$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa File: ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa (raw, json) Hash identifier: 4vws1COBT4VuJxodPEx+v8+rgSacU7NHb5NmeKTXRGc= Subject key identifier: 6F:68:96:E2:C0:7B:7B:04:9A:1A:7B:7B:4A:B4:57:77:7A:79:50:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584913AC43B57E7C4D00EDB0B600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:43:b5:7e:7c:4d:00:ed:b0:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=c6ec1005-c0e0-45e7-b011-0a61172061ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8b:9b:23:50:db:3b:96:6f:21:7e:9e:02:8d: 5d:46:de:00:e9:b7:65:5a:6a:1c:5b:7b:1d:8f:a5: d2:5b:e3:37:a7:5b:6c:d4:35:2d:3a:d0:d7:09:0e: 9b:64:9e:69:cb:12:75:3e:34:e8:20:d4:ff:4c:03: cc:92:d1:70:9d:19:90:d5:34:da:7b:cc:92:7f:f3: 56:14:4f:0b:3a:a1:bb:a4:bd:78:f5:05:f0:9b:c9: 54:4c:c3:79:8e:81:2c:6a:e9:38:5a:37:59:60:c0: fd:3e:9e:bd:a8:92:ce:70:03:45:8e:f2:8c:22:bc: 69:67:47:83:bb:d2:ef:d9:4a:19:56:af:89:7b:9a: 5c:66:28:ff:8f:7b:ad:bb:be:19:d3:23:8c:c8:05: 32:55:50:9b:a7:9f:23:ac:35:f0:c7:31:fa:4e:87: 05:fa:b6:6c:c4:47:12:d2:0e:4d:2f:79:97:6d:9f: 84:35:d0:ef:0f:82:39:47:0a:9e:70:88:41:9e:f5: f0:33:6f:3a:79:71:a5:71:fa:59:04:4a:a1:a1:b9: 7b:ba:0a:f9:7c:6f:64:36:c1:d6:ef:0c:af:0e:66: 83:7b:37:bc:08:bb:09:1b:c1:b8:f6:14:07:04:28: 8b:fb:c2:23:37:2d:06:97:69:ba:cd:61:fa:64:29: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:68:96:E2:C0:7B:7B:04:9A:1A:7B:7B:4A:B4:57:77:7A:79:50:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f6:ca:7d:1d:55:a4:39:1a:d5:c3:4c:ce:6a:d3:4e:fb:52: aa:3c:ec:bc:ee:9d:f5:56:ab:df:76:21:38:a2:2a:7e:c4:3a: db:03:30:22:61:13:15:85:3f:e0:b1:44:5a:a2:8b:00:65:3e: f5:2e:14:13:e9:13:c5:13:92:27:b4:c6:7b:81:e5:e4:62:b9: 5e:cb:7a:b6:56:e8:b4:5a:28:f6:17:e4:1a:aa:c1:cd:26:b3: 1e:f9:8f:55:37:c5:3c:ca:e7:f9:89:cb:57:f6:ae:ee:fc:75: 80:e2:03:b3:5c:55:a8:16:c8:84:9d:b4:ad:85:a3:41:8d:4a: 0c:c4:01:11:13:3c:16:a0:73:67:da:18:aa:fe:e2:a5:0c:33: a0:4c:5f:fd:59:1b:ff:c0:aa:c6:bc:ef:c4:e1:e3:3b:b5:22: 68:63:2d:b1:d6:56:ee:df:6a:7d:47:4b:ba:ab:73:57:d5:c6: 3e:2f:92:27:1e:16:6f:08:6b:ed:90:a9:df:af:cb:94:37:d2: 2d:23:09:da:8b:b2:37:64:26:43:66:6e:25:78:2b:7f:4a:8f: 10:6e:ef:65:1a:82:5d:32:04:74:ca:ef:32:0b:f6:84:da:cd: e2:77:37:a3:e6:e3:75:a2:bf:be:13:22:88:b7:95:e2:b0:6a: c3:2c:69:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrEO1fnxNAO2wtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YzZlYzEwMDUtYzBlMC00NWU3LWIwMTEtMGE2MTE3MjA2MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ubI1DbO5ZvIX6eAo1dRt4A6bdlWmocW3sd j6XSW+M3p1ts1DUtOtDXCQ6bZJ5pyxJ1PjToINT/TAPMktFwnRmQ1TTae8ySf/NW FE8LOqG7pL149QXwm8lUTMN5joEsauk4WjdZYMD9Pp69qJLOcANFjvKMIrxpZ0eD u9Lv2UoZVq+Je5pcZij/j3utu74Z0yOMyAUyVVCbp58jrDXwxzH6TocF+rZsxEcS 0g5NL3mXbZ+ENdDvD4I5RwqecIhBnvXwM286eXGlcfpZBEqhobl7ugr5fG9kNsHW 7wyvDmaDeze8CLsJG8G49hQHBCiL+8IjNy0Gl2m6zWH6ZCnmrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG9oluLAe3sEmhp7e0q0V3d6eVDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEyNzNjNGEtZDhiOS0z MmI4LWI3ZTEtMTg5ZmY1MzZmNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG72yn0dVaQ5GtXDTM5q0077Uqo87LzunfVWq992ITiiKn7EOtsD MCJhExWFP+CxRFqiiwBlPvUuFBPpE8UTkie0xnuB5eRiuV7LerZW6LRaKPYX5Bqq wc0msx75j1U3xTzK5/mJy1f2ru78dYDiA7NcVagWyISdtK2Fo0GNSgzEARETPBag c2faGKr+4qUMM6BMX/1ZG//Aqsa878Th4zu1ImhjLbHWVu7fan1HS7qrc1fVxj4v kiceFm8Ia+2Qqd+vy5Q30i0jCdqLsjdkJkNmbiV4K39KjxBu72Uagl0yBHTK7zIL 9oTazeJ3N6Pm43Wiv74TIoi3leKwasMsacc= -----END CERTIFICATE-----Generated at Sun Apr 27 23:58:53 2025 by rpki-client