$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa File: 5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa (raw, json) Hash identifier: m3MNCaK/V/cQuJeB6VmpVbQ1VlQcUu7pbozcoVgxrg8= Subject key identifier: 1F:52:30:AB:46:07:82:40:C2:2A:10:B5:76:DB:C1:F4:0C:60:FD:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3850F052FEF8A615F4A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 396614 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:0f:05:2f:ef:8a:61:5f:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=ade7a9e3-2113-43a6-b79a-ce0c3be36f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:db:f8:7f:5d:f0:53:88:27:59:fa:06:3e: 73:f4:3f:1a:55:7c:44:7f:c3:7d:bf:cc:29:d6:3c: 97:78:a7:b0:e8:10:37:84:0d:2a:3d:9d:6e:d7:9e: d2:ca:e1:5a:65:8e:d4:8c:be:d7:66:8b:25:d4:06: 11:6d:fb:8b:21:88:7b:0e:cf:50:0b:07:98:3e:c8: 72:b6:a2:24:d7:9a:aa:f3:02:41:ad:f7:a7:cd:d3: a1:df:45:7c:c8:54:38:98:16:14:52:f6:fb:97:03: 19:84:a5:b2:7b:b8:ad:79:26:20:c3:78:89:5c:e2: 77:07:45:45:c4:2e:77:cd:86:5b:10:cd:9a:c2:14: 50:4e:5b:8a:f9:3a:b9:94:7b:11:e8:2f:b7:24:0e: ac:e9:fd:64:4b:17:78:17:73:4f:a6:03:83:16:e0: 43:96:12:00:a0:62:de:7f:12:1f:23:f8:0c:d8:6e: 20:5f:01:ff:da:c8:2e:21:70:dc:15:96:27:49:0f: f5:5e:c8:b4:cf:3d:a9:5f:ec:ad:42:54:22:a5:3b: 0f:0e:cd:e0:81:6a:f8:73:5a:64:b9:b9:b2:2d:f5: d0:96:dd:f1:4b:0d:d3:11:36:47:2b:c2:d7:b7:1d: e3:5e:fe:7e:98:71:3a:e0:d0:8f:59:47:89:ab:be: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:52:30:AB:46:07:82:40:C2:2A:10:B5:76:DB:C1:F4:0C:60:FD:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ed:7e:23:e9:aa:11:99:48:3a:df:16:6a:3d:d6:ab:57:1d: cf:7c:7a:e8:51:af:25:9a:3c:b1:95:d5:da:96:57:ee:9d:e9: ee:38:f3:6e:92:7d:01:16:36:08:07:2b:c0:86:11:75:f9:e1: 04:d8:16:e2:10:c5:fe:ec:bd:ad:5c:4e:48:6a:79:f7:22:7e: b0:8b:ad:5c:30:af:fc:ca:fe:07:14:a6:01:c0:00:06:de:07: 33:7a:fe:c5:1f:0d:d8:0b:28:4c:ad:64:fa:fd:53:66:91:e0: 73:c6:c0:07:a5:ce:83:e3:4b:c4:09:1e:76:41:12:7e:fb:e9: c5:78:ec:82:b7:97:72:85:04:39:e1:46:b5:56:29:47:64:f3: ad:7d:34:1c:ee:7a:5c:87:b5:c4:80:79:a3:d0:ab:c5:e2:e9: 3a:a4:95:57:00:03:c8:63:a7:36:56:7f:27:8d:94:17:bd:e4: e7:df:54:01:f6:85:a6:06:42:a6:22:39:28:26:cd:c6:97:ea: 83:9d:83:29:e0:4a:a0:e7:8b:39:ff:d1:44:09:af:50:81:cb: fb:df:ef:35:27:8e:6a:6a:12:22:ae:87:0b:31:63:c8:13:25: 31:5e:81:d0:df:c6:05:17:2f:51:52:d8:d2:3d:22:d1:0f:e6: 0b:60:f6:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44UPBS/vimFfSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk YWRlN2E5ZTMtMjExMy00M2E2LWI3OWEtY2UwYzNiZTM2ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgLb+H9d8FOIJ1n6Bj5z9D8aVXxEf8N9v8wp 1jyXeKew6BA3hA0qPZ1u157SyuFaZY7UjL7XZosl1AYRbfuLIYh7Ds9QCweYPshy tqIk15qq8wJBrfenzdOh30V8yFQ4mBYUUvb7lwMZhKWye7iteSYgw3iJXOJ3B0VF xC53zYZbEM2awhRQTluK+Tq5lHsR6C+3JA6s6f1kSxd4F3NPpgODFuBDlhIAoGLe fxIfI/gM2G4gXwH/2sguIXDcFZYnSQ/1Xsi0zz2pX+ytQlQipTsPDs3ggWr4c1pk ubmyLfXQlt3xSw3TETZHK8LXtx3jXv5+mHE64NCPWUeJq77fIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB9SMKtGB4JAwioQtXbbwfQMYP3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQxZjFlYjQtODQzNC0z Zjc1LTk0ZmQtMDM4MmM2NTI2ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3tfiPpqhGZSDrfFmo91qtXHc98euhRryWaPLGV1dqWV+6d6e44 826SfQEWNggHK8CGEXX54QTYFuIQxf7sva1cTkhqefcifrCLrVwwr/zK/gcUpgHA AAbeBzN6/sUfDdgLKEytZPr9U2aR4HPGwAelzoPjS8QJHnZBEn776cV47IK3l3KF BDnhRrVWKUdk8619NBzuelyHtcSAeaPQq8Xi6TqklVcAA8hjpzZWfyeNlBe95Off VAH2haYGQqYiOSgmzcaX6oOdgyngSqDnizn/0UQJr1CBy/vf7zUnjmpqEiKuhwsx Y8gTJTFegdDfxgUXL1FS2NI9ItEP5gtg9uI= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:45 2025 by rpki-client