$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/717b1818-06c7-32e4-aecb-ef6543ec34c6.roa File: 717b1818-06c7-32e4-aecb-ef6543ec34c6.roa (raw, json) Hash identifier: CzDeo7KZkCNtNAPJfBJdS/PRUxPnxvKCKc3fHBwFJa8= Subject key identifier: 51:55:84:15:3E:AB:66:4D:42:2E:CE:1E:DF:6B:25:40:78:05:B1:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3871659C0F49C0A8E2080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/717b1818-06c7-32e4-aecb-ef6543ec34c6.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396553 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:16:59:c0:f4:9c:0a:8e:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=8b157158-8c55-46d1-ab6c-8d0117530f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:3f:af:d1:cd:74:d0:4f:c5:86:a4:66:0c: 36:60:29:10:59:1f:a3:4d:1a:19:c4:f5:24:60:22: d2:67:67:1c:47:b9:b8:88:dd:38:69:21:ef:ef:9d: 19:07:66:fe:a3:b8:1c:0d:f1:6b:85:c1:61:27:9b: 8e:44:0a:e3:9d:aa:c1:df:ea:02:ce:41:1d:bc:d2: e3:5a:38:da:6a:53:e4:4f:bf:39:03:eb:7c:85:7c: 08:5e:f1:90:01:31:bb:99:41:68:5d:dd:fc:42:62: f2:35:63:ce:d4:9e:68:85:d3:59:0c:1d:20:af:ac: 27:ec:bb:6f:4f:3b:e2:e3:37:21:05:1f:d6:9b:8f: 5d:e9:06:ce:22:62:8c:06:b9:c4:75:26:28:07:ac: 37:a9:ba:55:1d:49:05:fe:0e:20:32:9f:f6:a2:8c: e9:ac:0d:a9:8b:b7:19:03:8f:f8:0e:76:24:f8:74: cb:65:9a:aa:86:0e:d6:23:6d:1a:26:ff:98:b6:4f: 64:04:c8:44:42:7c:a1:1f:8c:95:d0:49:c7:98:b2: b7:b6:19:f5:24:98:87:aa:d0:ce:b4:76:36:f1:36: 7c:f0:96:36:75:78:2c:57:f7:08:01:da:a7:64:8b: 5b:85:02:44:5d:c2:9e:5a:65:5d:0a:35:c8:9b:5a: 2d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:55:84:15:3E:AB:66:4D:42:2E:CE:1E:DF:6B:25:40:78:05:B1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/717b1818-06c7-32e4-aecb-ef6543ec34c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:86:13:9e:e3:e6:ef:f9:50:36:41:eb:7e:dd:bb:13:72:08: 29:1b:30:29:06:af:98:5a:23:d9:1f:9c:64:2b:af:03:a8:20: e7:e7:71:92:f2:5a:e9:3d:df:30:ab:57:40:82:e4:39:a2:18: 23:40:67:44:61:af:31:ea:87:66:41:0e:33:34:43:23:50:1d: e1:31:e1:f8:03:2d:94:ac:66:11:33:12:20:ba:d0:9d:1a:f5: 7e:6e:79:d3:72:83:e4:5d:c8:d1:a3:09:61:8c:f0:f8:23:14: 03:db:85:77:0e:28:24:28:f9:32:64:e1:c5:2b:d9:47:3e:a5: 98:70:ca:9f:5c:2e:dc:1a:e1:3c:3e:72:2f:2e:82:6e:b1:9b: 01:a2:b1:76:a4:b5:06:26:a2:84:00:99:61:a0:13:14:4b:66: 16:70:12:f2:5c:75:cc:24:a1:28:70:6d:61:d8:98:8f:05:10: b3:79:a1:7e:e5:0b:3f:0b:86:1b:4a:c1:b8:12:02:4c:f6:b2: 47:54:40:6e:50:ca:68:b1:50:5a:6d:3d:e7:50:b7:3c:dd:83: 35:38:73:62:03:ba:21:0d:0b:af:e2:27:ca:1c:7b:64:32:13: a7:cf:b2:d4:d0:9a:e3:a3:e8:53:60:0a:44:7e:34:92:36:fe: 76:bc:8e:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44cWWcD0nAqOIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk OGIxNTcxNTgtOGM1NS00NmQxLWFiNmMtOGQwMTE3NTMwZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm80/r9HNdNBPxYakZgw2YCkQWR+jTRoZxPUk YCLSZ2ccR7m4iN04aSHv750ZB2b+o7gcDfFrhcFhJ5uORArjnarB3+oCzkEdvNLj WjjaalPkT785A+t8hXwIXvGQATG7mUFoXd38QmLyNWPO1J5ohdNZDB0gr6wn7Ltv Tzvi4zchBR/Wm49d6QbOImKMBrnEdSYoB6w3qbpVHUkF/g4gMp/2oozprA2pi7cZ A4/4DnYk+HTLZZqqhg7WI20aJv+Ytk9kBMhEQnyhH4yV0EnHmLK3thn1JJiHqtDO tHY28TZ88JY2dXgsV/cIAdqnZItbhQJEXcKeWmVdCjXIm1otOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFFVhBU+q2ZNQi7OHt9rJUB4BbECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzE3YjE4MTgtMDZjNy0z MmU0LWFlY2ItZWY2NTQzZWMzNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHyGE57j5u/5UDZB637duxNyCCkbMCkGr5haI9kfnGQrrwOoIOfn cZLyWuk93zCrV0CC5DmiGCNAZ0RhrzHqh2ZBDjM0QyNQHeEx4fgDLZSsZhEzEiC6 0J0a9X5uedNyg+RdyNGjCWGM8PgjFAPbhXcOKCQo+TJk4cUr2Uc+pZhwyp9cLtwa 4Tw+ci8ugm6xmwGisXaktQYmooQAmWGgExRLZhZwEvJcdcwkoShwbWHYmI8FELN5 oX7lCz8LhhtKwbgSAkz2skdUQG5QymixUFptPedQtzzdgzU4c2IDuiENC6/iJ8oc e2QyE6fPstTQmuOj6FNgCkR+NJI2/na8jqs= -----END CERTIFICATE-----Generated at Mon Apr 28 09:08:14 2025 by rpki-client