$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77f9ee12-4347-327a-b534-cffc5e8fc91e.roa File: 77f9ee12-4347-327a-b534-cffc5e8fc91e.roa (raw, json) Hash identifier: 4K1npqDQRwpBkTLPXUdU4bbAQ1nkSUUBNwpj4xR2mVw= Subject key identifier: 52:12:11:0E:8F:27:60:8F:04:E1:CD:91:F2:03:3D:8D:DE:63:E7:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E384962395DE377AA66680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77f9ee12-4347-327a-b534-cffc5e8fc91e.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396570 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:96:23:95:de:37:7a:a6:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=59c51d91-981f-4457-910e-ba24515b3f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:cf:27:9c:07:28:0e:c6:63:cc:23:5a:c5: ff:31:2e:ff:17:cf:7b:6c:f1:b5:88:74:af:25:d1: 47:7a:98:8b:2b:1e:f9:2a:38:e2:68:35:c7:4a:33: c6:dc:9f:08:a8:20:5c:4c:fb:8e:08:e2:6f:a3:e1: 29:14:d7:b3:78:e3:dd:3c:00:53:8f:6e:f5:a9:8c: 4c:24:a8:38:2b:85:a3:0c:1c:7e:26:c0:47:83:64: 6e:39:43:be:bc:ad:87:cb:af:cd:67:27:8f:b3:84: b6:a4:eb:78:cf:66:84:a0:64:54:f9:e7:07:05:b9: d9:88:ec:f4:22:39:2d:13:8b:7c:5f:b3:18:c1:e7: bd:ec:f2:15:f4:e4:f1:21:55:ff:3e:d3:b8:c5:70: 95:a3:21:0d:3d:c8:5c:9e:7d:3b:ee:d2:6b:a5:b0: 15:2e:e6:83:d6:cb:a2:e5:5d:88:94:97:d9:d4:27: 09:3d:f6:e2:4d:f6:da:d1:23:03:aa:47:61:2e:66: 93:8e:67:5f:af:7b:ef:4f:f1:f4:0c:76:dc:cc:cf: 28:8a:5f:6a:53:b3:96:9c:22:14:54:fe:a3:d4:64: ef:bc:a4:c6:c7:16:da:c5:08:04:4a:f9:0e:b9:a1: 89:73:7f:1a:85:8a:26:75:fa:ec:e2:63:75:61:5c: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:12:11:0E:8F:27:60:8F:04:E1:CD:91:F2:03:3D:8D:DE:63:E7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77f9ee12-4347-327a-b534-cffc5e8fc91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:17:b6:81:a6:10:a1:e8:81:da:57:26:7b:ea:5b:b9:16:60: 72:57:88:f2:71:f4:73:f3:54:1d:38:8e:d6:98:92:2b:c8:9d: 41:e6:81:dd:fd:66:98:1f:ea:ca:18:26:7e:cf:c4:51:87:5e: 52:bc:fc:3d:e7:22:ca:ad:73:5d:a0:4c:f4:75:08:37:4a:af: 1f:39:a9:06:e0:d4:03:fb:5b:ae:ac:81:5f:69:3d:d5:b3:60: 6f:64:f2:bf:7b:b0:62:67:56:c4:e7:08:b8:03:b3:05:73:4d: 03:79:f9:45:76:f1:2b:c4:48:03:f8:ec:dd:2a:f2:9b:ea:3b: a9:ab:b0:42:9a:ad:25:2c:fe:da:56:1e:92:f5:ae:a8:ad:25: bc:e8:ff:0b:8f:45:02:7f:d2:3c:28:e3:31:ef:c0:4f:df:ff: 66:db:32:99:d9:a9:3a:44:fa:55:b7:33:2c:a7:3d:96:a7:31: 7f:35:c4:4a:a0:60:2e:24:30:26:c3:87:91:d5:1e:17:f5:7c: e9:62:d9:5b:50:d1:95:30:62:6b:61:45:39:a2:0b:9b:cd:40: 84:37:f1:5a:2c:02:6e:a2:12:47:b6:05:61:8e:dd:bb:41:2f: d2:67:5d:20:28:cd:97:c8:21:e2:7c:08:3a:89:40:98:d9:d5: 1e:2a:72:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44SWI5XeN3qmZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk NTljNTFkOTEtOTgxZi00NDU3LTkxMGUtYmEyNDUxNWIzZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTHPJ5wHKA7GY8wjWsX/MS7/F897bPG1iHSv JdFHepiLKx75KjjiaDXHSjPG3J8IqCBcTPuOCOJvo+EpFNezeOPdPABTj271qYxM JKg4K4WjDBx+JsBHg2RuOUO+vK2Hy6/NZyePs4S2pOt4z2aEoGRU+ecHBbnZiOz0 IjktE4t8X7MYwee97PIV9OTxIVX/PtO4xXCVoyENPchcnn077tJrpbAVLuaD1sui 5V2IlJfZ1CcJPfbiTfba0SMDqkdhLmaTjmdfr3vvT/H0DHbczM8oil9qU7OWnCIU VP6j1GTvvKTGxxbaxQgESvkOuaGJc38ahYomdfrs4mN1YVysdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFISEQ6PJ2CPBOHNkfIDPY3eY+fvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzdmOWVlMTItNDM0Ny0z MjdhLWI1MzQtY2ZmYzVlOGZjOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAXtoGmEKHogdpXJnvqW7kWYHJXiPJx9HPzVB04jtaYkivInUHm gd39Zpgf6soYJn7PxFGHXlK8/D3nIsqtc12gTPR1CDdKrx85qQbg1AP7W66sgV9p PdWzYG9k8r97sGJnVsTnCLgDswVzTQN5+UV28SvESAP47N0q8pvqO6mrsEKarSUs /tpWHpL1rqitJbzo/wuPRQJ/0jwo4zHvwE/f/2bbMpnZqTpE+lW3MyynPZanMX81 xEqgYC4kMCbDh5HVHhf1fOli2VtQ0ZUwYmthRTmiC5vNQIQ38VosAm6iEke2BWGO 3btBL9JnXSAozZfIIeJ8CDqJQJjZ1R4qcpU= -----END CERTIFICATE-----Generated at Sun Apr 27 21:45:41 2025 by rpki-client