$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa File: d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa (raw, json) Hash identifier: AoIesBUIM4EZv5AT5+syGaeoBXYkWwqwHt0OPGgFtQ4= Subject key identifier: 0C:CB:BF:60:D6:0F:C2:9D:BE:46:DA:C9:03:9F:74:06:DD:62:F5:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E387530AFFD1F727085B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396597 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:53:0a:ff:d1:f7:27:08:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=a04f5198-8492-4d23-8b8f-76e9401f78cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:89:53:b6:81:bf:f1:0d:b4:c5:c7:74:3b: 4c:b2:fd:4c:63:04:d4:84:3c:72:11:1e:c2:1b:39: c8:78:7b:f4:d5:89:9f:9d:34:33:c0:75:07:4e:61: 8c:f4:11:41:4e:66:20:69:18:e5:38:b3:02:65:d9: 68:77:41:76:3c:7a:86:ef:0d:dd:f0:2d:ed:87:c5: 3c:f7:3e:a3:3d:6d:7b:20:34:a2:8e:cc:49:60:2d: 64:07:6f:59:6b:cd:d0:59:d9:1f:66:a8:3c:63:df: aa:94:25:78:12:72:f9:e8:32:9b:bb:8e:d5:f7:3e: f8:82:5d:32:70:21:42:27:af:e1:22:ba:09:c4:7f: cc:70:51:53:c0:14:23:fd:6f:af:7f:25:35:7f:1a: 25:81:7e:85:4e:53:9d:ac:68:30:e1:dc:84:d7:d8: c0:d1:a9:20:c0:fa:44:77:52:0a:63:87:52:74:24: c4:fa:a3:d6:c0:5e:7c:2a:a8:61:bf:39:85:64:5d: e3:aa:fd:40:c8:f9:e1:10:80:70:cc:38:ee:cf:a7: 2b:d8:9a:6a:97:51:9b:58:24:a3:02:88:12:3b:8a: d7:39:63:bd:84:81:d9:a9:12:58:47:75:5c:82:32: 4e:af:da:41:8f:43:2f:4d:70:ab:19:ce:f7:0c:c9: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CB:BF:60:D6:0F:C2:9D:BE:46:DA:C9:03:9F:74:06:DD:62:F5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:15:ff:46:0d:f0:5c:68:d7:f8:c8:ae:c8:45:c8:b0:bd:0a: 03:60:29:45:0e:41:51:3a:f6:a6:f3:31:54:96:d3:ba:49:2a: 53:ca:50:a1:97:8b:eb:45:79:47:7f:2e:fc:cd:a1:8e:aa:44: 95:e5:b2:68:8e:67:20:1d:0f:16:da:f5:4e:49:a6:cb:a6:6e: e3:d1:ce:9b:cc:95:55:93:13:6c:0c:a5:98:24:c0:82:50:3f: 5e:13:fa:5c:42:50:fb:31:85:21:56:5c:b4:6e:88:48:08:8a: cb:a9:04:94:d9:12:05:23:86:de:b6:f6:6d:ad:3e:13:e1:b8: 68:75:a2:2e:81:e7:d8:95:be:de:3b:80:f4:4b:6f:d5:76:5c: d1:eb:da:a0:66:b9:80:a9:87:d4:79:ca:01:98:5a:be:af:9f: 2e:a1:93:cd:55:e0:3d:87:19:17:ce:00:c5:c1:15:5e:d9:25: 02:e3:7a:1a:31:f4:ba:6b:20:12:86:e1:31:8e:39:86:ed:c1: 10:7d:92:ff:dc:e6:4e:db:3a:92:2c:2e:68:af:be:0d:b3:6a: 9f:9e:c6:77:bd:1f:74:0c:32:2f:68:d4:84:72:06:4f:a7:a7: 38:44:3b:2a:4b:d6:37:62:29:d0:22:17:3f:2f:fe:f7:d5:51: f1:47:93:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44dTCv/R9ycIWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk YTA0ZjUxOTgtODQ5Mi00ZDIzLThiOGYtNzZlOTQwMWY3OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxKJU7aBv/ENtMXHdDtMsv1MYwTUhDxyER7C GznIeHv01YmfnTQzwHUHTmGM9BFBTmYgaRjlOLMCZdlod0F2PHqG7w3d8C3th8U8 9z6jPW17IDSijsxJYC1kB29Za83QWdkfZqg8Y9+qlCV4EnL56DKbu47V9z74gl0y cCFCJ6/hIroJxH/McFFTwBQj/W+vfyU1fxolgX6FTlOdrGgw4dyE19jA0akgwPpE d1IKY4dSdCTE+qPWwF58KqhhvzmFZF3jqv1AyPnhEIBwzDjuz6cr2Jpql1GbWCSj AogSO4rXOWO9hIHZqRJYR3VcgjJOr9pBj0MvTXCrGc73DMkMQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzLv2DWD8KdvkbayQOfdAbdYvWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY1YmE2MjktZTRmMS0z YTgyLWEyNGQtZDU3ZWZiYzFlMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8V/0YN8Fxo1/jIrshFyLC9CgNgKUUOQVE69qbzMVSW07pJKlPK UKGXi+tFeUd/LvzNoY6qRJXlsmiOZyAdDxba9U5JpsumbuPRzpvMlVWTE2wMpZgk wIJQP14T+lxCUPsxhSFWXLRuiEgIisupBJTZEgUjht629m2tPhPhuGh1oi6B59iV vt47gPRLb9V2XNHr2qBmuYCph9R5ygGYWr6vny6hk81V4D2HGRfOAMXBFV7ZJQLj ehox9LprIBKG4TGOOYbtwRB9kv/c5k7bOpIsLmivvg2zap+exne9H3QMMi9o1IRy Bk+npzhEOypL1jdiKdAiFz8v/vfVUfFHk9I= -----END CERTIFICATE-----Generated at Sun Apr 27 18:38:07 2025 by rpki-client