$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7209fb54-48fc-3363-bd87-232c9b77a42e.roa File: 7209fb54-48fc-3363-bd87-232c9b77a42e.roa (raw, json) Hash identifier: 4yNn928jQb8oIHb0OnCqyDz8lC9BrNNNlOP5BU6IVak= Subject key identifier: F5:D0:14:36:53:30:C6:F4:62:30:85:3D:50:65:0A:4A:D4:01:A6:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21F3ADAB28B7BBFCB0240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7209fb54-48fc-3363-bd87-232c9b77a42e.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396596 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:3a:da:b2:8b:7b:bf:cb:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=6b89a3df-d8da-42ed-94de-872ccec07328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:11:2c:1c:f2:44:43:76:eb:46:3a:88:9d:a6: e1:0b:29:38:00:44:f4:d1:c3:c6:c7:c7:0b:e4:0b: fd:bd:d8:08:dd:29:fe:61:db:7d:51:69:9a:15:b8: 62:e1:f6:53:c4:7c:f4:a4:dd:94:55:8c:bb:3d:ca: 40:f7:b4:d6:d4:49:39:eb:8a:eb:54:5a:a9:61:88: ae:24:fe:be:35:5b:c3:c4:74:ad:06:cf:78:7a:75: 2b:05:d3:02:e6:5c:b9:4d:3a:b5:1c:89:2f:d8:f7: d8:46:8d:ea:f8:2f:dd:65:88:9e:f0:5b:e4:19:fc: 8f:dd:8a:b6:fa:b9:9d:f0:ef:bd:4b:6e:0d:1a:65: 95:58:2b:d5:7d:60:c0:34:ec:dc:e0:70:54:16:13: 73:97:cc:15:64:12:c3:d6:5f:20:b3:92:44:33:10: 9d:45:29:f5:fd:0a:a9:c6:85:8a:95:8b:f5:e5:48: ca:65:21:bc:57:b3:a8:6b:3a:0b:32:5a:8f:ee:77: d7:41:4b:ce:b0:a8:31:ff:01:ae:3c:b4:5e:dc:8e: f1:6b:19:be:48:27:be:ee:8d:45:85:98:40:e2:f0: 7e:39:a1:34:79:73:d2:ea:55:02:0e:27:fa:4b:c7: 8a:6e:5c:df:d5:f0:b9:5f:35:06:89:3e:39:ba:6f: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D0:14:36:53:30:C6:F4:62:30:85:3D:50:65:0A:4A:D4:01:A6:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7209fb54-48fc-3363-bd87-232c9b77a42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1d:b2:80:4f:f4:72:ad:97:95:33:63:4f:34:7e:b3:8b:94: 92:45:08:38:be:12:29:ec:5d:19:ff:3a:22:b9:67:90:1c:16: 06:24:93:eb:3b:62:ef:fe:d3:1f:23:75:92:2f:f2:f2:51:70: 8f:93:ac:84:28:98:99:ae:30:d7:dc:79:ba:55:3e:cb:04:94: dc:1a:4b:5a:53:ad:5a:05:b0:de:9c:0f:b4:39:c8:80:f7:73: ee:e0:82:14:83:1e:7c:eb:06:18:49:96:49:77:77:9e:f3:b4: 57:a4:ca:16:4f:1b:63:3b:fd:d1:fb:3c:c1:b3:40:e0:a7:80: ae:11:22:3f:31:e4:a9:67:82:4b:95:fd:de:29:b0:af:47:85: c0:18:ce:fc:b5:97:f9:ad:4c:45:05:bc:64:ee:20:e4:33:fb: 46:c2:c3:e0:00:11:52:a4:51:7d:b9:b2:88:50:f5:f3:93:74: 4a:ac:0f:c5:31:83:24:0b:74:97:b2:a8:86:c3:e4:c3:23:c6: ac:0c:dc:3f:7f:cf:6f:53:b3:ed:de:f5:38:70:b5:f7:bf:87: eb:4a:54:b9:0f:24:e9:6f:22:50:c4:1f:48:f5:37:ed:47:ec: de:49:85:4b:a4:0f:08:25:bb:9a:53:9b:19:70:5d:9d:f1:b1: af:cc:5c:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh862rKLe7/LAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk NmI4OWEzZGYtZDhkYS00MmVkLTk0ZGUtODcyY2NlYzA3MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghEsHPJEQ3brRjqInabhCyk4AET00cPGx8cL 5Av9vdgI3Sn+Ydt9UWmaFbhi4fZTxHz0pN2UVYy7PcpA97TW1Ek564rrVFqpYYiu JP6+NVvDxHStBs94enUrBdMC5ly5TTq1HIkv2PfYRo3q+C/dZYie8FvkGfyP3Yq2 +rmd8O+9S24NGmWVWCvVfWDANOzc4HBUFhNzl8wVZBLD1l8gs5JEMxCdRSn1/Qqp xoWKlYv15UjKZSG8V7OoazoLMlqP7nfXQUvOsKgx/wGuPLRe3I7xaxm+SCe+7o1F hZhA4vB+OaE0eXPS6lUCDif6S8eKblzf1fC5XzUGiT45um+kZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPXQFDZTMMb0YjCFPVBlCkrUAaa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzIwOWZiNTQtNDhmYy0z MzYzLWJkODctMjMyYzliNzdhNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsdsoBP9HKtl5UzY080frOLlJJFCDi+EinsXRn/OiK5Z5AcFgYk k+s7Yu/+0x8jdZIv8vJRcI+TrIQomJmuMNfcebpVPssElNwaS1pTrVoFsN6cD7Q5 yID3c+7gghSDHnzrBhhJlkl3d57ztFekyhZPG2M7/dH7PMGzQOCngK4RIj8x5Kln gkuV/d4psK9HhcAYzvy1l/mtTEUFvGTuIOQz+0bCw+AAEVKkUX25sohQ9fOTdEqs D8UxgyQLdJeyqIbD5MMjxqwM3D9/z29Ts+3e9Thwtfe/h+tKVLkPJOlvIlDEH0j1 N+1H7N5JhUukDwglu5pTmxlwXZ3xsa/MXDc= -----END CERTIFICATE-----Generated at Mon Apr 28 00:56:05 2025 by rpki-client