$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa File: 086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa (raw, json) Hash identifier: AmqDxc4UxCAUb5coYSzVMDDoGh2sdVoBMQ8UtJBI6d4= Subject key identifier: 37:90:92:DC:CE:7A:99:8E:C6:E7:83:31:B9:D0:E2:8E:7F:DD:05:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E384D9E7A46B584980FB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 36632 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:d9:e7:a4:6b:58:49:80:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=e04c414e-f51f-46b0-99d0-36c13853ffff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6f:05:46:d5:bf:bc:73:95:bb:5d:df:b5:f8: 64:06:a3:da:f8:9e:38:bd:7c:64:9d:e2:8c:ca:43: 54:eb:90:c7:71:bd:4c:55:f2:ff:50:e9:c8:bd:29: 08:b1:e8:ce:bc:e1:8c:01:35:15:9a:16:d4:ec:2f: 06:91:15:04:57:dd:73:3a:cc:00:06:d0:1d:3c:a1: 95:47:12:83:55:c0:09:c1:46:79:29:eb:87:d1:80: 7f:a5:0a:31:bd:57:ca:48:be:3a:59:34:53:6a:d6: 2c:c6:fb:f4:07:f2:95:79:99:c7:39:d5:67:2f:ea: 7d:19:f0:46:c4:77:d0:39:76:df:b3:b0:a4:c7:47: d1:c5:d6:0b:50:bc:0a:9b:67:9f:15:07:cc:24:75: f8:6c:38:61:0f:e2:3f:f8:18:b5:3b:5b:97:41:26: ea:95:1b:eb:43:13:81:74:62:ed:ef:38:ed:78:98: ea:87:b4:f8:a4:18:29:e1:6e:78:09:e3:bc:b9:4a: 29:f0:3f:b7:83:44:73:23:1a:b0:9b:7c:99:1b:a5: 05:7d:c3:dd:5c:eb:51:66:c0:03:69:95:92:94:e3: 70:df:16:91:89:b9:7d:85:a0:bf:c5:90:ee:08:83: 42:d8:d5:04:b3:45:98:4d:e2:59:68:c4:84:33:c1: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:92:DC:CE:7A:99:8E:C6:E7:83:31:B9:D0:E2:8E:7F:DD:05:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a1:ee:62:9a:5c:9b:af:43:1b:88:85:aa:c2:17:50:f7:8d: ea:cb:f8:d0:82:14:fa:31:8c:af:ce:20:e7:d2:05:5a:4f:b8: 60:77:b2:5d:39:c4:e5:5c:9f:03:59:9d:01:36:44:ea:61:32: a2:53:ed:cb:a6:ad:3c:58:1e:60:27:f8:b1:00:6b:06:9c:d5: 3a:91:f5:e0:9a:d9:fa:55:3f:de:2a:7c:7e:bd:8c:f3:cb:c9: 39:52:14:54:6f:61:1d:c5:82:ec:4f:ef:60:c6:de:89:01:b1: e0:01:90:96:99:be:23:de:ca:c7:cf:02:53:6e:ae:db:4e:2e: 53:fe:ec:69:af:6f:b6:bc:d5:f2:69:3d:26:11:e7:c4:66:eb: 20:b3:6a:9c:74:46:e3:14:c0:34:d2:b7:8d:ff:f3:1a:74:0f: 00:d3:09:1a:3f:4a:07:5f:64:d9:be:a0:53:c3:2d:9a:ca:5b: d9:8f:60:64:ec:da:77:f7:36:8c:93:30:ed:94:bd:5e:38:e7: 25:45:a8:5f:b1:7a:fc:67:f1:59:89:fd:76:d1:4f:75:da:75: fa:2a:98:4e:8d:eb:94:53:f1:be:b8:0e:a2:22:64:ee:43:0e: ea:8f:6d:73:17:1e:fc:a3:36:32:96:02:24:e7:83:3a:e4:06: b8:8e:54:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44TZ56RrWEmA+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk ZTA0YzQxNGUtZjUxZi00NmIwLTk5ZDAtMzZjMTM4NTNmZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+W8FRtW/vHOVu13ftfhkBqPa+J44vXxkneKM ykNU65DHcb1MVfL/UOnIvSkIsejOvOGMATUVmhbU7C8GkRUEV91zOswABtAdPKGV RxKDVcAJwUZ5KeuH0YB/pQoxvVfKSL46WTRTatYsxvv0B/KVeZnHOdVnL+p9GfBG xHfQOXbfs7Ckx0fRxdYLULwKm2efFQfMJHX4bDhhD+I/+Bi1O1uXQSbqlRvrQxOB dGLt7zjteJjqh7T4pBgp4W54CeO8uUop8D+3g0RzIxqwm3yZG6UFfcPdXOtRZsAD aZWSlONw3xaRibl9haC/xZDuCINC2NUEs0WYTeJZaMSEM8EQ5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDeQktzOepmOxueDMbnQ4o5/3QUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg2OTk4YTItMjFiZi0z OGUyLTlkMGUtZWYzYWNiZjg3ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKh7mKaXJuvQxuIharCF1D3jerL+NCCFPoxjK/OIOfSBVpPuGB3 sl05xOVcnwNZnQE2ROphMqJT7cumrTxYHmAn+LEAawac1TqR9eCa2fpVP94qfH69 jPPLyTlSFFRvYR3FguxP72DG3okBseABkJaZviPeysfPAlNurttOLlP+7Gmvb7a8 1fJpPSYR58Rm6yCzapx0RuMUwDTSt43/8xp0DwDTCRo/SgdfZNm+oFPDLZrKW9mP YGTs2nf3NoyTMO2UvV445yVFqF+xevxn8VmJ/XbRT3XadfoqmE6N65RT8b64DqIi ZO5DDuqPbXMXHvyjNjKWAiTngzrkBriOVLE= -----END CERTIFICATE-----Generated at Sun May 11 15:06:39 2025 by rpki-client