$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e2580447-1de6-3fac-aca8-0ec318a23c26.roa File: e2580447-1de6-3fac-aca8-0ec318a23c26.roa (raw, json) Hash identifier: OYA6XpZ9a+7RAefXTNFXLq+Hqc0WdsqVoKgOlCW+XD4= Subject key identifier: CB:DD:3D:90:37:FE:4B:2F:67:9B:A3:40:DF:F8:20:2A:39:7A:23:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E383D37A6B2C0A55309B60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e2580447-1de6-3fac-aca8-0ec318a23c26.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396547 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:83:d3:7a:6b:2c:0a:55:30:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=6c107711-0af2-4158-ac86-5b61a9fad436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:ee:b6:94:03:83:90:69:86:af:d3:9b:4c: ea:1f:40:49:2a:75:0b:ac:ef:bf:d8:31:91:05:eb: f2:b0:f7:78:bb:e8:dc:02:5c:a2:a6:17:2e:3a:cb: 9c:0a:ea:fd:0b:be:0e:7a:a3:98:32:53:46:98:e1: 28:1c:f8:f8:9e:72:6e:24:7b:a8:c1:7b:81:dc:98: 8d:42:6e:cb:9b:11:1c:bb:2d:23:00:9b:01:64:4e: 3a:ea:b1:36:31:55:45:e2:cf:6b:c5:73:20:56:62: 5a:6a:32:29:b5:31:f4:e0:bb:91:c1:3a:e7:c3:63: 8c:c4:ed:98:c9:a1:25:7e:f5:b9:49:c9:f0:e6:c0: 4e:7c:49:fb:cb:f9:d1:8c:66:3c:3a:5f:29:81:cc: 53:eb:6c:8e:e7:75:41:76:35:5c:2f:6e:8e:7c:a3: b6:64:a8:c2:63:79:d8:47:57:3d:65:94:13:08:65: bb:fe:b5:55:5c:d8:ec:f7:d9:42:ba:2a:43:30:df: 73:57:cb:e6:af:58:72:9e:24:a6:68:9e:49:90:ad: 2f:35:cd:d3:33:28:1f:a3:e3:b3:78:79:54:2f:e0: 2f:f2:55:a7:11:3b:86:17:d1:3c:75:ba:e4:03:db: 2d:e5:e9:91:e3:e0:2a:73:75:ee:b9:55:0a:a6:c1: ce:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DD:3D:90:37:FE:4B:2F:67:9B:A3:40:DF:F8:20:2A:39:7A:23:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e2580447-1de6-3fac-aca8-0ec318a23c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:de:03:7b:bc:3d:13:31:4d:84:73:62:01:9a:dd:52:50:67: 6e:a0:8a:85:57:ad:2f:93:12:bb:71:86:06:37:1d:d8:51:bc: 0c:1b:d1:e3:0b:67:ea:e4:77:29:9c:c5:86:75:8d:c1:b5:40: ab:88:72:34:be:15:7e:be:a6:f3:98:2d:75:30:a5:84:70:82: fa:a8:dc:e8:ba:dc:79:7e:95:02:6f:4b:4b:7a:a3:40:db:55: f3:5f:32:cd:fb:17:f5:d1:15:33:52:a7:24:b7:c0:66:b8:dc: 0d:36:bb:7a:8c:52:56:e0:55:5d:90:6c:34:dd:d8:6b:60:73: ee:1e:3a:a3:d9:78:54:02:2c:95:64:ac:62:55:de:32:df:b8: 92:29:b0:b0:67:23:9b:48:29:41:9f:3b:d8:f2:7d:0c:29:b8: ca:95:0c:1a:e6:1a:99:a3:8e:08:77:a8:a9:11:ce:a7:84:ff: e5:71:c4:11:5f:3b:fa:fe:09:2c:d0:6c:80:af:d9:09:4b:7d: cf:1f:3e:30:22:13:0e:25:a7:f7:26:53:04:ff:ce:33:02:8b: 8f:a4:d8:6b:73:24:5e:5f:ed:cc:a1:6e:65:57:e5:8a:bc:c1: ab:05:9f:bc:c8:ba:8e:4c:a2:3d:00:6d:4b:99:b2:b5:97:53: bc:52:7b:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44PTemssClUwm2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk NmMxMDc3MTEtMGFmMi00MTU4LWFjODYtNWI2MWE5ZmFkNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAjutpQDg5Bphq/Tm0zqH0BJKnULrO+/2DGR BevysPd4u+jcAlyiphcuOsucCur9C74OeqOYMlNGmOEoHPj4nnJuJHuowXuB3JiN Qm7LmxEcuy0jAJsBZE466rE2MVVF4s9rxXMgVmJaajIptTH04LuRwTrnw2OMxO2Y yaElfvW5Scnw5sBOfEn7y/nRjGY8Ol8pgcxT62yO53VBdjVcL26OfKO2ZKjCY3nY R1c9ZZQTCGW7/rVVXNjs99lCuipDMN9zV8vmr1hyniSmaJ5JkK0vNc3TMygfo+Oz eHlUL+Av8lWnETuGF9E8dbrkA9st5emR4+Aqc3XuuVUKpsHOSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvdPZA3/ksvZ5ujQN/4ICo5eiMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTI1ODA0NDctMWRlNi0z ZmFjLWFjYTgtMGVjMzE4YTIzYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABjeA3u8PRMxTYRzYgGa3VJQZ26gioVXrS+TErtxhgY3HdhRvAwb 0eMLZ+rkdymcxYZ1jcG1QKuIcjS+FX6+pvOYLXUwpYRwgvqo3Oi63Hl+lQJvS0t6 o0DbVfNfMs37F/XRFTNSpyS3wGa43A02u3qMUlbgVV2QbDTd2Gtgc+4eOqPZeFQC LJVkrGJV3jLfuJIpsLBnI5tIKUGfO9jyfQwpuMqVDBrmGpmjjgh3qKkRzqeE/+Vx xBFfO/r+CSzQbICv2QlLfc8fPjAiEw4lp/cmUwT/zjMCi4+k2GtzJF5f7cyhbmVX 5Yq8wasFn7zIuo5Moj0AbUuZsrWXU7xSe7Y= -----END CERTIFICATE-----Generated at Sun Apr 27 17:55:25 2025 by rpki-client