$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa File: 3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa (raw, json) Hash identifier: JE4g3vb07gnx9AJKN/tSb3c+STVSIHy4VWZJ+OwZZNE= Subject key identifier: C5:F7:61:7D:60:29:63:F0:D3:17:2B:FE:32:B5:9E:AA:8E:1A:55:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21E0188C67A62E8F54D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 397198 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:01:88:c6:7a:62:e8:f5:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=87a45162-8cd3-4ea7-929f-03e2e7d8aa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:dc:b2:45:85:05:14:12:46:69:2e:b6:c1: 6c:dc:02:61:56:34:07:8c:81:b1:85:3c:ee:fc:bf: 17:81:8c:db:c4:60:82:b5:fb:2d:10:8e:a3:f5:9a: 6f:f9:db:78:5c:25:d5:82:8f:f5:c3:44:0e:59:9d: a4:3e:65:8a:d0:5a:f3:60:f0:ca:7a:40:c8:5f:52: 25:f1:e5:3e:d0:d0:14:0f:9e:3a:87:1e:f0:f1:b1: ba:b2:a2:25:d4:88:9e:77:d7:c0:9c:52:1e:a8:bb: 40:a6:35:5d:4a:85:6a:49:36:d3:aa:db:bc:de:f3: fd:ce:be:d9:f5:a2:e1:c8:f0:45:90:5a:98:f2:af: 2b:bd:3a:48:b0:1c:29:aa:1f:51:20:61:0e:0f:5e: 8f:54:aa:a2:ac:40:14:68:f6:56:cd:12:32:02:f8: ed:78:84:36:49:c5:fe:26:a7:76:8f:a2:00:b5:39: 93:a2:fd:45:23:6b:62:81:9f:ea:af:6b:f9:db:5b: f2:60:97:36:71:ef:d0:d1:19:1b:c0:49:62:af:6d: 1b:22:c0:ee:05:95:30:61:ad:46:e3:db:28:58:7e: e1:9a:b2:64:3e:56:4c:26:39:74:9e:e6:bc:0a:86: 28:a6:7e:91:77:e4:b1:07:13:7e:49:a0:c9:4a:ad: 59:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F7:61:7D:60:29:63:F0:D3:17:2B:FE:32:B5:9E:AA:8E:1A:55:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9d:2a:d9:04:52:7c:a2:33:22:87:dd:c2:58:c9:47:02:51: 98:16:e9:72:90:52:b5:89:06:01:be:79:3d:a1:d5:20:fc:cd: ed:3a:6a:d4:c4:cb:dd:ba:ce:09:a4:72:5a:89:7e:60:e9:06: e9:26:04:12:55:e2:5a:51:2d:70:0f:b7:b1:9b:cd:4f:65:65: 3a:f8:37:54:c2:30:de:31:23:c8:34:b9:30:1d:ee:24:8b:2f: d3:1e:f6:ef:43:44:d4:1c:6f:fe:36:35:20:23:1d:6d:b1:d4: 3f:eb:1d:ed:d2:f4:b6:9e:33:c2:f3:cc:90:34:34:3c:5c:c0: bf:00:7a:d3:8a:2f:ba:93:f5:a5:7e:01:7b:87:85:98:28:28: 06:a9:54:76:d7:6f:59:5b:b4:23:d0:1c:34:fd:8c:78:31:2c: ba:ac:9b:9a:6c:50:46:c2:83:a6:d9:9d:11:a5:b2:5e:25:a1: 4b:2b:b5:41:30:df:5b:62:f4:ad:f2:2e:68:4c:d3:6d:fc:85: 37:4f:b9:62:32:23:51:81:6d:4e:cd:3f:20:d9:a7:5c:f1:d8: 7f:cd:a1:96:b5:4b:99:41:cc:43:56:2e:95:56:ec:bf:2d:e3: dc:a0:b4:e5:23:b1:1b:ff:8f:93:97:59:56:a2:42:15:b4:85: b7:a2:97:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh4BiMZ6Yuj1TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk ODdhNDUxNjItOGNkMy00ZWE3LTkyOWYtMDNlMmU3ZDhhYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9jcskWFBRQSRmkutsFs3AJhVjQHjIGxhTzu /L8XgYzbxGCCtfstEI6j9Zpv+dt4XCXVgo/1w0QOWZ2kPmWK0FrzYPDKekDIX1Il 8eU+0NAUD546hx7w8bG6sqIl1Iied9fAnFIeqLtApjVdSoVqSTbTqtu83vP9zr7Z 9aLhyPBFkFqY8q8rvTpIsBwpqh9RIGEOD16PVKqirEAUaPZWzRIyAvjteIQ2ScX+ Jqd2j6IAtTmTov1FI2tigZ/qr2v521vyYJc2ce/Q0RkbwElir20bIsDuBZUwYa1G 49soWH7hmrJkPlZMJjl0nua8CoYopn6Rd+SxBxN+SaDJSq1ZrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMX3YX1gKWPw0xcr/jK1nqqOGlWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U5ZmJhNGEtZWQwZS0z ZjZmLThlYTctMWQ0NDlhZGViMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+dKtkEUnyiMyKH3cJYyUcCUZgW6XKQUrWJBgG+eT2h1SD8ze06 atTEy926zgmkclqJfmDpBukmBBJV4lpRLXAPt7GbzU9lZTr4N1TCMN4xI8g0uTAd 7iSLL9Me9u9DRNQcb/42NSAjHW2x1D/rHe3S9LaeM8LzzJA0NDxcwL8AetOKL7qT 9aV+AXuHhZgoKAapVHbXb1lbtCPQHDT9jHgxLLqsm5psUEbCg6bZnRGlsl4loUsr tUEw31ti9K3yLmhM0238hTdPuWIyI1GBbU7NPyDZp1zx2H/NoZa1S5lBzENWLpVW 7L8t49ygtOUjsRv/j5OXWVaiQhW0hbeil1g= -----END CERTIFICATE-----Generated at Mon Apr 28 00:34:25 2025 by rpki-client