$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa File: 72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa (raw, json) Hash identifier: tSSnv6VAS9EJU/Da4zau3cbmOoflokFQ6vpixnuUV4k= Subject key identifier: A6:8D:7D:C4:9B:23:6B:FD:76:A7:C4:9F:76:85:34:6D:C8:B4:12:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21F8A8FF203E2BDA3E400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 36620 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:8a:8f:f2:03:e2:bd:a3:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=db53111a-37ab-4842-8c27-710dc08ed8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:90:d9:cc:5f:7b:98:2d:b7:43:cb:bf:74: de:2e:af:28:0e:24:35:bd:7c:74:1c:90:a6:be:2b: 8d:42:14:92:35:e1:28:78:ed:71:16:5f:70:e0:f3: ac:e5:af:60:ff:84:d4:69:5c:ce:c8:92:bb:e2:d0: 85:6e:14:61:41:6f:09:53:42:af:e0:51:d3:dd:0a: 3d:8c:1f:f7:c6:64:2f:b1:cf:58:9c:36:0f:85:65: 68:7c:6d:0c:26:60:05:ce:2c:1e:13:00:0e:85:70: a8:31:2b:c0:27:71:99:7d:41:8b:3f:aa:8b:ae:fa: 12:b2:bb:aa:9e:a9:a2:7f:a0:c3:45:05:86:a4:e1: 1c:19:b9:15:01:f3:2b:f1:a4:4f:fd:88:5e:7f:37: d5:44:6a:7b:ad:f8:a0:e0:0a:0e:1b:eb:2d:44:09: ac:0a:44:b7:19:de:84:1c:fa:09:85:98:62:7f:d0: 77:8c:5d:7d:20:1e:9e:81:0a:db:74:45:91:ae:fc: 8b:4e:d0:0c:12:cf:5f:0c:97:27:6c:07:39:a5:30: 28:9d:56:20:a3:20:28:82:8b:b6:95:1d:81:45:df: fe:c8:7f:f1:4f:63:e5:09:03:0e:91:5c:d2:fa:63: f6:85:1f:e8:4c:55:5d:2a:bb:51:4f:ac:f0:5d:1d: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8D:7D:C4:9B:23:6B:FD:76:A7:C4:9F:76:85:34:6D:C8:B4:12:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:35:5c:15:8f:4b:8c:79:58:26:1a:41:4b:56:ad:1d:23:b9: 39:fd:4d:00:19:5e:71:0f:6a:4a:03:3c:c8:08:88:6c:a4:7c: 87:4d:ae:d5:bb:81:6c:de:41:a6:6b:9b:1b:1b:a6:2b:68:4e: f5:4e:4d:51:8f:91:7e:5a:7f:d8:41:d3:6d:56:9c:19:1c:35: 5e:91:04:a0:66:71:f0:3d:51:2f:54:40:fc:5a:68:d6:b5:c8: 25:bb:88:c7:29:9b:8b:67:b0:bb:0e:7a:72:f1:64:cb:ea:17: 67:4d:03:90:e9:48:dc:ed:62:da:df:1e:41:c8:45:bf:42:4b: 2a:99:ec:96:cd:6d:78:9f:3e:6d:db:76:a6:c0:92:1e:94:a0: 95:3d:51:b0:ad:ec:7e:04:f2:66:c0:5c:b3:53:73:fa:75:fa: e3:73:b3:f6:4d:95:e0:27:8e:be:e2:67:d5:fb:c9:0b:f3:d5: 1d:3e:74:aa:56:fe:24:e5:63:39:62:b8:47:05:a2:53:e0:c7: 36:32:00:ac:73:75:3a:3f:f4:99:7a:7f:4a:8e:5d:1f:c7:34: 85:1a:24:55:b2:ca:ad:bb:3e:07:e7:21:93:c8:06:08:a0:7a: 4d:4f:a4:ec:b1:28:00:37:2d:db:9f:b9:a6:1d:02:b4:66:d4: a4:67:fb:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh+Kj/ID4r2j5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk ZGI1MzExMWEtMzdhYi00ODQyLThjMjctNzEwZGMwOGVkOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1OQ2cxfe5gtt0PLv3TeLq8oDiQ1vXx0HJCm viuNQhSSNeEoeO1xFl9w4POs5a9g/4TUaVzOyJK74tCFbhRhQW8JU0Kv4FHT3Qo9 jB/3xmQvsc9YnDYPhWVofG0MJmAFziweEwAOhXCoMSvAJ3GZfUGLP6qLrvoSsruq nqmif6DDRQWGpOEcGbkVAfMr8aRP/YhefzfVRGp7rfig4AoOG+stRAmsCkS3Gd6E HPoJhZhif9B3jF19IB6egQrbdEWRrvyLTtAMEs9fDJcnbAc5pTAonVYgoyAogou2 lR2BRd/+yH/xT2PlCQMOkVzS+mP2hR/oTFVdKrtRT6zwXR3AUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKaNfcSbI2v9dqfEn3aFNG3ItBJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzJjODA1OWEtZWQyNC0z YWI5LTg3MTQtZDZjOGYwYmNjYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAk1XBWPS4x5WCYaQUtWrR0juTn9TQAZXnEPakoDPMgIiGykfIdN rtW7gWzeQaZrmxsbpitoTvVOTVGPkX5af9hB021WnBkcNV6RBKBmcfA9US9UQPxa aNa1yCW7iMcpm4tnsLsOenLxZMvqF2dNA5DpSNztYtrfHkHIRb9CSyqZ7JbNbXif Pm3bdqbAkh6UoJU9UbCt7H4E8mbAXLNTc/p1+uNzs/ZNleAnjr7iZ9X7yQvz1R0+ dKpW/iTlYzliuEcFolPgxzYyAKxzdTo/9Jl6f0qOXR/HNIUaJFWyyq27PgfnIZPI Bgigek1PpOyxKAA3LdufuaYdArRm1KRn+70= -----END CERTIFICATE-----Generated at Mon Apr 28 00:53:11 2025 by rpki-client