$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa File: ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa (raw, json) Hash identifier: uJyzhSwkiBcoRh28EQqxA5Lyo9IfNT/zCFcM1MKiWfk= Subject key identifier: 0A:1E:0B:80:08:93:7B:11:C1:0B:43:87:76:3D:D6:33:39:F1:1D:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E385D8A5BECB1699FA01E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 397193 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:d8:a5:be:cb:16:99:fa:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=755e827a-9c34-4eff-a30c-6efa8f0c9046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:4c:7d:68:05:13:ee:97:cb:6f:34:3b:37: ab:78:e1:30:f8:cf:cc:4e:c5:b6:8d:5f:e2:9c:b0: a5:c7:cd:f9:7f:69:dd:be:2f:77:dd:a8:77:5d:53: 67:1e:36:a7:68:d8:3a:2c:a2:0a:c6:51:d2:98:2e: 62:53:55:5e:ea:50:fe:18:33:c2:81:36:5a:0e:a7: 6d:9a:b8:55:64:e3:a1:28:26:86:bc:3b:d3:a0:3c: b4:26:a4:f5:55:ce:9f:ab:1b:7f:bb:66:79:dd:3f: 41:3b:34:16:31:38:4a:e2:0f:a1:2b:26:9f:3f:d3: 7d:d1:9b:9e:25:4a:84:6a:d5:14:04:0c:98:59:bf: 58:1e:41:2f:bc:9d:99:38:c0:f9:1a:da:ca:bf:33: 49:4d:3b:ef:4d:e5:44:85:cd:7b:3a:ab:74:64:fe: 14:1f:d3:f0:ce:50:87:57:46:cd:1c:b6:ce:cb:bc: 7e:7b:f5:5b:41:7d:3b:30:0c:a6:6f:e2:93:78:d6: af:62:27:65:cb:1d:c0:29:09:a6:ea:eb:14:12:9b: fa:c0:11:99:f3:ce:2e:b0:cf:81:b8:0a:5f:98:22: e2:39:9c:31:53:de:75:dd:9c:7c:81:68:76:b9:3d: 60:ce:dd:f9:02:c7:58:00:74:83:94:78:04:84:ca: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1E:0B:80:08:93:7B:11:C1:0B:43:87:76:3D:D6:33:39:F1:1D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:61:d9:fb:1d:3b:ce:a8:16:da:4b:79:8a:36:30:65:b5:d1: a7:a1:f0:d4:9d:f3:fd:ee:0e:ee:b8:b1:6b:c1:cd:17:82:d8: fc:11:d1:0b:18:bc:c9:00:fe:0b:41:59:b3:32:45:71:91:93: 7f:52:75:ef:bc:24:c8:36:4c:c6:ab:68:99:d4:2a:4f:04:30: e6:15:a2:46:b5:c6:55:27:a7:da:a6:64:10:21:3c:b7:c6:ec: 52:e8:cc:bc:0b:a3:42:1d:33:ff:07:62:c3:d4:04:dc:92:98: 37:b2:35:f1:c3:ad:38:84:93:c7:6d:6f:89:f7:6b:6c:a8:c1: 24:c5:6b:a2:f3:9b:85:e1:7f:e9:5f:bd:bb:c6:14:1d:62:98: 26:c8:8c:23:4c:55:56:d4:ab:80:bb:7c:f9:13:13:21:0d:0b: 0e:d8:08:26:3d:48:53:bd:c8:5b:c7:38:1f:14:24:7a:14:6b: 70:b9:a5:b0:24:f7:82:3c:e1:87:55:ac:63:fb:58:5a:37:22: 2a:e0:69:d2:11:78:e3:00:1a:5f:95:f3:98:d4:d9:14:25:48: 77:d0:43:4a:4d:44:c4:9c:ce:17:d6:02:5d:bd:93:ff:68:1a: 82:3b:3f:d3:2a:98:f0:04:15:5f:bd:56:19:58:85:ef:47:19: 59:60:a4:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44XYpb7LFpn6AeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk NzU1ZTgyN2EtOWMzNC00ZWZmLWEzMGMtNmVmYThmMGM5MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8lMfWgFE+6Xy280OzereOEw+M/MTsW2jV/i nLClx835f2ndvi933ah3XVNnHjanaNg6LKIKxlHSmC5iU1Ve6lD+GDPCgTZaDqdt mrhVZOOhKCaGvDvToDy0JqT1Vc6fqxt/u2Z53T9BOzQWMThK4g+hKyafP9N90Zue JUqEatUUBAyYWb9YHkEvvJ2ZOMD5GtrKvzNJTTvvTeVEhc17Oqt0ZP4UH9PwzlCH V0bNHLbOy7x+e/VbQX07MAymb+KTeNavYidlyx3AKQmm6usUEpv6wBGZ884usM+B uApfmCLiOZwxU9513Zx8gWh2uT1gzt35AsdYAHSDlHgEhMqzmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAoeC4AIk3sRwQtDh3Y91jM58R0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWM1MGI0NjQtZTZkZS0z ZTQ0LWJiYmUtN2I1Y2JjZTA1NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAVh2fsdO86oFtpLeYo2MGW10aeh8NSd8/3uDu64sWvBzReC2PwR 0QsYvMkA/gtBWbMyRXGRk39Sde+8JMg2TMaraJnUKk8EMOYVoka1xlUnp9qmZBAh PLfG7FLozLwLo0IdM/8HYsPUBNySmDeyNfHDrTiEk8dtb4n3a2yowSTFa6Lzm4Xh f+lfvbvGFB1imCbIjCNMVVbUq4C7fPkTEyENCw7YCCY9SFO9yFvHOB8UJHoUa3C5 pbAk94I84YdVrGP7WFo3IirgadIReOMAGl+V85jU2RQlSHfQQ0pNRMSczhfWAl29 k/9oGoI7P9MqmPAEFV+9VhlYhe9HGVlgpFs= -----END CERTIFICATE-----Generated at Sun Apr 27 23:01:55 2025 by rpki-client