$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa File: d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa (raw, json) Hash identifier: 5rCOz3h5Z27hopsaycXmpJK37oHPMDxX0iPQoia96bk= Subject key identifier: A9:F6:2E:A6:EA:8C:DD:19:E8:61:5E:77:2D:5E:91:D4:B7:BF:04:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3890D68F209516E7DDC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396571 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:0d:68:f2:09:51:6e:7d:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=f1bd7491-40c2-44ed-a94e-30b7444edaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:0d:83:20:bb:6a:68:b5:27:c9:53:5b:c3: a1:d7:72:43:64:12:d0:6e:48:5a:20:4a:2e:7a:2b: 1d:dc:42:40:56:ff:15:e0:12:9d:07:1b:73:1c:dc: c2:1c:61:83:f8:be:2f:1b:42:39:d9:59:15:20:4a: 67:15:f8:ff:1e:35:f9:99:e2:ae:4d:cd:9e:5c:d2: 4f:5e:d8:dc:3e:7a:77:c3:e9:74:98:c2:ce:e6:16: 39:8e:82:0e:2b:8e:aa:ef:80:ae:79:64:ac:80:8c: a1:76:f5:c0:2f:1f:76:f2:80:65:db:0c:f5:f8:64: c9:1f:dc:64:68:3f:ea:89:03:2f:5e:3b:d8:bc:93: 2b:20:6e:a8:86:2f:5d:2d:f2:73:2b:34:4f:6b:d0: 1c:81:56:c1:35:b4:07:54:09:7e:ab:b6:f9:64:c5: 79:6a:e7:7b:8f:55:ae:a4:26:62:be:8a:65:86:dc: e2:20:e4:9b:56:82:ae:eb:c5:80:93:85:c3:e0:43: 9e:da:3f:fb:61:16:de:43:c7:fb:39:53:bc:4f:8f: 1c:47:12:d4:c6:b8:7d:83:0c:93:4b:ad:51:9c:0f: 9b:d8:98:0c:f5:b5:ba:d7:db:1e:fa:71:f7:f2:bd: 90:92:41:31:26:c1:53:3a:a9:4c:bc:67:8f:a2:16: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:2E:A6:EA:8C:DD:19:E8:61:5E:77:2D:5E:91:D4:B7:BF:04:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fb:44:9e:aa:d1:5f:e3:1c:cd:d1:e6:d7:d8:8e:11:ff:08: 17:50:c1:9d:e9:12:80:9c:5e:69:c5:96:51:4f:9c:8d:fd:4c: b9:1b:d7:52:88:f9:c5:88:3d:25:1f:d3:59:84:08:c8:b5:2e: e8:9c:bf:9c:3e:ce:7c:18:08:59:08:13:c5:08:a8:bf:a5:06: d4:c5:7e:5b:35:2f:85:90:ed:41:36:0b:72:ef:b6:93:b0:1b: 60:10:33:2f:42:58:2d:e1:bd:5e:27:24:dd:9c:b9:83:c2:f2: d4:bd:b4:9d:b9:64:0d:da:bb:86:fe:74:99:ab:5a:89:23:73: b0:cb:ed:1f:ab:07:de:62:4b:82:c2:3b:08:fa:73:fd:49:2a: 2a:1b:68:5c:3c:c2:56:63:7a:77:b2:bc:83:37:b4:71:ab:cc: 47:9e:eb:f9:fa:cc:be:64:f5:1e:66:d8:c0:9b:0e:e2:e3:69: f8:b6:d4:4a:07:e9:42:f9:85:f5:13:2c:be:71:3e:05:38:c5: e4:1f:41:ae:92:b4:cb:17:15:3c:44:30:07:b6:b5:a2:6f:79: 9b:92:bc:5a:88:9d:47:b8:76:c2:1c:00:c5:16:df:50:0e:03: 22:3d:75:19:94:b9:12:79:9b:b1:e0:fe:e8:3a:ec:df:68:6a: 76:36:87:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44kNaPIJUW593EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk ZjFiZDc0OTEtNDBjMi00NGVkLWE5NGUtMzBiNzQ0NGVkYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz8NgyC7ami1J8lTW8Oh13JDZBLQbkhaIEou eisd3EJAVv8V4BKdBxtzHNzCHGGD+L4vG0I52VkVIEpnFfj/HjX5meKuTc2eXNJP XtjcPnp3w+l0mMLO5hY5joIOK46q74CueWSsgIyhdvXALx928oBl2wz1+GTJH9xk aD/qiQMvXjvYvJMrIG6ohi9dLfJzKzRPa9AcgVbBNbQHVAl+q7b5ZMV5aud7j1Wu pCZivoplhtziIOSbVoKu68WAk4XD4EOe2j/7YRbeQ8f7OVO8T48cRxLUxrh9gwyT S61RnA+b2JgM9bW619se+nH38r2QkkExJsFTOqlMvGePohZVTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKn2LqbqjN0Z6GFedy1ekdS3vwQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdlYjUyZjQtN2Q3Mi0z Y2U1LTk0MWQtMDViNjY5NjY3OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFb7RJ6q0V/jHM3R5tfYjhH/CBdQwZ3pEoCcXmnFllFPnI39TLkb 11KI+cWIPSUf01mECMi1Luicv5w+znwYCFkIE8UIqL+lBtTFfls1L4WQ7UE2C3Lv tpOwG2AQMy9CWC3hvV4nJN2cuYPC8tS9tJ25ZA3au4b+dJmrWokjc7DL7R+rB95i S4LCOwj6c/1JKiobaFw8wlZjeneyvIM3tHGrzEee6/n6zL5k9R5m2MCbDuLjafi2 1EoH6UL5hfUTLL5xPgU4xeQfQa6StMsXFTxEMAe2taJveZuSvFqInUe4dsIcAMUW 31AOAyI9dRmUuRJ5m7Hg/ug67N9oanY2h3g= -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:18 2025 by rpki-client