$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa File: 85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa (raw, json) Hash identifier: BjT08VeRCvaDjquYCPxtu7NQj4y3veKN6l3wsUTSs3A= Subject key identifier: 5B:42:38:F5:FC:2A:91:00:84:21:90:2F:93:E2:FE:4E:82:13:8D:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E389F1A76AA7F129D53D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 396573 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:f1:a7:6a:a7:f1:29:d5:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=d9d5c684-48ce-4bcc-9c55-ae76eb50c7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:94:db:1e:bb:05:3a:9b:b5:17:d8:e1:af: 4d:23:92:20:17:dc:b1:3c:38:cd:ea:a9:1c:56:f9: 33:c0:9e:12:08:c7:46:ca:db:8c:77:14:0a:b0:9f: be:bd:d5:77:e4:7b:fc:2e:77:58:40:f1:e0:fd:30: 54:72:19:04:03:b3:0e:d2:50:e3:db:55:f2:40:4d: f7:d9:4f:27:d9:82:d5:d0:1a:e4:52:55:50:8a:fe: e3:ba:e7:19:7a:2e:da:b1:52:64:2f:42:08:46:68: 07:c3:30:12:af:68:ed:c0:c2:88:a0:70:5e:ba:84: fc:a5:f3:3e:70:ce:b5:79:8e:2f:ad:b8:75:58:b1: 82:e9:59:c4:16:7e:45:35:4c:ec:f0:4f:93:44:07: 43:f3:2f:0d:32:d1:fe:e5:93:e1:87:95:e1:a3:0f: 7f:27:34:2a:39:6c:59:0d:ff:9c:10:36:51:d1:5e: a4:c0:29:9e:76:33:6a:3d:c8:9e:5a:02:77:b6:f7: f8:28:e7:ed:20:26:b2:fe:37:63:fa:4c:61:60:e9: 65:4c:a2:ef:9d:cd:70:5b:fe:b6:1a:c4:9d:38:9c: 83:0f:af:d5:50:8d:c0:7d:95:d2:8c:16:56:98:27: fd:08:70:92:fb:c0:fe:f2:67:ad:ba:55:76:78:23: fc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:38:F5:FC:2A:91:00:84:21:90:2F:93:E2:FE:4E:82:13:8D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3e:1a:3f:e3:eb:31:cc:4a:95:ce:0c:1a:84:8e:f9:10:c8: 61:bf:12:ea:b8:55:f7:f8:93:60:98:6a:c5:6f:9f:bf:b9:0e: 83:66:73:cf:e8:55:d2:f1:c4:19:7e:d3:44:b4:71:c9:03:20: 6b:61:6e:ea:57:4f:07:83:ea:3c:15:79:59:b5:6b:c1:6c:1d: 4b:91:62:62:61:c2:96:26:f7:e9:0d:d0:cc:a3:8b:fb:a2:50: 5b:ec:e0:2c:72:ae:b8:8a:2c:08:0c:c5:1c:8a:f3:59:2c:f3: 4c:77:b4:6f:8e:eb:9e:f9:5b:97:57:e3:31:46:ee:5a:6e:af: 2b:ed:cd:50:c8:24:aa:60:41:42:30:c5:42:68:2b:e1:c1:1a: fe:62:64:21:0b:33:eb:58:f9:92:71:6b:38:14:78:3a:db:81: 07:55:15:3e:ff:6b:58:fe:ea:51:43:78:a1:a9:f6:83:38:7d: a0:e4:c4:6d:fc:2b:41:4f:29:80:db:50:32:bc:a1:68:99:93: d1:3b:8b:09:59:b1:6c:5f:a9:f7:73:6d:79:90:32:22:10:e4: c1:bf:5a:fc:5d:d0:28:0b:b9:ee:68:66:e1:5e:ca:ba:4d:ed: f3:50:34:b5:c1:0e:02:6b:a3:6a:49:90:f2:d2:3d:8c:29:25: 05:51:6c:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44nxp2qn8SnVPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk ZDlkNWM2ODQtNDhjZS00YmNjLTljNTUtYWU3NmViNTBjN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0qU2x67BTqbtRfY4a9NI5IgF9yxPDjN6qkc VvkzwJ4SCMdGytuMdxQKsJ++vdV35Hv8LndYQPHg/TBUchkEA7MO0lDj21XyQE33 2U8n2YLV0BrkUlVQiv7juucZei7asVJkL0IIRmgHwzASr2jtwMKIoHBeuoT8pfM+ cM61eY4vrbh1WLGC6VnEFn5FNUzs8E+TRAdD8y8NMtH+5ZPhh5Xhow9/JzQqOWxZ Df+cEDZR0V6kwCmedjNqPcieWgJ3tvf4KOftICay/jdj+kxhYOllTKLvnc1wW/62 GsSdOJyDD6/VUI3AfZXSjBZWmCf9CHCS+8D+8metulV2eCP8JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFtCOPX8KpEAhCGQL5Pi/k6CE40DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVhM2FjNGEtODNmMy0z ZjYwLTkwZmEtZTUwMmU4M2Y3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGA+Gj/j6zHMSpXODBqEjvkQyGG/Euq4Vff4k2CYasVvn7+5DoNm c8/oVdLxxBl+00S0cckDIGthbupXTweD6jwVeVm1a8FsHUuRYmJhwpYm9+kN0Myj i/uiUFvs4CxyrriKLAgMxRyK81ks80x3tG+O6575W5dX4zFG7lpuryvtzVDIJKpg QUIwxUJoK+HBGv5iZCELM+tY+ZJxazgUeDrbgQdVFT7/a1j+6lFDeKGp9oM4faDk xG38K0FPKYDbUDK8oWiZk9E7iwlZsWxfqfdzbXmQMiIQ5MG/Wvxd0CgLue5oZuFe yrpN7fNQNLXBDgJro2pJkPLSPYwpJQVRbOQ= -----END CERTIFICATE-----Generated at Sun Apr 27 19:10:11 2025 by rpki-client