$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ab39e6-84cf-3447-b74c-0da93174d9d8.roa File: 61ab39e6-84cf-3447-b74c-0da93174d9d8.roa (raw, json) Hash identifier: QJv8TJq8Wccc9quvEAyGpcvuJFLy0xnUSa6rg6/WkYs= Subject key identifier: D4:1C:55:C0:6A:15:BD:B5:1A:A1:71:24:1A:C8:5F:A1:64:D3:86:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E389A5B6739E0B233C3AB8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ab39e6-84cf-3447-b74c-0da93174d9d8.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 36627 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:a5:b6:73:9e:0b:23:3c:3a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=9314e971-64ff-4fa3-b050-d019df1e70f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:1c:39:fc:2b:0f:a9:4d:ca:11:fe:8f:ae: 08:95:0a:c3:ac:b1:ab:04:20:0c:cc:1d:03:70:54: d9:de:99:06:25:24:0d:b9:46:35:37:fa:da:7c:39: df:63:f9:0d:a4:5d:ad:b8:49:72:de:02:78:8d:5b: 0c:d5:e9:67:71:3c:32:34:a4:b2:3f:b6:e2:a8:90: c0:e7:80:ba:ff:8e:3d:de:ba:66:d6:65:a0:8b:63: 1d:56:ed:fd:a3:07:9c:60:48:c4:9a:d1:14:01:d6: 16:4c:c5:5d:e4:4a:d0:62:5b:dc:5f:7b:1a:56:0c: 24:c3:e0:3c:9b:ab:6f:df:ee:74:4e:14:a4:d6:04: 72:e2:3e:9c:1e:6d:ed:d2:08:64:ea:4c:fb:be:6b: 37:d4:a5:5d:3a:6b:6b:0c:a2:5c:cf:ee:ef:88:fc: e2:41:ab:1c:77:36:40:45:d2:e8:b3:98:77:ed:be: 9e:aa:21:2d:3f:22:30:4a:4d:20:b3:cf:d3:60:62: 63:6e:8a:fd:4f:bb:1b:54:ab:ad:11:8d:81:ee:2d: e9:f9:a4:01:c4:7e:d0:81:5a:d1:4c:b2:7a:b6:f0: 20:bd:1d:4e:e9:6b:4c:e1:5e:74:98:a0:be:6a:a6: 62:9e:cc:94:0f:1d:07:e0:fd:05:8b:99:21:54:54: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1C:55:C0:6A:15:BD:B5:1A:A1:71:24:1A:C8:5F:A1:64:D3:86:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ab39e6-84cf-3447-b74c-0da93174d9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:da:09:d1:25:4a:0f:1c:d5:d7:bb:0f:77:9e:52:34:07:e3: 73:df:0c:d4:86:0e:3a:9a:02:86:e3:19:ed:d8:b4:c8:ba:f9: ac:89:29:82:eb:96:86:95:a5:c2:de:56:69:a5:57:73:ad:31: 3c:46:7b:30:c0:81:99:d5:ac:6c:ff:af:28:b6:b6:13:ea:76: f2:4a:ae:a2:77:14:48:32:ff:a2:67:6b:c1:c8:37:fe:9b:ce: 39:80:e5:fa:d2:84:78:59:18:e1:cb:73:3d:a0:ca:39:4d:b3: 17:85:f1:1c:03:5b:28:9e:74:1f:6c:ca:61:de:10:12:75:a9: fb:11:03:28:8a:aa:6d:29:5a:59:33:a6:22:78:8c:d3:68:5b: 17:ff:a5:89:db:05:84:81:d9:b2:56:70:0a:6c:43:d0:6e:bc: 88:4e:8b:7d:25:a0:d1:c8:58:e3:a1:41:b9:af:de:01:62:75: 7e:e9:f8:13:6b:63:91:d5:fa:75:45:d4:f1:c8:80:02:93:d7: f7:b6:04:a2:c3:dc:46:5c:d5:61:80:8a:c2:14:5e:73:15:51: 73:f1:96:24:46:c9:79:ae:2f:ca:5a:01:c0:77:ec:ca:11:81: ec:0c:6b:f0:41:27:b7:60:2d:0e:33:19:02:f1:74:54:53:ae: 26:94:53:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44mltnOeCyM8OrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk OTMxNGU5NzEtNjRmZi00ZmEzLWIwNTAtZDAxOWRmMWU3MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxYcOfwrD6lNyhH+j64IlQrDrLGrBCAMzB0D cFTZ3pkGJSQNuUY1N/rafDnfY/kNpF2tuEly3gJ4jVsM1elncTwyNKSyP7biqJDA 54C6/4493rpm1mWgi2MdVu39owecYEjEmtEUAdYWTMVd5ErQYlvcX3saVgwkw+A8 m6tv3+50ThSk1gRy4j6cHm3t0ghk6kz7vms31KVdOmtrDKJcz+7viPziQascdzZA RdLos5h37b6eqiEtPyIwSk0gs8/TYGJjbor9T7sbVKutEY2B7i3p+aQBxH7QgVrR TLJ6tvAgvR1O6WtM4V50mKC+aqZinsyUDx0H4P0Fi5khVFQ9bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQcVcBqFb21GqFxJBrIX6Fk04bkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjFhYjM5ZTYtODRjZi0z NDQ3LWI3NGMtMGRhOTMxNzRkOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnaCdElSg8c1de7D3eeUjQH43PfDNSGDjqaAobjGe3YtMi6+ayJ KYLrloaVpcLeVmmlV3OtMTxGezDAgZnVrGz/ryi2thPqdvJKrqJ3FEgy/6Jna8HI N/6bzjmA5frShHhZGOHLcz2gyjlNsxeF8RwDWyiedB9symHeEBJ1qfsRAyiKqm0p WlkzpiJ4jNNoWxf/pYnbBYSB2bJWcApsQ9BuvIhOi30loNHIWOOhQbmv3gFidX7p +BNrY5HV+nVF1PHIgAKT1/e2BKLD3EZc1WGAisIUXnMVUXPxliRGyXmuL8paAcB3 7MoRgewMa/BBJ7dgLQ4zGQLxdFRTriaUUws= -----END CERTIFICATE-----Generated at Sun Apr 27 18:50:23 2025 by rpki-client