$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc9e5646-faf7-316f-9892-49d5124040c1.roa File: bc9e5646-faf7-316f-9892-49d5124040c1.roa (raw, json) Hash identifier: xzAjSr+M8QDs5xe4oU710hApxiQuzUv9kVQfkPRpZCI= Subject key identifier: 1B:28:74:A5:B7:1D:8C:03:DB:CF:B3:57:24:89:69:B0:55:A0:1A:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38988FF264D2D46077540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc9e5646-faf7-316f-9892-49d5124040c1.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 396591 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:88:ff:26:4d:2d:46:07:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=aa6a1b6d-e20d-4551-9942-edf8a692df47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:8b:a7:31:82:09:65:b2:4e:a9:a4:93:ec: 33:37:68:4f:5e:fd:5d:50:16:6a:6e:29:fb:df:50: d6:20:bb:0a:ab:01:b6:bf:a4:de:63:2d:af:4c:3e: 23:8b:d8:cb:9e:ba:84:c4:40:5f:25:4f:eb:15:0c: 1f:0e:73:c5:43:58:c2:53:a4:ea:12:31:d4:0e:3c: da:8a:39:36:f6:ba:93:05:35:a2:03:26:71:db:da: 6e:54:0a:ee:3d:7f:7c:37:86:02:6f:45:33:47:86: 19:ee:ce:e4:68:17:9a:3b:3c:7c:f2:1b:5d:ae:0f: 7a:fc:43:8e:d6:0c:c3:eb:3f:3c:e5:07:3c:41:1c: aa:45:e9:ab:7b:45:6a:90:cb:da:9c:f5:26:b9:d4: 31:a9:45:02:5f:e0:02:33:e0:2a:4a:13:1a:36:2b: 73:63:0e:76:3f:b2:70:93:d7:5f:88:e7:74:93:70: d0:31:9f:8b:5f:e6:b1:23:35:9d:8f:d7:07:8e:0f: 77:5a:e8:75:f2:b1:f1:e2:e1:8b:da:96:f5:5a:8c: d2:1b:21:91:9c:78:60:37:bd:54:01:c1:58:7b:0c: a6:84:00:8f:74:7f:9d:53:87:a9:53:79:66:21:2b: b7:08:73:29:89:23:c2:3d:f5:a6:30:85:63:40:f7: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:28:74:A5:B7:1D:8C:03:DB:CF:B3:57:24:89:69:B0:55:A0:1A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc9e5646-faf7-316f-9892-49d5124040c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:00:19:b5:56:9b:0f:b0:98:7a:b6:9e:fe:4e:21:f3:b8:b9: fc:e0:3d:9e:dc:9c:30:95:54:3f:b0:44:75:25:7e:30:d5:14: 3b:e1:cb:72:b8:16:1c:86:99:dd:d2:b9:fb:cb:33:21:fb:09: 81:77:f3:f0:f6:0e:41:39:cd:71:5e:c7:9e:24:f7:42:93:90: 50:e1:1e:75:34:f1:fc:1b:ad:6e:84:c8:8e:72:b1:40:43:b7: b5:1e:cd:02:04:75:5f:bf:1c:c8:55:fd:3b:0c:8b:00:87:9d: d1:45:75:42:0a:2f:72:f2:0f:8d:c0:37:e3:7c:57:40:dc:c7: 0c:9d:c4:a8:89:5a:bc:31:5d:c1:05:5a:1a:7f:60:fd:88:4e: c6:18:d0:1c:d6:a3:bc:c9:4f:6a:25:d4:2f:c3:0a:9b:15:35: fa:d7:7f:8b:3e:41:44:73:3b:10:3d:78:b8:73:b5:4e:45:a8: af:b7:a6:68:59:31:cd:6e:5b:20:cf:12:4c:c1:67:88:54:f8: e1:f7:9d:51:9c:0f:3a:5a:a0:3c:51:b2:e4:5e:c5:a6:30:81: 39:76:06:88:14:43:56:30:0c:4d:45:33:89:a3:e2:60:3c:91: 15:41:92:a6:e9:17:0f:89:52:a6:71:68:5a:83:63:76:86:49: ab:0f:56:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44mI/yZNLUYHdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk YWE2YTFiNmQtZTIwZC00NTUxLTk5NDItZWRmOGE2OTJkZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n+LpzGCCWWyTqmkk+wzN2hPXv1dUBZqbin7 31DWILsKqwG2v6TeYy2vTD4ji9jLnrqExEBfJU/rFQwfDnPFQ1jCU6TqEjHUDjza ijk29rqTBTWiAyZx29puVAruPX98N4YCb0UzR4YZ7s7kaBeaOzx88htdrg96/EOO 1gzD6z885Qc8QRyqRemre0VqkMvanPUmudQxqUUCX+ACM+AqShMaNitzYw52P7Jw k9dfiOd0k3DQMZ+LX+axIzWdj9cHjg93Wuh18rHx4uGL2pb1WozSGyGRnHhgN71U AcFYewymhACPdH+dU4epU3lmISu3CHMpiSPCPfWmMIVjQPd66wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsodKW3HYwD28+zVySJabBVoBonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM5ZTU2NDYtZmFmNy0z MTZmLTk4OTItNDlkNTEyNDA0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUAGbVWmw+wmHq2nv5OIfO4ufzgPZ7cnDCVVD+wRHUlfjDVFDvh y3K4FhyGmd3SufvLMyH7CYF38/D2DkE5zXFex54k90KTkFDhHnU08fwbrW6EyI5y sUBDt7UezQIEdV+/HMhV/TsMiwCHndFFdUIKL3LyD43AN+N8V0DcxwydxKiJWrwx XcEFWhp/YP2ITsYY0BzWo7zJT2ol1C/DCpsVNfrXf4s+QURzOxA9eLhztU5FqK+3 pmhZMc1uWyDPEkzBZ4hU+OH3nVGcDzpaoDxRsuRexaYwgTl2BogUQ1YwDE1FM4mj 4mA8kRVBkqbpFw+JUqZxaFqDY3aGSasPVqI= -----END CERTIFICATE-----Generated at Tue Apr 29 10:11:59 2025 by rpki-client