$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f94a1c1b-f1ed-3e83-81d4-197093e51048.roa File: f94a1c1b-f1ed-3e83-81d4-197093e51048.roa (raw, json) Hash identifier: rQXU6XdW05LXox1VpTQLzurH0AwQXc7kk4MVz+Id//w= Subject key identifier: 54:A6:B9:A8:DC:02:70:39:6A:EA:1B:A4:F2:87:E9:D7:33:92:4E:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E383F2EFA0D95CD548A9C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f94a1c1b-f1ed-3e83-81d4-197093e51048.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396549 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:83:f2:ef:a0:d9:5c:d5:48:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=01d5bc82-efb2-4166-b154-f1553f427f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:2d:b8:a8:07:81:9c:89:dc:d7:6f:d8:5f: ea:4b:5d:fc:06:3e:ad:f0:fe:6b:f1:14:ae:38:35: b4:e4:57:e9:86:8f:35:34:47:4c:5b:17:a1:a0:44: 03:03:f5:67:3a:63:8c:78:06:e6:86:f8:6d:d2:74: 3b:95:9a:d0:15:21:ab:34:db:3c:b8:84:3a:bf:32: 01:69:11:ef:0a:ac:3b:52:5e:f9:85:07:9d:a7:e7: a2:b6:2e:bd:da:52:bc:7b:6d:22:a1:f9:5b:44:6d: ab:f2:12:8c:10:78:79:69:5c:bb:b9:14:39:c2:3a: 47:c0:d5:e8:03:ff:cd:94:c0:51:d3:60:94:f1:be: 0b:1f:30:c1:02:1c:cf:aa:9f:4c:27:88:46:23:8d: 2e:df:da:52:73:42:11:40:b4:66:13:d8:c4:82:5c: 07:6a:11:5c:51:cb:77:9b:fc:d1:ea:6b:37:d0:09: c9:e4:7a:b1:28:8d:d2:33:d9:47:c0:22:b9:20:d6: d7:00:ae:d2:d9:7a:6b:21:e0:4f:41:25:0a:9c:82: f5:65:65:9d:86:58:5c:41:a3:16:e7:4c:f8:9c:85: 87:64:53:46:30:f3:18:5d:17:ca:5c:b8:22:5a:ae: 34:ba:cb:bd:d1:e1:f4:b6:33:e2:59:ac:17:bb:b4: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A6:B9:A8:DC:02:70:39:6A:EA:1B:A4:F2:87:E9:D7:33:92:4E:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f94a1c1b-f1ed-3e83-81d4-197093e51048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:22:d0:2a:e6:25:a8:1f:e4:24:9f:74:07:e8:82:b5:ec:ad: 45:b6:fc:54:9d:21:f3:be:37:9f:16:97:fe:67:51:c4:0a:e6: 30:a3:eb:58:6e:0d:81:79:6d:a4:90:d2:49:7b:ff:53:81:66: a7:af:83:76:a0:0d:b2:7e:51:13:75:88:0e:e7:d0:0d:68:8f: bf:bf:4a:d5:de:18:29:c9:2d:ba:f1:71:4a:f0:d4:08:ca:2f: 06:93:2d:fe:45:5a:3b:ce:00:39:66:f8:ca:f2:05:15:70:1d: 2c:30:13:46:a0:6e:e8:03:84:7d:ac:0a:af:dc:c6:6d:dd:06: 97:7f:71:28:f1:65:d3:22:b4:73:4b:b9:82:eb:a4:d2:fc:d4: b6:50:33:8f:db:95:50:32:b0:bf:93:3c:3e:93:6c:47:f1:2f: 68:45:b7:b5:06:4f:83:b4:11:42:ec:e7:a4:f1:cb:57:b0:41: eb:5a:f3:14:7d:fd:0c:42:2b:d3:b7:4c:0f:2d:9a:71:71:7f: 07:52:65:ac:f1:ff:cf:30:ae:ff:e1:fd:7e:78:3d:bd:63:9e: f1:cd:3a:97:2e:af:98:f7:1a:0f:37:43:d5:13:7f:e0:22:3b: ec:ec:de:71:8a:79:e2:04:d8:f6:8b:00:6b:3e:42:fa:86:a8: 76:38:28:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44Py76DZXNVIqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk MDFkNWJjODItZWZiMi00MTY2LWIxNTQtZjE1NTNmNDI3ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndMtuKgHgZyJ3Ndv2F/qS138Bj6t8P5r8RSu ODW05Ffpho81NEdMWxehoEQDA/VnOmOMeAbmhvht0nQ7lZrQFSGrNNs8uIQ6vzIB aRHvCqw7Ul75hQedp+eiti692lK8e20ioflbRG2r8hKMEHh5aVy7uRQ5wjpHwNXo A//NlMBR02CU8b4LHzDBAhzPqp9MJ4hGI40u39pSc0IRQLRmE9jEglwHahFcUct3 m/zR6ms30AnJ5HqxKI3SM9lHwCK5INbXAK7S2XprIeBPQSUKnIL1ZWWdhlhcQaMW 50z4nIWHZFNGMPMYXRfKXLgiWq40usu90eH0tjPiWawXu7QDVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSmuajcAnA5auobpPKH6dczkk67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjk0YTFjMWItZjFlZC0z ZTgzLTgxZDQtMTk3MDkzZTUxMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0i0CrmJagf5CSfdAfogrXsrUW2/FSdIfO+N58Wl/5nUcQK5jCj 61huDYF5baSQ0kl7/1OBZqevg3agDbJ+URN1iA7n0A1oj7+/StXeGCnJLbrxcUrw 1AjKLwaTLf5FWjvOADlm+MryBRVwHSwwE0agbugDhH2sCq/cxm3dBpd/cSjxZdMi tHNLuYLrpNL81LZQM4/blVAysL+TPD6TbEfxL2hFt7UGT4O0EULs56Txy1ewQeta 8xR9/QxCK9O3TA8tmnFxfwdSZazx/88wrv/h/X54Pb1jnvHNOpcur5j3Gg83Q9UT f+AiO+zs3nGKeeIE2PaLAGs+QvqGqHY4KAo= -----END CERTIFICATE-----Generated at Mon Apr 28 02:09:25 2025 by rpki-client