$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa File: 858d2db0-cf70-3659-a965-60917e6c90e8.roa (raw, json) Hash identifier: 6NlZOjgUY+XtzZcerEaGdw/266FzPMg61OVU3KPJE4w= Subject key identifier: E8:54:2D:81:0C:F7:D5:49:63:6D:1D:8E:F1:6D:2C:39:CE:71:E1:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E387F5A83CEA51A777F418 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 22547 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:f5:a8:3c:ea:51:a7:77:f4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=f8d1c5f6-e243-4d01-a925-5dd4d2024881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:71:60:87:25:3a:9e:e0:bd:09:5d:eb:62: fd:aa:ef:fe:e9:2c:32:3e:ac:f4:5a:04:47:f2:1c: 7e:b6:85:7b:a9:09:49:c9:fd:8e:44:fe:98:d9:db: ca:6b:ca:5d:5f:9f:a3:d7:8b:bf:18:31:dd:07:23: a8:cf:e5:93:e8:8f:82:9f:66:58:5f:c1:e6:49:e7: d4:99:24:3f:3a:1f:eb:b1:36:63:6a:b3:e7:12:09: 6f:ad:75:4d:1d:bb:9c:fe:d6:45:e8:70:b7:f2:93: 99:ac:df:db:0e:19:16:e2:32:30:10:d1:cf:53:ab: 5f:9f:50:14:e4:75:cb:a1:0e:43:c4:c2:d7:18:35: 2a:56:ca:51:cd:71:0f:30:fc:3d:46:a9:74:f1:d4: 18:77:04:74:91:b9:08:0e:c1:32:75:f1:75:d6:37: fe:61:16:c0:41:95:5e:ff:6d:23:4a:ec:ad:72:ff: 50:34:3c:0a:0f:0e:32:99:26:69:c8:85:b2:67:4a: dc:bb:22:87:c7:7b:8a:14:ed:96:25:7e:18:f8:db: 80:bd:93:ce:b4:f3:1b:5b:7e:14:49:b1:19:72:22: 9a:32:8b:f9:81:66:d6:8e:11:ad:47:2b:a0:fc:19: f5:5f:74:3a:b9:3e:91:53:5d:b4:15:60:26:3c:e2: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:54:2D:81:0C:F7:D5:49:63:6D:1D:8E:F1:6D:2C:39:CE:71:E1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c7:b3:30:38:f3:86:63:9c:b1:03:32:01:27:bb:a9:17:a1: 9d:58:fb:d8:a9:f7:32:e1:34:ea:e6:9a:24:15:bc:1b:24:83: 6d:d8:fb:ef:75:ae:0a:5c:0f:7e:82:18:6d:df:ac:56:19:8b: 11:2b:d0:83:2a:a0:a5:66:42:40:a7:57:13:02:23:47:58:4d: d1:a8:a8:b0:ff:23:98:3f:3c:05:5d:c7:40:17:c4:ae:8f:5e: 1d:d2:47:42:29:e6:f0:5f:76:f7:d1:18:53:6e:fa:c0:f5:b1: e6:d3:b4:2e:4a:1d:81:5b:f0:3f:da:f9:ca:6a:67:9f:b3:e9: 08:5f:20:51:71:a0:ea:b8:4a:9c:66:18:c2:dd:ba:18:59:e4: 8b:e5:70:28:63:4b:7c:42:c6:db:34:24:16:98:3b:14:ac:9b: d6:84:01:ca:a5:94:21:43:40:ed:9b:e9:6e:1f:6f:de:e0:8b: 30:80:50:37:d2:6f:db:7c:e8:e5:fb:bb:96:e3:02:74:05:71: 17:a6:d1:ca:bb:96:c3:d6:90:cf:dd:73:e4:40:0f:fd:3d:c6: 20:61:08:19:56:1a:17:8b:db:98:c6:50:50:aa:1c:ab:fb:f3: 08:01:3a:c8:99:11:ce:62:bf:a4:34:8d:e1:83:1b:41:05:e0: e2:a0:c3:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44f1qDzqUad39BgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk ZjhkMWM1ZjYtZTI0My00ZDAxLWE5MjUtNWRkNGQyMDI0ODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj5xYIclOp7gvQld62L9qu/+6SwyPqz0WgRH 8hx+toV7qQlJyf2ORP6Y2dvKa8pdX5+j14u/GDHdByOoz+WT6I+Cn2ZYX8HmSefU mSQ/Oh/rsTZjarPnEglvrXVNHbuc/tZF6HC38pOZrN/bDhkW4jIwENHPU6tfn1AU 5HXLoQ5DxMLXGDUqVspRzXEPMPw9Rql08dQYdwR0kbkIDsEydfF11jf+YRbAQZVe /20jSuytcv9QNDwKDw4ymSZpyIWyZ0rcuyKHx3uKFO2WJX4Y+NuAvZPOtPMbW34U SbEZciKaMov5gWbWjhGtRyug/Bn1X3Q6uT6RU120FWAmPOJptQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOhULYEM99VJY20djvFtLDnOceHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU4ZDJkYjAtY2Y3MC0z NjU5LWE5NjUtNjA5MTdlNmM5MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI7HszA484ZjnLEDMgEnu6kXoZ1Y+9ip9zLhNOrmmiQVvBskg23Y ++91rgpcD36CGG3frFYZixEr0IMqoKVmQkCnVxMCI0dYTdGoqLD/I5g/PAVdx0AX xK6PXh3SR0Ip5vBfdvfRGFNu+sD1sebTtC5KHYFb8D/a+cpqZ5+z6QhfIFFxoOq4 SpxmGMLduhhZ5IvlcChjS3xCxts0JBaYOxSsm9aEAcqllCFDQO2b6W4fb97gizCA UDfSb9t86OX7u5bjAnQFcRem0cq7lsPWkM/dc+RAD/09xiBhCBlWGheL25jGUFCq HKv78wgBOsiZEc5iv6Q0jeGDG0EF4OKgw3Y= -----END CERTIFICATE-----Generated at Sun Apr 27 22:57:10 2025 by rpki-client