$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa File: 9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa (raw, json) Hash identifier: DKOIpKrVt/FUPxjl/ZEVMxo/Y+81ehso3nTc4XpHDc4= Subject key identifier: ED:8F:4D:C0:06:32:C7:B2:87:1F:86:42:6D:6B:E4:6F:83:09:CB:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E387D97A0E377909464DA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 397196 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:d9:7a:0e:37:79:09:46:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=94ad0822-22db-4b35-8f72-99be96c4be64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:65:50:8a:58:59:2f:0f:0b:42:c7:5f:a2: 16:d6:e1:3e:ec:de:31:17:01:64:c0:9d:3a:b2:5e: b6:d8:ce:9c:c8:5f:50:4c:85:54:8f:ce:db:45:bd: a9:ab:c1:1e:93:df:9f:27:d0:80:9a:9f:27:84:9e: 62:3c:ba:91:f3:cf:06:14:8a:ce:76:d0:8f:30:f1: 33:60:ba:6d:4d:c9:92:67:d0:1b:68:4a:ba:29:81: 38:87:09:f2:d3:a5:02:61:34:4c:f2:66:21:22:e2: 88:f9:3b:8c:b5:f2:80:d3:5d:03:f0:9e:fb:dd:fd: 7e:4f:a6:65:5d:fc:92:35:7c:d4:09:7e:db:da:89: 6e:1b:35:46:d9:f6:33:cd:c7:34:62:90:68:5c:a8: 45:a1:9b:67:87:ab:b1:1a:da:3a:cb:61:e3:3b:c4: cf:c0:b7:6e:ec:9a:be:2f:5d:78:2a:7c:77:4c:76: 6d:b5:8e:41:c1:47:ae:0b:7f:4d:03:ea:d2:63:44: ea:b4:8a:ad:5f:e3:63:a5:98:b2:f1:13:6e:fa:28: 2d:8a:da:f2:69:48:16:3b:14:0c:ac:d4:d3:e4:44: b5:f5:88:93:26:34:d3:4a:65:c5:7a:31:77:46:d9: 86:8e:e6:b2:e3:37:2b:1a:60:62:95:c9:b6:34:63: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:4D:C0:06:32:C7:B2:87:1F:86:42:6D:6B:E4:6F:83:09:CB:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b1:2e:54:92:22:e9:89:ef:1a:54:27:c7:fc:27:6d:07:c0: 7a:d1:f8:54:0b:5c:1d:e9:d5:ed:24:f0:57:12:a6:1f:d3:be: 7e:9d:6a:2c:5e:a7:bb:a0:95:bc:f7:16:0f:71:ab:ea:ef:0a: 35:48:f5:9f:d5:dc:aa:a8:22:43:f5:c9:b1:80:73:54:e4:85: 74:72:1b:72:d4:a2:71:7e:15:a4:ec:b7:4c:42:54:4c:60:99: d7:79:5e:f8:f2:da:ef:e1:cc:ff:0a:ee:7c:4f:c6:f8:48:57: 3b:c1:97:5f:8c:ca:c6:ee:9d:c4:4f:dc:90:15:77:8d:c2:13: 20:0b:ea:18:86:f6:f4:fd:98:f6:11:5e:1a:62:b1:fa:ba:79: 54:b6:f6:11:00:65:95:c3:98:02:c5:37:e0:45:61:90:44:6f: a0:d1:72:09:4a:eb:80:b1:8f:6a:2d:49:4a:ff:f8:9e:fc:47: 95:8f:b9:31:d5:33:93:89:09:57:c6:fc:b7:f2:ba:6c:b7:52: bb:ac:2b:d9:b6:ea:01:ff:d0:aa:9a:d7:17:57:e9:45:5c:f1: 28:55:3b:eb:78:2e:db:7c:a7:49:a5:a4:8d:dc:48:6d:f3:95: 19:d5:ce:7a:68:e0:41:6f:e2:5b:73:22:65:c6:be:e8:48:ce: e6:b6:65:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44fZeg43eQlGTaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk OTRhZDA4MjItMjJkYi00YjM1LThmNzItOTliZTk2YzRiZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQdlUIpYWS8PC0LHX6IW1uE+7N4xFwFkwJ06 sl622M6cyF9QTIVUj87bRb2pq8Eek9+fJ9CAmp8nhJ5iPLqR888GFIrOdtCPMPEz YLptTcmSZ9AbaEq6KYE4hwny06UCYTRM8mYhIuKI+TuMtfKA010D8J773f1+T6Zl XfySNXzUCX7b2oluGzVG2fYzzcc0YpBoXKhFoZtnh6uxGto6y2HjO8TPwLdu7Jq+ L114Knx3THZttY5BwUeuC39NA+rSY0TqtIqtX+NjpZiy8RNu+igtitryaUgWOxQM rNTT5ES19YiTJjTTSmXFejF3RtmGjuay4zcrGmBilcm2NGPMrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO2PTcAGMseyhx+GQm1r5G+DCcs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWZlZjZiYjAtZDg0ZC0z YTkzLTk4MDgtNWJkZmMxZTJiZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOxLlSSIumJ7xpUJ8f8J20HwHrR+FQLXB3p1e0k8FcSph/Tvn6d aixep7uglbz3Fg9xq+rvCjVI9Z/V3KqoIkP1ybGAc1TkhXRyG3LUonF+FaTst0xC VExgmdd5Xvjy2u/hzP8K7nxPxvhIVzvBl1+MysbuncRP3JAVd43CEyAL6hiG9vT9 mPYRXhpisfq6eVS29hEAZZXDmALFN+BFYZBEb6DRcglK64Cxj2otSUr/+J78R5WP uTHVM5OJCVfG/Lfyumy3UrusK9m26gH/0Kqa1xdX6UVc8ShVO+t4Ltt8p0mlpI3c SG3zlRnVznpo4EFv4ltzImXGvuhIzua2ZdY= -----END CERTIFICATE-----Generated at Mon Apr 28 02:10:00 2025 by rpki-client