$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa File: bd23a34c-758a-3e45-9705-f51aee131a75.roa (raw, json) Hash identifier: Symk86RyVXrB/JZs24Hf70YQLBWL8zmhU/+nmeBchdI= Subject key identifier: CC:F2:48:95:6D:1F:CE:C6:C5:42:BA:D2:49:2B:71:B7:88:F3:4A:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B83C2454B0528B5E2412F4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa Signing time: Fri 02 May 2025 12:43:44 +0000 ROA not before: Fri 02 May 2025 12:43:44 +0000 ROA not after: Thu 31 Jul 2025 12:43:44 +0000 asID: 0 IP address blocks: 2620:74:c2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:3c:24:54:b0:52:8b:5e:24:12:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 2 12:43:44 2025 GMT Not After : Jul 31 12:43:44 2025 GMT Subject: CN=5a153d83-606a-486c-8c72-fc89eaa0ec04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:43:b5:cf:66:56:a3:83:f0:8c:a5:8a:d2: 04:7b:f6:44:a7:19:d2:2d:14:d5:b5:0e:8d:fb:ac: 57:c4:30:8a:95:5e:06:c3:71:0d:7b:75:17:de:9c: 9e:8e:db:14:72:d6:1b:b3:32:f6:51:42:e4:b9:51: 47:cd:01:9d:0e:9e:36:39:cd:58:2b:1d:96:71:9b: e0:7f:d1:da:76:69:c5:ac:4b:ee:fc:4d:49:54:79: 68:0e:75:6a:97:df:cc:91:20:a5:5a:c9:de:f4:8a: 00:27:e4:cc:21:78:5e:99:1b:55:d1:cd:b0:15:ea: a0:d0:e8:c0:33:13:a8:d3:20:e4:4a:c6:f1:78:34: 59:c0:48:c7:48:9a:ed:b7:78:99:6c:88:2e:32:6c: db:d7:e8:59:b2:ad:a4:4b:f0:de:87:67:79:68:52: 9e:04:ec:06:82:18:be:b3:59:74:ae:d2:55:3e:24: b2:81:3d:42:d6:ae:48:5e:49:e7:b2:59:81:07:a7: b3:ce:93:8c:77:79:89:8d:30:43:70:ec:f8:27:85: 24:f3:b4:cf:d5:3f:d7:9f:03:37:bf:96:cf:46:6b: 14:31:5a:e3:a0:e3:08:89:09:3a:5d:69:59:5f:27: 19:78:e5:47:55:19:1d:67:cc:91:73:7e:f3:b5:03: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F2:48:95:6D:1F:CE:C6:C5:42:BA:D2:49:2B:71:B7:88:F3:4A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c2::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a5:1a:b6:8e:1a:f0:cd:a2:96:1a:39:41:9a:b3:f6:31:6c: 84:84:fe:7a:0e:2a:e2:31:73:6a:3d:65:66:c3:a6:2f:dd:4a: 1f:33:c4:62:50:82:69:2e:06:ad:3a:fc:4a:53:b8:14:fc:9a: f6:97:d5:f1:c1:0d:52:cb:39:ca:d3:1d:9c:52:d3:42:48:e6: c8:cc:08:26:eb:c5:7e:a4:a6:80:5a:43:79:48:39:b2:1e:7d: cc:5e:54:96:65:9a:63:fb:ad:de:93:04:d6:60:53:ea:02:d3: c7:dd:a6:e3:e2:50:b4:79:fb:d4:69:ba:de:5f:21:07:b1:6b: 0a:e8:a6:67:27:43:5f:12:97:d4:80:ac:62:65:c9:f9:dc:c4: 42:7b:e3:0b:ed:d9:82:a7:ff:b7:46:f1:15:26:5c:e3:7f:59: 37:fd:f8:c6:1f:41:b7:58:08:0f:31:f2:21:f8:54:6f:e7:6d: 4b:5b:4a:08:ba:b4:82:ac:55:d1:74:24:9d:ac:28:09:c6:2b: df:0d:33:d0:3b:e4:02:cd:82:33:20:a0:d4:33:39:56:0c:00: ca:db:d3:a8:93:74:e8:48:d8:19:9a:f5:3f:7b:d8:bb:47:09: a3:e5:fb:ac:cf:96:d7:c1:41:ab:ff:c9:6a:7c:9a:b4:5b:eb: 58:97:ed:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm4PCRUsFKLXiQS9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwMjEyNDM0NFoXDTI1MDczMTEyNDM0NFowLzEtMCsGA1UEAxMk NWExNTNkODMtNjA2YS00ODZjLThjNzItZmM4OWVhYTBlYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3lDtc9mVqOD8IylitIEe/ZEpxnSLRTVtQ6N +6xXxDCKlV4Gw3ENe3UX3pyejtsUctYbszL2UULkuVFHzQGdDp42Oc1YKx2WcZvg f9HadmnFrEvu/E1JVHloDnVql9/MkSClWsne9IoAJ+TMIXhemRtV0c2wFeqg0OjA MxOo0yDkSsbxeDRZwEjHSJrtt3iZbIguMmzb1+hZsq2kS/Deh2d5aFKeBOwGghi+ s1l0rtJVPiSygT1C1q5IXknnslmBB6ezzpOMd3mJjTBDcOz4J4Uk87TP1T/XnwM3 v5bPRmsUMVrjoOMIiQk6XWlZXycZeOVHVRkdZ8yRc37ztQMIEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMzySJVtH87GxUK60kkrcbeI80olMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQyM2EzNGMtNzU4YS0z ZTQ1LTk3MDUtZjUxYWVlMTMxYTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABqlGraOGvDNopYaOUGas/YxbISE/noOKuIxc2o9ZWbDpi/dSh8z xGJQgmkuBq06/EpTuBT8mvaX1fHBDVLLOcrTHZxS00JI5sjMCCbrxX6kpoBaQ3lI ObIefcxeVJZlmmP7rd6TBNZgU+oC08fdpuPiULR5+9Rput5fIQexawropmcnQ18S l9SArGJlyfncxEJ74wvt2YKn/7dG8RUmXON/WTf9+MYfQbdYCA8x8iH4VG/nbUtb Sgi6tIKsVdF0JJ2sKAnGK98NM9A75ALNgjMgoNQzOVYMAMrb06iTdOhI2Bma9T97 2LtHCaPl+6zPltfBQav/yWp8mrRb61iX7fg= -----END CERTIFICATE-----Generated at Sun Jun 15 18:35:42 2025 by rpki-client