$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa File: bcd1f127-2932-3f37-b293-39529e72599c.roa (raw, json) Hash identifier: aLsSdtaeMaFJ1GVqHf7K7puXi7B1tacus7VJ4eECuhQ= Subject key identifier: 7C:E5:A2:A1:A4:87:C0:68:A2:A5:5B:BA:EE:65:13:77:E3:4E:10:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3861674FC4CFFE786B140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 21313 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:86:16:74:fc:4c:ff:e7:86:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=67641cb7-e5e7-41e5-bb7d-363de6d9f561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:f9:c4:93:b0:43:99:8b:81:31:79:ee:69: 9d:11:8d:ad:8d:f5:96:36:e2:9e:01:f2:71:0a:3f: db:0a:a5:f7:4b:a0:66:8b:1d:4f:52:98:9a:d5:73: 8f:17:8d:5d:4c:03:fa:66:67:c9:70:4e:b3:3d:51: 72:5b:49:04:45:0f:e7:c5:32:7c:49:3a:64:39:aa: 74:58:af:e6:9a:77:cf:8b:ff:e4:d1:d5:f4:b6:cb: 16:fa:30:d5:54:db:17:7a:b6:c6:a6:5c:b0:55:28: db:68:14:cc:86:9e:6e:69:19:cb:ee:9e:b1:4b:ff: 77:da:9f:f9:06:24:f5:e8:72:e0:af:0e:f3:e2:3e: af:1c:85:d6:aa:55:10:b2:86:40:b0:96:8f:98:b1: 5c:94:0b:68:2b:39:43:bb:15:e9:c1:dc:22:08:85: e2:05:97:75:9b:54:5b:9c:1d:e4:f8:81:16:64:9a: c2:4e:93:71:14:4b:af:c1:f8:9c:43:5b:cf:85:e5: d3:f3:16:08:ca:b4:dc:52:35:94:3c:90:12:19:8c: c7:ab:18:34:09:6b:d8:47:88:59:13:da:9d:06:fe: 3d:f9:ba:c0:c2:d2:86:3c:c3:63:fb:6c:60:a3:b3: 72:c9:fe:d5:57:67:c0:e3:f2:6a:93:12:cd:0e:b0: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E5:A2:A1:A4:87:C0:68:A2:A5:5B:BA:EE:65:13:77:E3:4E:10:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a0:1a:ad:ce:f8:00:52:a4:71:06:9e:40:0d:dd:15:3d:a2: 3f:c9:ff:b4:dc:af:68:8e:e5:4e:5f:db:98:5c:19:4a:5e:49: 13:88:4c:45:b3:bd:24:77:f0:ae:a0:cc:8a:c1:b3:e1:1a:c7: 98:2f:72:a7:40:7f:68:d8:15:97:f9:91:49:8a:ba:57:a0:1d: 4c:3b:34:4a:0d:14:41:d1:37:e8:34:e7:08:6d:57:9d:26:76: e6:20:e9:b9:fd:d5:19:9d:59:86:80:06:17:c3:d2:9e:32:06: 68:ee:73:54:9f:26:a9:8d:ca:fd:39:f3:aa:d9:58:1b:f7:e6: f5:eb:f0:3a:2a:0f:ad:d8:5b:fb:50:6c:ff:51:5d:73:23:e0: b5:a6:6c:55:cb:ba:5a:73:57:c7:7f:5b:89:30:78:26:f2:c1: 0e:4a:76:2f:8c:cb:d7:4b:83:8f:62:7b:e0:0a:04:3b:ed:78: 7a:0a:e3:7c:71:ec:ef:05:d5:36:73:1c:33:f2:ca:c4:de:cd: 0f:e7:f7:fb:a9:03:a2:11:f5:c3:07:91:3e:c0:a6:a6:61:21: 94:b2:da:62:fb:f8:d9:9c:10:b3:06:2c:d9:d6:5d:fa:10:cf: 96:cc:78:c9:21:f9:70:4c:96:9c:a9:23:13:ab:a9:dd:2a:0f: c3:fd:63:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44YWdPxM/+eGsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk Njc2NDFjYjctZTVlNy00MWU1LWJiN2QtMzYzZGU2ZDlmNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSX5xJOwQ5mLgTF57mmdEY2tjfWWNuKeAfJx Cj/bCqX3S6Bmix1PUpia1XOPF41dTAP6ZmfJcE6zPVFyW0kERQ/nxTJ8STpkOap0 WK/mmnfPi//k0dX0tssW+jDVVNsXerbGplywVSjbaBTMhp5uaRnL7p6xS/932p/5 BiT16HLgrw7z4j6vHIXWqlUQsoZAsJaPmLFclAtoKzlDuxXpwdwiCIXiBZd1m1Rb nB3k+IEWZJrCTpNxFEuvwficQ1vPheXT8xYIyrTcUjWUPJASGYzHqxg0CWvYR4hZ E9qdBv49+brAwtKGPMNj+2xgo7Nyyf7VV2fA4/JqkxLNDrBIcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHzloqGkh8BooqVbuu5lE3fjThCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNkMWYxMjctMjkzMi0z ZjM3LWIyOTMtMzk1MjllNzI1OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOgGq3O+ABSpHEGnkAN3RU9oj/J/7Tcr2iO5U5f25hcGUpeSROI TEWzvSR38K6gzIrBs+Eax5gvcqdAf2jYFZf5kUmKulegHUw7NEoNFEHRN+g05wht V50mduYg6bn91RmdWYaABhfD0p4yBmjuc1SfJqmNyv0586rZWBv35vXr8DoqD63Y W/tQbP9RXXMj4LWmbFXLulpzV8d/W4kweCbywQ5Kdi+My9dLg49ie+AKBDvteHoK 43xx7O8F1TZzHDPyysTezQ/n9/upA6IR9cMHkT7ApqZhIZSy2mL7+NmcELMGLNnW XfoQz5bMeMkh+XBMlpypIxOrqd0qD8P9Y7I= -----END CERTIFICATE-----Generated at Sun Apr 27 13:00:18 2025 by rpki-client