$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa File: 4044adc4-038e-35a2-8aca-cfea792550c3.roa (raw, json) Hash identifier: iTEG/8ALbSUMA1yBmW3nTOk8fQ399gPUK1GAUFVieLE= Subject key identifier: 5F:B6:90:FF:C3:B3:4B:96:4E:29:76:55:54:9D:97:4E:7F:F6:27:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E385A1609924B6052F1E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 36618 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:a1:60:99:24:b6:05:2f:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=94c63bbe-ec76-42a5-8612-4839bc3bdaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8a:b6:60:34:df:2d:e2:44:73:a0:34:90:ef: 78:9b:09:b9:89:03:18:2c:5c:3f:43:cc:a0:5b:be: 59:74:db:b2:24:c9:08:f2:68:c4:30:51:0c:8e:d3: de:36:16:47:92:17:73:cb:6c:20:90:6f:2c:d0:7e: 17:6f:5a:07:da:5e:ce:2e:b2:8f:dc:4b:80:28:fa: 23:6d:21:1f:43:ef:36:46:3a:39:e8:9c:38:4a:86: 9d:4d:87:11:9a:dd:49:5d:f4:10:ea:dc:f7:32:03: c6:a4:de:8a:89:8c:67:be:de:5a:2d:67:95:0a:ad: 1e:c1:b2:04:06:47:78:b3:a3:7f:a3:4f:f1:e4:17: 8b:35:ce:ee:23:48:9f:7a:53:6e:ef:73:2e:67:cd: b3:31:a7:46:ce:26:11:74:68:c3:70:a1:9b:d1:9a: aa:ba:a2:bb:73:73:bf:15:2a:1c:0b:26:37:e9:41: f5:a0:41:65:b7:f7:b4:86:a5:aa:14:c9:24:eb:49: 9b:8e:e6:da:b3:14:cd:06:e5:8d:fb:0e:18:31:ca: 7d:61:f2:d2:e3:c5:7c:05:18:88:3f:ac:7a:48:80: fa:87:5b:6c:e5:ef:f4:26:28:1f:df:a2:51:7d:b4: 21:78:63:31:ec:67:2e:d3:93:a5:92:dc:8e:dc:42: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:90:FF:C3:B3:4B:96:4E:29:76:55:54:9D:97:4E:7F:F6:27:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:db:e0:ed:70:bc:d8:03:ae:57:a0:fc:72:52:46:56:e2:61: 12:a7:8a:fc:32:38:16:55:63:95:85:8e:ff:4e:02:95:5d:ec: b8:fc:91:75:db:ec:15:ee:75:af:b4:53:bf:9f:97:45:b6:3d: b8:c8:69:dc:9d:88:60:98:95:00:14:6b:a7:6b:8e:65:3a:2e: 00:19:05:42:84:cb:d6:5a:89:0b:34:45:91:72:80:26:39:73: 06:05:13:18:3b:fe:50:17:28:4f:06:b5:46:f6:54:5a:4a:4c: 84:72:d9:5f:3c:35:44:64:20:fd:d4:6d:79:a8:98:f3:11:0d: 7b:34:0b:ad:ca:c0:d6:76:3c:2b:05:04:75:c0:fe:28:04:f6: 27:0f:66:d1:6e:e8:25:00:ad:92:7c:8e:68:0b:c5:f1:38:98: 25:33:d0:c2:86:29:4f:2a:c4:4b:84:94:6c:0a:64:4c:66:a1: 29:2b:7b:c3:70:3a:e0:72:c8:31:d1:71:83:db:07:b3:05:f4: bb:c1:da:01:02:9c:a2:02:f6:c8:e8:99:89:d7:0c:c9:28:83: e7:4c:8e:ed:45:77:06:fa:9e:2b:62:46:20:61:88:21:d9:76: b2:6d:35:34:4d:1b:3e:e8:fc:6a:ff:6a:8c:4e:a4:e9:fb:32: 59:4b:9b:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44WhYJkktgUvHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk OTRjNjNiYmUtZWM3Ni00MmE1LTg2MTItNDgzOWJjM2JkYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIq2YDTfLeJEc6A0kO94mwm5iQMYLFw/Q8yg W75ZdNuyJMkI8mjEMFEMjtPeNhZHkhdzy2wgkG8s0H4Xb1oH2l7OLrKP3EuAKPoj bSEfQ+82Rjo56Jw4SoadTYcRmt1JXfQQ6tz3MgPGpN6KiYxnvt5aLWeVCq0ewbIE Bkd4s6N/o0/x5BeLNc7uI0ifelNu73MuZ82zMadGziYRdGjDcKGb0ZqquqK7c3O/ FSocCyY36UH1oEFlt/e0hqWqFMkk60mbjubasxTNBuWN+w4YMcp9YfLS48V8BRiI P6x6SID6h1ts5e/0Jigf36JRfbQheGMx7Gcu05OlktyO3EK+pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF+2kP/Ds0uWTil2VVSdl05/9if6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA0NGFkYzQtMDM4ZS0z NWEyLThhY2EtY2ZlYTc5MjU1MGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvb4O1wvNgDrleg/HJSRlbiYRKnivwyOBZVY5WFjv9OApVd7Lj8 kXXb7BXuda+0U7+fl0W2PbjIadydiGCYlQAUa6drjmU6LgAZBUKEy9ZaiQs0RZFy gCY5cwYFExg7/lAXKE8GtUb2VFpKTIRy2V88NURkIP3UbXmomPMRDXs0C63KwNZ2 PCsFBHXA/igE9icPZtFu6CUArZJ8jmgLxfE4mCUz0MKGKU8qxEuElGwKZExmoSkr e8NwOuByyDHRcYPbB7MF9LvB2gECnKIC9sjomYnXDMkog+dMju1Fdwb6nitiRiBh iCHZdrJtNTRNGz7o/Gr/aoxOpOn7MllLmyk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:45:25 2025 by rpki-client