$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa File: be8b0ba4-4c98-3879-8103-ca1a55408f51.roa (raw, json) Hash identifier: jGrEFnWk467x/8jxi0qoMp+6VtOfusky48jULzAKeP4= Subject key identifier: B5:1D:77:BE:2C:EA:CB:EA:EF:FB:2C:2F:43:3D:C7:48:FA:FD:AA:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849218432C951A2477DEE8D8200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:32:c9:51:a2:47:7d:ee:8d:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=5d3b3ce9-a5d2-4247-b2f9-0477482e6209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:45:51:ec:c0:e1:28:ca:23:4d:a5:b0:4d: 4b:7a:84:00:8d:a3:95:80:0e:9a:d1:cf:8f:9b:8c: 6a:a5:80:ca:5d:69:b1:55:e1:f7:34:22:28:13:a3: 81:38:74:a6:bb:b7:61:69:7d:e3:c9:f2:9f:96:bb: a3:d4:b8:e6:5b:ec:14:f0:0d:3f:a7:08:db:7f:a7: 10:7b:f3:48:ab:44:69:a2:76:73:d7:ba:43:19:9d: a2:79:aa:fe:46:05:ec:f5:42:ef:88:f0:18:87:aa: 62:78:30:f5:a5:b5:f6:17:4c:b8:ab:10:9b:66:c2: 11:5c:52:50:b5:32:82:da:3d:27:9e:1f:61:ea:c0: 96:e2:0c:64:fd:35:eb:2a:42:89:23:33:c3:df:f5: 61:17:80:70:ff:e0:22:1b:7a:05:c0:29:70:19:e9: af:66:58:5d:98:a1:05:10:6b:8a:04:06:af:4b:85: 34:f7:b7:c5:54:c6:b3:61:34:42:c0:59:2f:b1:46: 93:48:fe:3e:7d:85:bb:d0:e2:61:c4:ef:04:54:23: 26:78:09:7a:31:68:67:7d:1c:1b:f9:d3:da:0e:1a: f7:53:50:7c:f5:4c:a6:e8:19:23:0f:6e:59:66:58: c0:fa:96:34:7b:5b:b9:5f:ec:a7:97:d0:ac:5a:17: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1D:77:BE:2C:EA:CB:EA:EF:FB:2C:2F:43:3D:C7:48:FA:FD:AA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ec:2c:72:94:d1:50:a6:40:c1:21:74:6e:56:79:0e:99:4a: 35:50:29:a3:4c:6d:76:83:b1:fd:81:c8:05:5f:3f:95:da:7e: 2e:33:55:06:d5:01:65:ef:2c:4d:3d:d0:93:57:45:28:f8:18: 96:e1:54:2d:e4:b4:34:16:fb:f8:ce:f1:07:cd:91:30:fb:40: f4:d7:1e:51:2d:54:2c:75:d7:7b:5e:6f:fb:a1:c3:9f:b8:4f: 3f:92:cb:be:96:d7:96:c9:9c:b8:a1:9e:ae:7b:0d:6a:23:51: 01:db:b2:10:28:44:10:27:40:f7:62:b9:33:45:ac:59:97:b6: 4a:76:03:f5:e9:4b:f9:3e:64:2e:e9:f9:43:d9:0b:60:fe:af: b7:01:7a:9f:70:8e:1c:98:d0:b3:8d:81:88:fb:d8:a1:37:2b: 8c:ab:52:f0:82:46:12:94:f8:3c:e0:7d:5c:e0:ba:de:1f:20: f2:dd:ca:13:9a:62:52:36:ef:33:61:00:f5:ba:1c:47:90:e1: 5b:5e:59:74:e1:27:d2:79:f2:39:98:e5:01:54:04:73:78:3c: 63:4c:8c:41:fa:38:f5:d5:25:b3:af:7d:0c:33:1b:94:ed:1d: 0a:7a:14:72:3e:2b:10:84:39:ef:8f:2f:20:e9:13:a6:fa:a9: 25:4f:c3:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDLJUaJHfe6NggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NWQzYjNjZTktYTVkMi00MjQ3LWIyZjktMDQ3NzQ4MmU2MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu35FUezA4SjKI02lsE1LeoQAjaOVgA6a0c+P m4xqpYDKXWmxVeH3NCIoE6OBOHSmu7dhaX3jyfKflruj1LjmW+wU8A0/pwjbf6cQ e/NIq0RponZz17pDGZ2iear+RgXs9ULviPAYh6pieDD1pbX2F0y4qxCbZsIRXFJQ tTKC2j0nnh9h6sCW4gxk/TXrKkKJIzPD3/VhF4Bw/+AiG3oFwClwGemvZlhdmKEF EGuKBAavS4U097fFVMazYTRCwFkvsUaTSP4+fYW70OJhxO8EVCMmeAl6MWhnfRwb +dPaDhr3U1B89Uym6BkjD25ZZljA+pY0e1u5X+ynl9CsWhehJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLUdd74s6svq7/ssL0M9x0j6/aovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmU4YjBiYTQtNGM5OC0z ODc5LTgxMDMtY2ExYTU1NDA4ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLsLHKU0VCmQMEhdG5WeQ6ZSjVQKaNMbXaDsf2ByAVfP5Xafi4z VQbVAWXvLE090JNXRSj4GJbhVC3ktDQW+/jO8QfNkTD7QPTXHlEtVCx113teb/uh w5+4Tz+Sy76W15bJnLihnq57DWojUQHbshAoRBAnQPdiuTNFrFmXtkp2A/XpS/k+ ZC7p+UPZC2D+r7cBep9wjhyY0LONgYj72KE3K4yrUvCCRhKU+DzgfVzgut4fIPLd yhOaYlI27zNhAPW6HEeQ4VteWXThJ9J58jmY5QFUBHN4PGNMjEH6OPXVJbOvfQwz G5TtHQp6FHI+KxCEOe+PLyDpE6b6qSVPw58= -----END CERTIFICATE-----Generated at Mon Apr 28 19:14:50 2025 by rpki-client