$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/150574a3-0eb8-3413-864e-d6941bfc6bab.roa File: 150574a3-0eb8-3413-864e-d6941bfc6bab.roa (raw, json) Hash identifier: EKeUDH3+8g1pathLCzI6TZpdIRCjzZMfryNJqjJvC7Y= Subject key identifier: D4:43:2F:7E:8E:D3:32:B1:70:D7:0E:7C:58:F4:A6:70:D9:D6:BA:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B6DF5E2C3F793B47D1BC1B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/150574a3-0eb8-3413-864e-d6941bfc6bab.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 7342 IP address blocks: 2620:74:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5e:2c:3f:79:3b:47:d1:bc:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=a51ca60e-a487-4e1f-9510-9bc9cfb20ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:9f:2f:cb:6e:54:01:3c:7d:85:74:2e:fc: bf:6d:20:6d:a8:8b:4c:e3:dc:45:83:80:cc:93:60: 6d:36:13:61:27:21:38:31:eb:32:d6:e5:b9:86:58: 2c:37:fe:da:5f:88:6c:92:a6:c3:99:e0:68:18:94: 0e:03:61:5e:bd:b9:6f:42:cd:4c:80:de:03:64:6a: 4f:67:e5:0d:56:77:ab:37:a5:5a:74:fd:b8:8e:eb: 5b:34:a4:b7:5a:73:19:dc:75:ee:08:dc:61:6b:5b: 84:cd:4e:42:9a:54:c0:dc:3e:03:66:03:df:18:3e: 40:d8:64:04:67:18:ec:19:b4:2d:57:a1:a5:11:1a: 5c:54:3b:9b:19:30:8d:33:11:56:44:db:d6:3f:16: 08:74:41:9c:b7:0e:3e:51:76:2e:ec:00:de:df:34: a5:6e:4d:c8:98:7c:44:ff:72:ef:bd:fd:6c:0e:1f: f5:f1:4b:e9:fa:9d:78:6a:2a:ff:03:4f:06:85:8a: 83:03:10:67:2d:59:37:91:4d:64:78:d1:ad:a8:3a: d5:db:c9:68:86:0e:1f:76:9c:71:bc:ac:96:5b:5d: 7b:ba:c6:7c:40:18:2d:d0:51:13:95:71:cb:d3:db: a6:d3:32:40:8c:df:51:4f:95:cb:73:c8:48:c0:2f: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:43:2F:7E:8E:D3:32:B1:70:D7:0E:7C:58:F4:A6:70:D9:D6:BA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/150574a3-0eb8-3413-864e-d6941bfc6bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f8:09:a8:78:69:29:0e:6a:4d:07:a4:1f:83:69:17:ae:4b: 30:a0:c8:d8:0f:67:0a:87:a5:e2:e8:5e:86:36:9f:90:dc:fd: c1:e0:e2:fc:07:e0:4e:75:8d:44:18:81:56:be:03:c3:20:f5: 69:8d:12:9c:30:c0:c0:88:6a:02:e4:b7:91:e4:a8:66:fb:79: d4:d6:99:92:89:b1:e9:14:08:48:54:c7:c8:0d:09:a1:39:b7: 6c:cc:c3:8e:1c:74:5c:e3:0f:18:b8:90:6e:7f:13:e3:4c:98: a8:44:6e:24:1a:ed:df:61:c9:e8:e5:47:bb:f9:a5:cd:39:5e: 2a:73:e5:09:f6:11:32:f2:7d:b6:e5:02:75:72:5b:81:08:0c: 4d:c3:e8:a9:9a:0b:77:79:7d:ae:0b:6a:5c:d2:25:26:f6:50: eb:21:37:d6:93:bf:ef:6f:26:98:ba:93:fc:23:d5:d7:32:6b: a8:b5:05:51:98:da:86:4f:f3:f1:dc:15:38:66:58:88:f6:ec: 2f:ca:1d:c4:9f:b7:1b:a1:08:b7:ab:eb:4f:63:6f:dc:12:e9: 2a:81:b0:04:fc:98:76:ce:fd:5a:2a:16:8e:90:d5:3c:e4:16: 9f:c1:26:65:3c:5e:b8:04:d9:76:18:8a:76:8e:a5:7a:71:e0: be:e9:e7:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm2314sP3k7R9G8GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk YTUxY2E2MGUtYTQ4Ny00ZTFmLTk1MTAtOWJjOWNmYjIwYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO+fL8tuVAE8fYV0Lvy/bSBtqItM49xFg4DM k2BtNhNhJyE4Mesy1uW5hlgsN/7aX4hskqbDmeBoGJQOA2FevblvQs1MgN4DZGpP Z+UNVnerN6VadP24jutbNKS3WnMZ3HXuCNxha1uEzU5CmlTA3D4DZgPfGD5A2GQE ZxjsGbQtV6GlERpcVDubGTCNMxFWRNvWPxYIdEGctw4+UXYu7ADe3zSlbk3ImHxE /3Lvvf1sDh/18Uvp+p14air/A08GhYqDAxBnLVk3kU1keNGtqDrV28lohg4fdpxx vKyWW117usZ8QBgt0FETlXHL09um0zJAjN9RT5XLc8hIwC+CNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNRDL36O0zKxcNcOfFj0pnDZ1rpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTUwNTc0YTMtMGViOC0z NDEzLTg2NGUtZDY5NDFiZmM2YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADz4Cah4aSkOak0HpB+DaReuSzCgyNgPZwqHpeLoXoY2n5Dc/cHg 4vwH4E51jUQYgVa+A8Mg9WmNEpwwwMCIagLkt5HkqGb7edTWmZKJsekUCEhUx8gN CaE5t2zMw44cdFzjDxi4kG5/E+NMmKhEbiQa7d9hyejlR7v5pc05Xipz5Qn2ETLy fbblAnVyW4EIDE3D6KmaC3d5fa4LalzSJSb2UOshN9aTv+9vJpi6k/wj1dcya6i1 BVGY2oZP8/HcFThmWIj27C/KHcSftxuhCLer609jb9wS6SqBsAT8mHbO/VoqFo6Q 1TzkFp/BJmU8XrgE2XYYinaOpXpx4L7p51Q= -----END CERTIFICATE-----Generated at Sun May 11 05:37:38 2025 by rpki-client