$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e5556e6-518d-3e46-98a0-e739808c1ba6.roa File: 5e5556e6-518d-3e46-98a0-e739808c1ba6.roa (raw, json) Hash identifier: /HICyC89pLiFFeluEtCPh1W7uvYFz3/1zvA7ZId2L+E= Subject key identifier: F2:8B:DC:C5:AC:96:25:36:15:EA:F0:61:E2:D3:04:37:71:CA:4D:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3895E2B087A587252DB20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e5556e6-518d-3e46-98a0-e739808c1ba6.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 396545 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:5e:2b:08:7a:58:72:52:db:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=1bb3e53b-8b24-4827-bc38-f00eef83b026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:95:8e:ab:77:13:e4:56:c2:63:cc:66:ea: 7b:cd:56:b9:a5:b4:03:18:88:28:16:85:3f:58:42: c4:c2:4a:c2:bf:6e:a3:8f:ca:b5:f3:b3:ec:73:48: b6:0e:ee:56:d4:1a:b5:c3:60:15:bf:c6:71:a5:91: 5a:74:61:f2:a8:5e:8e:63:44:8f:55:0d:fc:23:d0: 60:df:32:e0:ca:e7:2b:d7:45:78:44:f7:18:be:20: 1d:d8:cb:28:04:f9:53:79:21:96:a1:6b:62:89:15: 3a:90:e8:fc:dc:85:ff:63:f7:bb:83:91:f4:80:b4: 39:dd:25:2f:ec:73:6f:78:bf:e9:6c:6f:05:d9:08: 34:76:fa:40:1d:5e:49:b7:57:9d:37:14:6e:45:a1: ca:a1:dc:5d:46:25:e9:96:fd:c0:97:42:7d:a8:01: 05:54:1d:7b:9d:92:ed:e5:51:8b:c2:34:5b:31:ce: 01:9b:90:23:5d:20:15:f6:d4:db:da:cb:da:57:61: bd:9b:d2:c8:7b:e5:63:84:8f:82:ca:2c:55:b5:39: 1a:60:de:d9:bc:47:31:74:20:06:f6:24:ec:77:72: 5e:ff:53:5e:e1:01:0d:e6:b9:b2:e7:59:d9:71:8d: 71:10:89:31:86:d1:19:35:4e:2d:5d:f1:2a:b5:a0: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8B:DC:C5:AC:96:25:36:15:EA:F0:61:E2:D3:04:37:71:CA:4D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e5556e6-518d-3e46-98a0-e739808c1ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c4:eb:35:76:5a:57:38:57:c0:32:c5:ee:64:e0:22:d8:a2: 35:1a:3e:34:41:f8:5f:ce:d1:95:8e:62:47:59:27:09:48:45: 64:92:55:ef:a1:e5:49:a1:81:aa:dd:c7:78:ff:97:ea:fc:c6: fb:30:50:82:75:c2:78:7a:f3:12:09:8c:3e:f4:c6:16:24:56: 21:34:cf:b7:42:b7:0d:82:9f:44:2d:07:6b:69:f4:15:0c:f7: 94:3e:ef:f5:53:33:1e:3f:ce:50:2d:77:44:e5:0d:63:0c:ee: 5e:73:34:e3:b3:0e:ba:9b:d0:0b:72:fe:43:22:d0:2e:c2:48: 2a:0d:1e:db:e6:6f:bc:fc:30:e3:d1:82:c8:8f:9b:05:73:14: a5:71:c6:43:bb:fa:a3:d5:4c:0f:e8:01:b5:a8:31:4d:88:6c: c8:fc:99:f4:ca:40:15:60:c0:e9:b5:04:b6:1c:b0:a1:dc:4e: 38:54:9c:fc:84:90:98:65:3f:87:a0:8b:f1:02:0c:a6:eb:2b: 12:8c:52:85:24:e8:fa:c4:cf:da:cb:8a:ef:a0:41:e8:30:4b: 5d:5d:8c:d6:e9:ce:45:fc:cb:a3:7a:cc:2f:9c:02:40:14:37: ee:c0:23:ec:f0:23:6b:eb:b5:86:be:43:b2:99:8a:b5:8c:35: 69:10:3e:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44leKwh6WHJS2yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk MWJiM2U1M2ItOGIyNC00ODI3LWJjMzgtZjAwZWVmODNiMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzeVjqt3E+RWwmPMZup7zVa5pbQDGIgoFoU/ WELEwkrCv26jj8q187Psc0i2Du5W1Bq1w2AVv8ZxpZFadGHyqF6OY0SPVQ38I9Bg 3zLgyucr10V4RPcYviAd2MsoBPlTeSGWoWtiiRU6kOj83IX/Y/e7g5H0gLQ53SUv 7HNveL/pbG8F2Qg0dvpAHV5Jt1edNxRuRaHKodxdRiXplv3Al0J9qAEFVB17nZLt 5VGLwjRbMc4Bm5AjXSAV9tTb2svaV2G9m9LIe+VjhI+CyixVtTkaYN7ZvEcxdCAG 9iTsd3Je/1Ne4QEN5rmy51nZcY1xEIkxhtEZNU4tXfEqtaCdzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPKL3MWsliU2FerwYeLTBDdxyk1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWU1NTU2ZTYtNTE4ZC0z ZTQ2LTk4YTAtZTczOTgwOGMxYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfE6zV2Wlc4V8Ayxe5k4CLYojUaPjRB+F/O0ZWOYkdZJwlIRWSS Ve+h5Umhgardx3j/l+r8xvswUIJ1wnh68xIJjD70xhYkViE0z7dCtw2Cn0QtB2tp 9BUM95Q+7/VTMx4/zlAtd0TlDWMM7l5zNOOzDrqb0Aty/kMi0C7CSCoNHtvmb7z8 MOPRgsiPmwVzFKVxxkO7+qPVTA/oAbWoMU2IbMj8mfTKQBVgwOm1BLYcsKHcTjhU nPyEkJhlP4egi/ECDKbrKxKMUoUk6PrEz9rLiu+gQegwS11djNbpzkX8y6N6zC+c AkAUN+7AI+zwI2vrtYa+Q7KZirWMNWkQPu8= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:13 2025 by rpki-client