$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a90047c9-0942-35ff-8213-f8d6c16de6a8.roa File: a90047c9-0942-35ff-8213-f8d6c16de6a8.roa (raw, json) Hash identifier: +0kfdCJ6g2LMLxTxNKb/Bk66FFoSaJs0pPwCIHpYz+4= Subject key identifier: D0:E5:D3:FC:36:2E:72:05:7E:B9:4A:08:72:F0:DE:8D:36:0D:A0:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E385934C8CB48041807400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a90047c9-0942-35ff-8213-f8d6c16de6a8.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 36621 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:93:4c:8c:b4:80:41:80:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=3b2ed9b4-aaec-4e88-b44b-8e140979e7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:11:4e:c2:d2:bd:c3:35:9d:eb:f5:04:58:94: 9a:33:d6:20:43:f0:1f:f3:4c:0b:91:dc:fe:1f:f5: 14:fd:57:91:e5:af:9f:91:5c:04:ea:83:66:a5:b7: 0b:4d:e5:40:73:b3:82:07:48:db:31:2f:2a:f2:25: bb:17:ac:3a:d3:83:3b:09:5c:7c:b9:85:e1:4a:e4: 6e:1a:4e:86:ea:f5:8f:40:0f:48:76:9c:7b:72:b5: 04:25:78:fb:2e:19:55:b5:b4:69:5e:92:94:5e:e7: 31:e6:16:23:eb:5a:67:6f:4c:f7:c1:a2:f5:40:67: 3c:79:6d:7b:3d:07:42:ac:ac:af:98:e5:d2:ce:31: 4c:dd:be:e5:e8:4a:77:09:36:94:69:86:c2:08:6d: 03:f5:e2:56:4f:89:54:09:76:8a:49:01:52:78:1a: 93:30:ff:70:d0:03:cb:5b:7e:a3:13:8f:a5:55:8a: f9:fc:41:55:6b:b5:7b:89:d4:44:e6:58:59:98:72: 05:04:e3:b1:52:33:87:33:7a:81:bf:ab:73:77:fa: 15:02:27:86:b4:bd:2b:1c:4a:03:30:70:8b:95:f9: 40:08:08:96:79:23:f6:dc:cb:01:26:d9:a9:e6:72: f7:28:fc:0c:88:98:08:0f:ab:e2:31:bd:ee:1f:d6: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E5:D3:FC:36:2E:72:05:7E:B9:4A:08:72:F0:DE:8D:36:0D:A0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a90047c9-0942-35ff-8213-f8d6c16de6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b2:0b:b5:f7:9b:86:28:32:a8:19:24:2c:54:0c:ec:0a:d3: 82:8b:8f:39:29:01:a3:3b:5b:f3:4b:20:ef:3b:8a:e9:79:b1: ff:fd:6a:c2:d7:0f:61:e7:e9:74:8f:c9:b5:5e:38:27:2f:8b: 56:4d:35:29:e1:5a:1e:30:45:72:e3:10:45:80:43:f0:78:24: d9:5f:65:de:ce:a7:b6:52:34:9d:a9:f4:14:ac:ca:4a:ac:22: b0:17:ad:41:68:02:ae:af:7a:59:2a:df:4c:c7:a2:d8:81:58: 4c:ab:7a:9c:48:85:36:51:64:c8:c9:73:83:5c:32:df:9e:fe: e4:89:96:ae:31:fa:c9:5d:8f:bc:7a:c7:3e:f1:b0:66:c3:16: 01:ff:2d:92:e8:00:1d:bf:8c:1d:fa:bd:32:c1:83:7e:ba:42: 52:0d:a6:a6:47:64:6b:a3:bc:f1:5a:25:dd:43:a7:92:4a:99: 82:69:06:22:10:73:76:86:c3:b9:ac:53:3c:c8:53:7f:57:8f: 16:b6:b8:e9:48:6a:f8:3d:00:fb:62:8a:eb:f8:8f:82:69:94: c0:e8:86:2a:7a:75:22:da:24:e6:b5:f1:f4:80:b6:c7:ef:83: 19:b2:81:7b:03:bc:8d:93:26:51:e9:2b:52:8e:11:91:ad:e9: fc:fe:6c:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44WTTIy0gEGAdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk M2IyZWQ5YjQtYWFlYy00ZTg4LWI0NGItOGUxNDA5NzllN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xFOwtK9wzWd6/UEWJSaM9YgQ/Af80wLkdz+ H/UU/VeR5a+fkVwE6oNmpbcLTeVAc7OCB0jbMS8q8iW7F6w604M7CVx8uYXhSuRu Gk6G6vWPQA9Idpx7crUEJXj7LhlVtbRpXpKUXucx5hYj61pnb0z3waL1QGc8eW17 PQdCrKyvmOXSzjFM3b7l6Ep3CTaUaYbCCG0D9eJWT4lUCXaKSQFSeBqTMP9w0APL W36jE4+lVYr5/EFVa7V7idRE5lhZmHIFBOOxUjOHM3qBv6tzd/oVAieGtL0rHEoD MHCLlflACAiWeSP23MsBJtmp5nL3KPwMiJgID6viMb3uH9bX2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDl0/w2LnIFfrlKCHLw3o02DaDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTkwMDQ3YzktMDk0Mi0z NWZmLTgyMTMtZjhkNmMxNmRlNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeyC7X3m4YoMqgZJCxUDOwK04KLjzkpAaM7W/NLIO87iul5sf/9 asLXD2Hn6XSPybVeOCcvi1ZNNSnhWh4wRXLjEEWAQ/B4JNlfZd7Op7ZSNJ2p9BSs ykqsIrAXrUFoAq6velkq30zHotiBWEyrepxIhTZRZMjJc4NcMt+e/uSJlq4x+sld j7x6xz7xsGbDFgH/LZLoAB2/jB36vTLBg366QlINpqZHZGujvPFaJd1Dp5JKmYJp BiIQc3aGw7msUzzIU39Xjxa2uOlIavg9APtiiuv4j4JplMDohip6dSLaJOa18fSA tsfvgxmygXsDvI2TJlHpK1KOEZGt6fz+bOk= -----END CERTIFICATE-----Generated at Mon Apr 28 11:01:03 2025 by rpki-client