$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b07a4970-3aa4-3fbd-ba92-6bc93375978c.roa File: b07a4970-3aa4-3fbd-ba92-6bc93375978c.roa (raw, json) Hash identifier: j+B5tsYyt8e3OOgm2VYAtYKN9gaG8jX/5g/UAcoeCVA= Subject key identifier: 4D:47:97:92:31:50:EA:5A:7A:4C:FF:91:5D:01:57:1B:1C:A6:54:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21E8B3BE33689966EB700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b07a4970-3aa4-3fbd-ba92-6bc93375978c.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 396581 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:8b:3b:e3:36:89:96:6e:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=ead9c951-b743-4b0d-9b0b-a499ee3efecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:6b:0d:58:84:8e:9a:22:88:58:25:e9:5f: a5:28:c9:72:97:1e:ca:2d:e7:31:7d:51:75:77:ba: ee:b6:ff:c4:3d:d5:f2:79:12:26:66:0f:32:3c:8c: 3f:b8:38:24:4f:0b:74:85:7e:63:7a:20:72:6c:37: e8:e8:5b:5e:bd:3e:31:e4:8e:29:b4:37:c4:d1:4d: 06:55:78:73:51:1a:97:65:7c:5d:24:0f:e7:73:e9: 96:c3:af:df:4d:35:0c:8b:db:86:3b:41:68:ba:86: 3d:82:42:04:57:76:8c:76:bf:e7:8e:84:f6:39:34: 7c:9a:20:1c:b9:b9:1b:89:d6:1a:b9:09:22:60:22: 33:60:0b:19:7a:7a:d8:f1:df:f3:a2:42:e6:4d:cb: ed:31:07:ba:95:8b:cd:52:2d:4f:81:93:7c:58:1e: 77:39:bc:ea:fc:58:8d:5f:f1:14:03:df:47:56:e8: 39:ea:f4:46:73:a6:22:03:9a:2a:5a:35:70:5a:54: 2d:70:1a:e4:a0:1f:92:7b:7b:2a:85:b3:f3:e1:57: be:04:ba:57:b9:e4:ad:9d:60:e0:2f:31:4c:13:4e: e9:ba:02:d7:70:34:95:14:da:a3:39:af:52:5c:4c: e0:00:e2:dc:c4:be:86:23:13:51:3f:13:29:53:46: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:47:97:92:31:50:EA:5A:7A:4C:FF:91:5D:01:57:1B:1C:A6:54:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b07a4970-3aa4-3fbd-ba92-6bc93375978c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ee:48:b5:de:56:3d:20:b6:8e:10:db:90:bc:ab:43:46:2f: 2a:45:b0:a3:c0:d3:9f:1c:fb:b4:53:d7:99:9f:e4:7d:5b:3d: 32:6f:84:54:ef:74:41:47:6e:75:2b:ac:27:48:45:b2:65:d4: 72:83:86:47:6b:0c:4e:8c:b9:39:22:4e:d2:f1:a4:ea:70:99: 89:42:69:44:45:a1:f2:f2:c9:0a:e9:c6:d7:71:23:37:a3:5c: 60:de:8a:c5:29:7f:f1:41:89:95:06:bc:de:50:37:c4:ac:86: df:1f:f5:40:dd:ef:10:9d:77:a1:b8:01:10:9e:55:92:fe:6e: a7:77:cc:a0:91:30:8a:56:92:84:21:a3:3c:b3:ae:4e:74:0f: 0b:08:0b:0d:b8:56:2c:9a:26:27:55:84:ae:a4:bd:c8:02:37: d2:fb:97:18:ca:b4:2c:07:30:2e:86:44:ac:9f:72:4a:80:c7: eb:66:9d:43:da:a7:f1:f9:98:95:cf:b4:51:7c:f4:54:31:1c: 18:0e:4b:b1:b9:74:f4:4e:a7:ff:62:a9:11:8d:61:81:4d:74: 24:66:74:61:1e:a8:dd:8c:da:86:63:bc:87:6a:20:48:12:1a: 0d:df:0c:ec:9f:23:10:05:21:84:01:cc:fa:11:d1:73:21:a9: 1f:82:c7:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh6LO+M2iZZutwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk ZWFkOWM5NTEtYjc0My00YjBkLTliMGItYTQ5OWVlM2VmZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlprDViEjpoiiFgl6V+lKMlylx7KLecxfVF1 d7rutv/EPdXyeRImZg8yPIw/uDgkTwt0hX5jeiBybDfo6FtevT4x5I4ptDfE0U0G VXhzURqXZXxdJA/nc+mWw6/fTTUMi9uGO0FouoY9gkIEV3aMdr/njoT2OTR8miAc ubkbidYauQkiYCIzYAsZenrY8d/zokLmTcvtMQe6lYvNUi1PgZN8WB53Obzq/FiN X/EUA99HVug56vRGc6YiA5oqWjVwWlQtcBrkoB+Se3sqhbPz4Ve+BLpXueStnWDg LzFME07pugLXcDSVFNqjOa9SXEzgAOLcxL6GIxNRPxMpU0YrUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE1Hl5IxUOpaekz/kV0BVxscplSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjA3YTQ5NzAtM2FhNC0z ZmJkLWJhOTItNmJjOTMzNzU5NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3uSLXeVj0gto4Q25C8q0NGLypFsKPA058c+7RT15mf5H1bPTJv hFTvdEFHbnUrrCdIRbJl1HKDhkdrDE6MuTkiTtLxpOpwmYlCaURFofLyyQrpxtdx IzejXGDeisUpf/FBiZUGvN5QN8Ssht8f9UDd7xCdd6G4ARCeVZL+bqd3zKCRMIpW koQhozyzrk50DwsICw24ViyaJidVhK6kvcgCN9L7lxjKtCwHMC6GRKyfckqAx+tm nUPap/H5mJXPtFF89FQxHBgOS7G5dPROp/9iqRGNYYFNdCRmdGEeqN2M2oZjvIdq IEgSGg3fDOyfIxAFIYQBzPoR0XMhqR+Cx8g= -----END CERTIFICATE-----Generated at Mon Apr 28 00:52:23 2025 by rpki-client