$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea860d78-4395-3aba-aaad-8ecec4e5699a.roa File: ea860d78-4395-3aba-aaad-8ecec4e5699a.roa (raw, json) Hash identifier: H07QCDvK+AGBRzLZ9yLycWmMD1Kyep9vLTrhvAar0qs= Subject key identifier: 7A:11:F5:36:E9:13:5E:42:31:D2:D3:07:C3:F8:BF:16:20:FD:59:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E386C3F238E0F8E187C700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea860d78-4395-3aba-aaad-8ecec4e5699a.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 396569 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:86:c3:f2:38:e0:f8:e1:87:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=bdac5005-ec2e-4b85-8903-cfd0680a3763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:7b:54:54:52:f7:0a:e1:d6:4c:7c:ee:7a: 34:c6:bd:ad:8a:ce:46:1b:21:8e:33:c4:6a:88:b7: 84:4e:76:bc:de:ba:0d:fc:04:44:c8:3c:9c:ea:bb: 73:d1:4c:de:21:ef:a4:71:60:e0:de:36:70:e4:f6: da:69:b5:8c:5f:c5:e6:59:fa:cb:a0:13:9c:08:59: 6b:0d:8c:96:f5:b7:9a:80:3c:b4:55:ce:b1:66:b6: c0:54:cc:64:61:80:76:67:fe:97:22:4f:20:4b:eb: 13:67:c9:1e:95:5e:92:3d:72:c2:a3:27:1f:ed:98: 61:92:90:bd:12:10:99:30:6a:5d:2a:67:63:f3:a4: 53:25:99:05:5c:18:61:34:f6:c5:d2:a6:2b:6e:62: a4:c1:c8:73:04:d1:7f:9c:5e:33:33:b1:ea:3d:8f: c0:34:c5:d8:62:1d:49:05:0b:7b:79:e0:48:17:43: 2a:c2:d1:24:5a:bb:a2:1c:ae:9c:bc:51:00:72:05: cf:8a:a5:2a:37:67:18:0d:f2:28:e9:10:2a:c2:d9: 54:fa:0c:7b:06:25:b0:0c:ac:31:ee:b8:d0:b6:74: 3a:f0:83:d4:c4:15:57:ac:ba:90:c8:0e:b6:02:9d: ee:a7:12:57:f7:22:f1:5c:bc:cc:15:52:eb:00:c7: 6e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:11:F5:36:E9:13:5E:42:31:D2:D3:07:C3:F8:BF:16:20:FD:59:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea860d78-4395-3aba-aaad-8ecec4e5699a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:74:ca:60:ee:35:be:11:b4:7a:2a:2f:0b:9a:99:26:a3:9c: d1:a8:d8:1e:66:1d:9e:d1:b0:24:ea:03:e1:08:72:fa:60:91: 49:4e:b8:21:d2:89:02:f5:e9:06:fb:1a:40:a3:24:92:84:ac: 5b:d9:e7:e7:d1:3a:89:19:38:e3:3f:29:84:4c:21:4f:92:a1: 2e:dc:b7:31:8b:e7:29:d1:28:b5:cc:ca:85:be:f1:3d:18:4d: 0f:f2:08:b4:0a:01:3a:66:ef:10:15:ea:84:8c:81:0b:85:96: 7f:18:b7:17:b9:4a:ae:f4:48:2d:ca:36:72:99:27:1d:0a:85: 96:76:3a:f3:d9:27:b5:18:ed:39:f8:55:df:64:ee:db:62:b5: 24:ee:81:48:b3:e2:6e:b4:d2:98:52:22:30:36:f9:c6:b2:38: 8d:37:98:13:94:e1:e9:94:3b:ec:ce:1a:1c:39:dc:4e:7f:d4: b2:cc:e0:22:6c:d4:6a:cf:82:4b:78:3e:39:f7:27:f4:3e:2a: 9d:e7:3d:e5:6e:9e:7d:d7:34:17:eb:b7:30:88:4b:bc:19:e7: ce:a3:e8:d7:7c:e2:fb:43:7a:4b:a1:ac:ff:9b:3d:70:2c:81: 23:5b:67:09:3c:f0:20:97:cc:40:ec:59:3c:ea:a4:de:61:ec: e3:62:c1:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44bD8jjg+OGHxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk YmRhYzUwMDUtZWMyZS00Yjg1LTg5MDMtY2ZkMDY4MGEzNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vp7VFRS9wrh1kx87no0xr2tis5GGyGOM8Rq iLeETna83roN/AREyDyc6rtz0UzeIe+kcWDg3jZw5PbaabWMX8XmWfrLoBOcCFlr DYyW9beagDy0Vc6xZrbAVMxkYYB2Z/6XIk8gS+sTZ8kelV6SPXLCoycf7ZhhkpC9 EhCZMGpdKmdj86RTJZkFXBhhNPbF0qYrbmKkwchzBNF/nF4zM7HqPY/ANMXYYh1J BQt7eeBIF0MqwtEkWruiHK6cvFEAcgXPiqUqN2cYDfIo6RAqwtlU+gx7BiWwDKwx 7rjQtnQ68IPUxBVXrLqQyA62Ap3upxJX9yLxXLzMFVLrAMduQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHoR9TbpE15CMdLTB8P4vxYg/VkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE4NjBkNzgtNDM5NS0z YWJhLWFhYWQtOGVjZWM0ZTU2OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFd0ymDuNb4RtHoqLwuamSajnNGo2B5mHZ7RsCTqA+EIcvpgkUlO uCHSiQL16Qb7GkCjJJKErFvZ5+fROokZOOM/KYRMIU+SoS7ctzGL5ynRKLXMyoW+ 8T0YTQ/yCLQKATpm7xAV6oSMgQuFln8Ytxe5Sq70SC3KNnKZJx0KhZZ2OvPZJ7UY 7Tn4Vd9k7ttitSTugUiz4m600phSIjA2+cayOI03mBOU4emUO+zOGhw53E5/1LLM 4CJs1GrPgkt4Pjn3J/Q+Kp3nPeVunn3XNBfrtzCIS7wZ586j6Nd84vtDekuhrP+b PXAsgSNbZwk88CCXzEDsWTzqpN5h7ONiwRc= -----END CERTIFICATE-----Generated at Sun Apr 27 22:05:55 2025 by rpki-client