$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa File: 69222725-8683-36f9-af8b-fa06924ec7d4.roa (raw, json) Hash identifier: o2xVklZ1O29SG2x67QoXep3+m/kvmMGj4G7zJ6lVkrc= Subject key identifier: 46:8A:5C:44:ED:C2:05:20:7A:58:B4:33:D4:CA:2B:21:2C:3E:B5:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38868988934F7B910C4E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396580 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:68:98:89:34:f7:b9:10:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=683a4c48-bce3-40c8-bf23-3d54b74df8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:93:c3:b1:0c:93:b9:bc:14:d2:36:90:b2:c5: 2c:62:07:ed:b8:aa:d5:a6:bb:95:93:37:d6:e0:58: 60:3d:20:9e:2c:22:b5:0a:af:75:61:c8:85:3c:e3: c7:11:34:e3:37:28:e0:66:41:6a:23:68:69:6c:53: b0:4c:96:4d:ea:17:fc:b3:59:fa:0d:22:2f:b7:4c: 91:1b:e0:7f:2f:e6:68:14:6c:3a:01:59:7e:62:25: 36:7b:ce:ce:bb:c3:c2:10:2a:6f:f1:04:5e:19:59: 06:3d:be:5b:2c:1e:37:44:de:bf:47:6e:4a:e9:9c: 39:b8:4c:bf:74:86:a5:51:b8:fd:6a:ee:86:9e:7e: a6:c5:56:4f:87:43:e5:99:3b:1b:66:e1:39:ea:da: 4f:52:52:7e:de:16:89:2a:86:c7:08:f6:3e:d3:92: a1:13:46:30:66:8a:df:ba:dc:87:97:c9:7d:cb:2f: eb:04:65:b1:2a:05:8f:35:a6:7c:b6:d8:d9:ce:32: b9:00:d1:a6:95:18:f5:1f:27:c2:5c:8c:86:5d:83: e2:ed:98:fc:b4:fb:86:13:c9:61:43:49:73:69:8c: ec:f2:26:95:55:6b:65:d6:71:7a:1b:3c:0c:75:5c: da:e2:bd:84:d2:12:f7:11:be:aa:e4:d2:c3:8a:a7: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8A:5C:44:ED:C2:05:20:7A:58:B4:33:D4:CA:2B:21:2C:3E:B5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:64:80:64:5a:b9:2d:2b:2f:16:27:e4:18:b1:bb:a1:5b:f7: e3:e2:04:91:fc:d6:a0:98:ca:47:dd:28:82:db:16:fc:b5:6a: fb:b0:79:d0:7d:9e:29:df:67:4f:e7:47:ee:6e:92:12:da:52: 21:8b:e6:e9:ec:ad:27:74:16:c0:fd:f5:cf:49:bc:10:f1:e3: be:d7:42:1b:32:03:9b:a3:9c:7a:33:c1:4a:cf:cb:50:0a:e8: 0f:47:69:4c:99:c3:9c:be:e7:90:de:fc:1d:b2:e8:6e:0e:e3: 7a:b3:55:c8:10:07:4d:1e:26:c8:ad:2d:14:76:ad:52:b8:18: c0:e9:33:09:b3:a5:2e:67:b7:47:21:82:6b:1c:9b:cd:03:c4: fd:2e:71:c3:3e:42:a8:5a:38:79:35:23:de:20:50:a6:3d:4c: 0a:85:90:e1:da:8d:34:e7:90:1a:d3:3d:90:d2:7c:cd:ae:57: 68:c3:bd:d5:37:10:fe:07:e7:8d:34:f7:de:47:77:24:9d:00: f1:14:6f:b7:3a:f2:da:ad:7f:cc:9b:49:f5:98:b1:d8:cc:31: 80:68:b1:5c:39:42:16:e8:39:75:83:78:74:33:64:02:5f:34: e6:f3:b3:46:90:03:0f:61:77:e9:02:b4:1a:82:1e:c7:20:15: c6:7f:33:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44homIk097kQxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk NjgzYTRjNDgtYmNlMy00MGM4LWJmMjMtM2Q1NGI3NGRmOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJPDsQyTubwU0jaQssUsYgftuKrVpruVkzfW 4FhgPSCeLCK1Cq91YciFPOPHETTjNyjgZkFqI2hpbFOwTJZN6hf8s1n6DSIvt0yR G+B/L+ZoFGw6AVl+YiU2e87Ou8PCECpv8QReGVkGPb5bLB43RN6/R25K6Zw5uEy/ dIalUbj9au6Gnn6mxVZPh0PlmTsbZuE56tpPUlJ+3haJKobHCPY+05KhE0YwZorf utyHl8l9yy/rBGWxKgWPNaZ8ttjZzjK5ANGmlRj1HyfCXIyGXYPi7Zj8tPuGE8lh Q0lzaYzs8iaVVWtl1nF6GzwMdVza4r2E0hL3Eb6q5NLDiqeN6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaKXETtwgUgeli0M9TKKyEsPrU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjkyMjI3MjUtODY4My0z NmY5LWFmOGItZmEwNjkyNGVjN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5kgGRauS0rLxYn5Bixu6Fb9+PiBJH81qCYykfdKILbFvy1avuw edB9ninfZ0/nR+5ukhLaUiGL5unsrSd0FsD99c9JvBDx477XQhsyA5ujnHozwUrP y1AK6A9HaUyZw5y+55De/B2y6G4O43qzVcgQB00eJsitLRR2rVK4GMDpMwmzpS5n t0chgmscm80DxP0uccM+QqhaOHk1I94gUKY9TAqFkOHajTTnkBrTPZDSfM2uV2jD vdU3EP4H5400995HdySdAPEUb7c68tqtf8ybSfWYsdjMMYBosVw5QhboOXWDeHQz ZAJfNObzs0aQAw9hd+kCtBqCHscgFcZ/M+8= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:51 2025 by rpki-client