$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b90f61ab-858f-3e0b-9984-a45a284d5726.roa File: b90f61ab-858f-3e0b-9984-a45a284d5726.roa (raw, json) Hash identifier: lPNqLXJoirXm0FqjlmE1qA2c7vLi+OKYJNFY9TbvjTY= Subject key identifier: 08:62:35:FF:3D:21:11:4F:81:20:04:49:6A:4C:AC:46:1B:BB:AB:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E388DA6EEF772FBA9893E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b90f61ab-858f-3e0b-9984-a45a284d5726.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396586 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:da:6e:ef:77:2f:ba:98:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=37ac2da9-3241-4448-bb89-0bb69c6ddf69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:a0:5a:48:54:0c:4c:a6:e8:15:4f:77:74: 81:cb:d1:23:c9:d7:e5:3c:53:5c:8f:d2:53:49:17: 93:7b:77:84:b5:0a:33:04:80:c2:cc:2a:9f:b9:14: ea:30:b0:be:7f:07:1b:e5:1b:9b:4d:2c:b4:17:ba: 42:01:e8:2a:4c:d8:eb:6c:3c:91:a2:58:6c:9f:a1: f2:d8:4e:6e:db:5e:e4:78:5a:8b:58:ba:7f:c0:1c: 9c:57:16:a8:16:d8:ba:dd:13:fc:48:61:80:91:8a: c2:c2:25:bb:e1:65:6b:89:fa:33:da:44:1e:2c:5e: 6c:cf:95:ef:27:f4:a2:8f:44:59:89:da:af:03:ab: 4d:34:3b:69:b1:11:40:0c:15:49:f0:95:5c:66:82: b5:96:8f:26:b5:bc:9d:52:93:43:4c:37:94:9e:c7: de:c4:17:42:c8:5e:16:65:09:4d:e8:03:d8:81:4d: 21:05:89:7a:bc:f6:6f:d0:ab:0f:55:55:93:8a:b7: c3:d9:56:ed:fa:d6:ce:e0:4a:e3:91:8a:43:07:1d: 8f:19:37:4c:a0:b2:1b:02:14:ef:95:00:af:b9:d5: bf:1c:26:69:1f:3a:1b:7d:ba:99:0e:9d:77:e0:22: bd:b2:6e:29:c9:27:0d:35:b6:c4:15:c6:1a:81:15: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:62:35:FF:3D:21:11:4F:81:20:04:49:6A:4C:AC:46:1B:BB:AB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b90f61ab-858f-3e0b-9984-a45a284d5726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:91:3c:13:ab:f8:2b:62:a8:3f:41:b0:25:54:ab:cb:08:1f: 24:93:8f:75:23:14:80:41:eb:30:d9:2d:03:fe:ba:14:c6:c3: 50:78:4b:0d:d5:ae:63:6b:8d:57:26:f4:0d:4a:c8:47:b2:a7: e7:6f:9d:57:86:05:af:19:84:ba:89:78:ff:8f:00:59:d1:0b: 34:a4:56:d5:7a:60:6d:a1:8e:e9:f5:21:4c:de:d9:18:94:9b: 94:67:ba:e0:78:65:2c:f3:f8:7f:8a:da:31:c0:12:be:db:c7: d7:04:81:d0:4f:d4:5c:72:c3:43:6d:6a:c7:70:2e:1f:1c:0a: 69:0c:dd:76:be:cd:eb:d4:10:21:d1:8f:13:fe:f0:24:79:04: 3d:9e:c9:29:f5:9c:72:40:29:41:ad:ea:c8:ff:89:e3:bb:0e: bb:61:e4:49:49:68:0b:2e:49:9a:ed:c8:6e:c7:57:04:66:65: 85:e0:01:1b:43:21:c2:d9:16:c7:1d:c4:bc:21:6c:d1:97:89: 51:bd:bc:1f:e9:6b:96:9a:b7:e6:0b:79:9c:04:f3:30:2b:19: 89:d2:c3:3e:88:6c:cb:52:d7:9a:a1:9f:de:d1:00:c2:28:b5: f3:0c:92:cf:15:4e:74:43:70:db:8b:2b:59:36:c6:aa:c9:73: 8a:42:ae:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44jabu93L7qYk+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk MzdhYzJkYTktMzI0MS00NDQ4LWJiODktMGJiNjljNmRkZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw6gWkhUDEym6BVPd3SBy9EjydflPFNcj9JT SReTe3eEtQozBIDCzCqfuRTqMLC+fwcb5RubTSy0F7pCAegqTNjrbDyRolhsn6Hy 2E5u217keFqLWLp/wBycVxaoFti63RP8SGGAkYrCwiW74WVrifoz2kQeLF5sz5Xv J/Sij0RZidqvA6tNNDtpsRFADBVJ8JVcZoK1lo8mtbydUpNDTDeUnsfexBdCyF4W ZQlN6APYgU0hBYl6vPZv0KsPVVWTirfD2Vbt+tbO4ErjkYpDBx2PGTdMoLIbAhTv lQCvudW/HCZpHzobfbqZDp134CK9sm4pyScNNbbEFcYagRXulQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhiNf89IRFPgSAESWpMrEYbu6t9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjkwZjYxYWItODU4Zi0z ZTBiLTk5ODQtYTQ1YTI4NGQ1NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCRPBOr+CtiqD9BsCVUq8sIHySTj3UjFIBB6zDZLQP+uhTGw1B4 Sw3VrmNrjVcm9A1KyEeyp+dvnVeGBa8ZhLqJeP+PAFnRCzSkVtV6YG2hjun1IUze 2RiUm5RnuuB4ZSzz+H+K2jHAEr7bx9cEgdBP1Fxyw0NtasdwLh8cCmkM3Xa+zevU ECHRjxP+8CR5BD2eySn1nHJAKUGt6sj/ieO7Drth5ElJaAsuSZrtyG7HVwRmZYXg ARtDIcLZFscdxLwhbNGXiVG9vB/pa5aat+YLeZwE8zArGYnSwz6IbMtS15qhn97R AMIotfMMks8VTnRDcNuLK1k2xqrJc4pCrug= -----END CERTIFICATE-----Generated at Sun Apr 27 23:00:09 2025 by rpki-client