$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa File: b0c80747-6ca4-38c8-bdba-492465c92714.roa (raw, json) Hash identifier: i3T4hUwmBReG2bKnG77K+CZl6Sc+enSFK4pDi1lqVIU= Subject key identifier: 95:98:BF:1E:7A:B4:2D:7E:EF:37:B2:45:C9:0C:84:D0:F4:EF:0B:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3892F0567B13E82C33040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 397198 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:2f:05:67:b1:3e:82:c3:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=1012e2b2-bdb1-4adf-8ee3-ad1f6249e93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:0f:96:ea:7c:46:b2:5a:24:2f:62:c4:29: 43:48:ad:a5:2f:6d:cc:9e:d8:25:43:f4:fb:d7:a2: 86:00:67:57:66:ec:4f:59:e4:c4:4e:79:32:44:98: e9:42:66:55:1c:b8:4b:15:9e:97:79:9c:b9:92:b4: 08:55:35:b2:e7:02:84:53:83:89:f1:22:c6:83:fb: 99:66:25:27:3f:82:99:b4:7c:46:04:61:9b:14:a0: 01:81:76:0a:3b:63:2e:16:7c:e6:74:7d:c4:dd:2d: 15:a1:1c:fb:f6:ce:31:f5:91:b7:cf:a8:58:dd:1d: ed:c0:eb:4d:00:be:55:89:b8:34:dd:2c:90:df:04: d8:f3:58:56:30:6a:39:15:2e:d3:cb:9d:7d:da:1c: b9:66:7f:68:c8:d4:e3:07:a6:ee:d0:5f:67:b7:74: 98:a1:bf:cc:ed:59:82:45:45:dd:28:a5:ac:1d:8a: 18:85:37:c3:ed:37:0c:c6:5f:bb:bf:5c:7a:ad:63: 21:c7:0e:08:c3:fc:f5:81:05:fa:d8:33:aa:77:66: ba:89:ea:0d:b4:ce:59:c0:4b:51:fa:c8:6f:72:fe: 03:a3:2f:1f:6b:56:e3:4e:e4:2a:1b:2f:59:81:7e: 72:42:37:3e:e1:f8:72:f0:53:02:1b:28:d1:31:4a: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:98:BF:1E:7A:B4:2D:7E:EF:37:B2:45:C9:0C:84:D0:F4:EF:0B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f3:bd:7f:c9:c5:e2:60:94:32:3d:c1:4e:94:5b:95:59:cf: ca:e0:98:3a:81:f3:4f:4c:7d:d9:50:b3:6c:5e:f7:56:b2:ec: b3:ca:e5:1d:8f:5b:96:71:fb:02:b0:35:fb:c1:7d:73:45:35: 2e:03:b9:aa:cf:db:38:f4:4d:69:38:32:45:7d:08:97:7c:e2: 74:41:b5:65:d6:01:e0:2b:7f:28:f9:57:6e:cb:c6:f0:07:9c: 7f:d9:ea:bc:a3:f0:43:91:04:d5:74:88:8d:9b:53:f4:36:36: af:fd:ad:11:44:e8:0c:cf:b1:75:33:45:8d:d2:ee:83:6b:a8: 26:eb:37:f2:c9:59:26:9f:f9:06:a9:69:96:12:3f:cd:8f:09: 97:fb:1f:b0:e1:88:f6:64:8d:fb:70:f7:b2:3e:3d:ac:43:6e: 2e:db:63:2d:73:f0:3c:38:81:27:5f:46:9a:30:41:fc:cb:3c: 25:9a:84:9e:8b:d7:c8:64:d5:f1:f1:7e:22:39:0a:35:23:d1: 80:f8:a3:b3:fb:79:07:5f:6b:3d:a7:ce:85:13:80:a9:04:91: 14:00:00:c0:22:21:05:67:6c:11:ca:b1:47:ad:cf:c6:9a:ff: 6d:93:03:39:ee:c4:c5:0d:88:c2:d3:05:63:4f:44:68:f0:f8: c4:ef:78:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44kvBWexPoLDMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk MTAxMmUyYjItYmRiMS00YWRmLThlZTMtYWQxZjYyNDllOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk4Plup8RrJaJC9ixClDSK2lL23MntglQ/T7 16KGAGdXZuxPWeTETnkyRJjpQmZVHLhLFZ6XeZy5krQIVTWy5wKEU4OJ8SLGg/uZ ZiUnP4KZtHxGBGGbFKABgXYKO2MuFnzmdH3E3S0VoRz79s4x9ZG3z6hY3R3twOtN AL5Vibg03SyQ3wTY81hWMGo5FS7Ty5192hy5Zn9oyNTjB6bu0F9nt3SYob/M7VmC RUXdKKWsHYoYhTfD7TcMxl+7v1x6rWMhxw4Iw/z1gQX62DOqd2a6ieoNtM5ZwEtR +shvcv4Doy8fa1bjTuQqGy9ZgX5yQjc+4fhy8FMCGyjRMUrCAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJWYvx56tC1+7zeyRckMhND07wteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBjODA3NDctNmNhNC0z OGM4LWJkYmEtNDkyNDY1YzkyNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjzvX/JxeJglDI9wU6UW5VZz8rgmDqB809MfdlQs2xe91ay7LPK 5R2PW5Zx+wKwNfvBfXNFNS4DuarP2zj0TWk4MkV9CJd84nRBtWXWAeArfyj5V27L xvAHnH/Z6ryj8EORBNV0iI2bU/Q2Nq/9rRFE6AzPsXUzRY3S7oNrqCbrN/LJWSaf +QapaZYSP82PCZf7H7DhiPZkjftw97I+PaxDbi7bYy1z8Dw4gSdfRpowQfzLPCWa hJ6L18hk1fHxfiI5CjUj0YD4o7P7eQdfaz2nzoUTgKkEkRQAAMAiIQVnbBHKsUet z8aa/22TAznuxMUNiMLTBWNPRGjw+MTveLg= -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:17 2025 by rpki-client