$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa File: 5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa (raw, json) Hash identifier: CkG48xyswVJXxXafx6E35hhJbdMfihdm6IuvJnUFfC0= Subject key identifier: 6B:6E:A5:AF:B8:68:38:93:AC:D7:6F:00:72:05:55:9E:C7:40:89:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2205C504DB83B286743F2 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 36627 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:20:5c:50:4d:b8:3b:28:67:43:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=eda7241b-871a-44b5-81db-5b02769959da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:a1:07:fc:01:e4:2d:9e:0e:71:07:2c:11: 91:83:ef:71:aa:9c:bb:4d:bc:1c:17:2d:18:af:a6: 45:c9:7e:c6:ae:27:74:05:a2:e7:a9:9b:83:67:3e: 62:8c:26:8e:b4:8b:fd:88:5a:4f:fd:4f:0a:2e:5a: 23:9d:0e:ad:f4:07:23:45:f4:ed:87:2b:b6:3c:cc: 7b:a2:4b:a8:86:3e:af:4d:4c:1b:32:43:99:67:fe: c0:25:a9:8a:4d:b2:b4:9a:e8:7d:50:2f:86:3c:70: 79:4d:cb:87:d4:a2:53:22:64:d2:ef:76:c1:3e:b3: a7:ad:4f:65:cb:06:97:42:e5:f5:ad:2d:9b:ad:4e: dd:ed:7c:09:0a:9e:d0:3b:b1:6a:f9:0f:b7:6f:80: ae:1b:0b:f5:53:2d:97:01:22:ab:74:57:ca:82:24: 81:e9:65:46:36:2d:ba:a4:9d:e0:7a:15:27:95:6f: 1c:cc:e2:be:de:e5:63:0a:90:01:ff:30:b3:1d:08: a7:b7:45:c8:18:51:f0:c0:e0:a7:46:5c:8a:3d:d6: d8:cd:c2:2c:b9:5f:6d:a5:5f:2d:a5:fd:c9:b8:de: 03:59:aa:cb:c9:7a:84:9d:3d:98:40:08:da:20:ad: 0f:5f:88:d8:57:c5:1f:84:f7:86:1b:76:4a:9c:2f: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:A5:AF:B8:68:38:93:AC:D7:6F:00:72:05:55:9E:C7:40:89:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b5:03:07:59:ea:90:34:2b:7d:d4:26:66:86:1f:5e:10:90: e1:56:9f:1a:63:d4:1b:7c:90:db:ac:9a:7a:99:0f:61:cd:89: a6:ab:5f:ea:2c:f5:b7:4b:98:cd:79:91:a5:89:78:82:38:66: 8d:fd:7e:da:de:8b:58:ca:fb:dc:31:18:df:17:c3:b8:9f:3e: 20:28:8d:5b:fe:fe:50:d0:5f:b3:82:4e:2d:49:3f:75:da:ff: a5:c5:00:83:c1:2e:26:43:64:e0:df:a6:b6:94:b2:b5:f1:ec: ae:27:b4:f6:f5:33:1e:6b:b9:7e:3b:45:c7:34:44:60:db:56: c0:b9:0b:a8:92:ef:24:30:27:ef:3d:69:85:27:f5:de:f4:12: b7:53:53:1d:e3:35:e6:a4:bc:7b:85:a3:59:fe:b2:71:59:f1: 87:c0:dc:f7:28:59:5b:62:f3:55:ac:3d:e6:c1:19:2c:d0:1a: 63:22:90:f5:10:9a:05:df:2a:75:2e:db:d2:d4:4a:c1:33:ec: 55:ae:2c:ab:44:c4:7a:16:4e:e3:3c:9b:ce:f2:32:99:a4:08: b5:60:3d:21:6c:fc:0f:c7:96:6e:6f:7e:ba:85:f7:47:3a:b6: c6:d7:9c:d0:dc:6f:d7:f6:8e:ad:50:8c:db:58:26:bb:1c:f3: bc:42:55:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiBcUE24OyhnQ/IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk ZWRhNzI0MWItODcxYS00NGI1LTgxZGItNWIwMjc2OTk1OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNChB/wB5C2eDnEHLBGRg+9xqpy7TbwcFy0Y r6ZFyX7Grid0BaLnqZuDZz5ijCaOtIv9iFpP/U8KLlojnQ6t9AcjRfTthyu2PMx7 okuohj6vTUwbMkOZZ/7AJamKTbK0muh9UC+GPHB5TcuH1KJTImTS73bBPrOnrU9l ywaXQuX1rS2brU7d7XwJCp7QO7Fq+Q+3b4CuGwv1Uy2XASKrdFfKgiSB6WVGNi26 pJ3gehUnlW8czOK+3uVjCpAB/zCzHQint0XIGFHwwOCnRlyKPdbYzcIsuV9tpV8t pf3JuN4DWarLyXqEnT2YQAjaIK0PX4jYV8UfhPeGG3ZKnC8tfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGtupa+4aDiTrNdvAHIFVZ7HQImvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWM4ZGM5YzEtMGE1Mi0z NDRlLWFhZDgtMWVmYzY2ZmJlMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABC1AwdZ6pA0K33UJmaGH14QkOFWnxpj1Bt8kNusmnqZD2HNiaar X+os9bdLmM15kaWJeII4Zo39ftrei1jK+9wxGN8Xw7ifPiAojVv+/lDQX7OCTi1J P3Xa/6XFAIPBLiZDZODfpraUsrXx7K4ntPb1Mx5ruX47Rcc0RGDbVsC5C6iS7yQw J+89aYUn9d70ErdTUx3jNeakvHuFo1n+snFZ8YfA3PcoWVti81WsPebBGSzQGmMi kPUQmgXfKnUu29LUSsEz7FWuLKtExHoWTuM8m87yMpmkCLVgPSFs/A/Hlm5vfrqF 90c6tsbXnNDcb9f2jq1QjNtYJrsc87xCVSE= -----END CERTIFICATE-----Generated at Mon Apr 28 07:52:16 2025 by rpki-client