16:5f:21:50:5b:cd:a3:d7:62:1c:ef:05:c5:6a: 2a:e0:c3:4c:67:26:5c:ab:b7:54:47:d9:23:47:d2:7f:f9:d3: a7:99:95:21:38:60:3b:93:ed:ca:20:e3:34:d7:a6:04:79:da: 9b:f2:e3:29:eb:0c:bb:6a:d2:9a:70:3d:55:87:23:08:7e:93: 56:f1:b6:42:60:59:87:d7:38:2b:8a:84:70:b2:45:fc:37:98: 83:81:db:f5:97:70:75:4a:fd:fb:ae:7b:9b:cc:c1:22:a6:5a: a5:90:e8:b0:35:6b:49:02:cf:a9:aa:a4:22:27:50:07:c0:ed: 48:71:a2:25:d5:00:ba:6a:be:2d:2a:50:ce:26:3e:c3:97:16: 1b:a1:08:ea:0b:3e:a7:e7:3b:40:a4:d1:42:62:de:b4:77:4d: 2a:35:93:0a:fc:e0:63:99:f0:a1:52:fd:17:89:25:cb:da:ef: 7b:dc:01:81:ed:c8:c0:99:82:e7:7b:ba:28:1e:96:c1:85:ee: 1a:6c:dc:84:80:89:49:5b:97:02:72:15:3c:0b:10:32:ff:49: ee:ba:01:cd:ac:d0:35:7a:4f:9c:4f:56:b8:da:1d:31:5c:ff: 88:87:72:e0:07:53:70:db:52:62:a8:25:e9:35:7d:ee:52:2d: 18:a7:6d:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEntT9hElYwPXdr3lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk Y2VhZjUyNmYtM2ZiMy00M2UzLWE2MjUtZTIwMDRlOGY0NDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQzX2lxVqDVdA2UvgfFsWWbZkkNUuYf33I5X ucjeK22hf9abvnd6LsioByd5AB6bmwccf6RqsySfjXHQuI+Z3dNtcaZcr2DwmEUz pPRDoMfOu6bMYjAv1v+H//xAKcBgu7H/ARhxVfDFOHdqK8qA2BE2lFoCQMmVPLzf ZqA5z/1CxQ2lxKenYHnNj8/nQh0p1V5fghMHXPUb8wUdEiyc9dImT/O6Uzz1m30Y 3+P6eYeUhEXXS1IvbxpDTvGgQrc2pIWXke4ZRZoNiI6nioT0mazCrVYCRRQHZwLs tBFWyfe0PEUGNTq8eM/U5YXxQLsVEO3nyL5E/jrTBJ8GNAnsqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHqarVIAoX/QI/JbggyF1pEiNbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZlODQ0YmMtZDU4Yi0z NTdkLThhMDMtMDM3MDM5ZTg5NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHNY5sWXyFQW82j12Ic7wXFairgw0xnJlyrt1RH2SNH0n/506eZ lSE4YDuT7cog4zTXpgR52pvy4ynrDLtq0ppwPVWHIwh+k1bxtkJgWYfXOCuKhHCy Rfw3mIOB2/WXcHVK/fuue5vMwSKmWqWQ6LA1a0kCz6mqpCInUAfA7UhxoiXVALpq vi0qUM4mPsOXFhuhCOoLPqfnO0Ck0UJi3rR3TSo1kwr84GOZ8KFS/ReJJcva73vc AYHtyMCZgud7uigelsGF7hps3ISAiUlblwJyFTwLEDL/Se66Ac2s0DV6T5xPVrja HTFc/4iHcuAHU3DbUmKoJek1fe5SLRinbWo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:22:53 2025 by rpki-client