$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1621e9aa-7112-3c95-bb2c-da09c3af836d.roa File: 1621e9aa-7112-3c95-bb2c-da09c3af836d.roa (raw, json) Hash identifier: j62pOtZpBgWN+pDLPeWZqJoHkPdsgwXKQlvMDnPaI5M= Subject key identifier: 4B:90:30:D3:BC:BC:B7:06:6B:24:D6:A6:86:8B:35:61:C5:57:83:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38538C01C200CD4E05800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1621e9aa-7112-3c95-bb2c-da09c3af836d.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 397200 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:38:c0:1c:20:0c:d4:e0:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=5ad3f62d-15e0-4fc0-9736-f3980313b5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:4c:b5:79:a4:15:c9:a8:ed:cc:0a:c9:7b: a9:2a:f1:b7:15:ca:d3:89:0c:78:a2:74:15:4e:a6: 3e:f5:bf:c1:c8:69:8d:b5:c2:18:57:35:ac:de:09: 55:46:72:72:03:89:5c:7a:c4:90:ec:f2:5e:6a:00: b3:25:b7:6e:f3:72:52:23:4b:bc:19:db:01:17:d4: 9d:29:a2:17:c8:7a:dd:52:8a:ff:b3:36:83:0e:fe: 92:da:89:60:94:52:92:35:3a:a1:4c:e3:cb:e4:57: c9:95:81:f3:07:11:ea:f1:b4:cd:8b:ad:d0:bb:20: 8d:63:fa:0b:6d:43:21:f7:c3:de:eb:3a:ee:6b:8e: 11:9c:ca:3c:17:05:23:6d:7a:b8:67:8b:70:a9:c5: 84:eb:01:42:82:43:78:de:ba:fe:63:91:ce:b9:18: bf:f8:f4:38:78:4b:20:06:cd:c7:c0:b5:bd:72:c9: ae:fb:b3:c9:13:64:fc:41:fa:52:31:53:0c:24:59: f7:dd:5f:48:bf:fe:22:6c:38:02:a8:b7:c5:ea:33: be:e1:37:b2:64:25:8a:b7:37:8d:04:a1:59:78:fb: b2:65:89:e7:c8:4e:8d:8c:1b:bd:ba:a4:d2:ca:39: 04:ad:05:1e:66:2c:ce:87:f3:35:f1:45:3a:be:09: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:90:30:D3:BC:BC:B7:06:6B:24:D6:A6:86:8B:35:61:C5:57:83:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1621e9aa-7112-3c95-bb2c-da09c3af836d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:63:10:15:08:36:e4:54:79:92:8d:8d:eb:80:85:06:c9:28: c8:7d:54:fa:b9:67:83:3a:d3:a1:31:15:ae:fb:2b:40:6f:f9: bd:51:0c:9d:21:4c:2f:84:05:99:7c:55:96:39:b1:ad:d6:f5: 99:13:52:be:26:86:14:41:45:5a:fd:05:42:49:9e:63:61:a3: 2b:99:1d:88:00:93:fa:7b:96:3c:ce:26:16:d2:8e:ce:84:25: 32:1b:a8:20:17:ad:17:90:e8:41:52:f1:65:6d:c9:5a:f1:a7: 01:46:bd:49:70:05:e2:4b:2d:0a:23:94:ce:32:2e:e1:00:a9: 85:d2:f0:8f:13:8e:11:2b:d2:8a:8d:4a:6c:c8:0f:5d:51:78: 02:59:20:76:86:40:82:e0:3f:1a:69:0c:e2:49:35:b1:09:8f: 12:ab:dd:4e:9f:55:58:10:cc:52:3d:cc:f7:7a:e1:a0:53:e6: 9b:88:94:63:0d:6f:36:10:b6:d9:72:31:17:84:a7:5b:07:4d: 51:a4:77:37:7c:f2:97:93:ac:da:73:5f:f8:71:8d:58:8a:13: 3a:ad:4e:57:29:c2:04:1c:44:49:11:d5:3e:5f:38:6a:88:b4: 21:b3:6d:d1:11:b6:cb:93:d2:32:19:34:c9:cc:98:00:1f:6b: 2d:55:e8:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44U4wBwgDNTgWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk NWFkM2Y2MmQtMTVlMC00ZmMwLTk3MzYtZjM5ODAzMTNiNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAospMtXmkFcmo7cwKyXupKvG3FcrTiQx4onQV TqY+9b/ByGmNtcIYVzWs3glVRnJyA4lcesSQ7PJeagCzJbdu83JSI0u8GdsBF9Sd KaIXyHrdUor/szaDDv6S2olglFKSNTqhTOPL5FfJlYHzBxHq8bTNi63QuyCNY/oL bUMh98Pe6zrua44RnMo8FwUjbXq4Z4twqcWE6wFCgkN43rr+Y5HOuRi/+PQ4eEsg Bs3HwLW9csmu+7PJE2T8QfpSMVMMJFn33V9Iv/4ibDgCqLfF6jO+4TeyZCWKtzeN BKFZePuyZYnnyE6NjBu9uqTSyjkErQUeZizOh/M18UU6vgmz1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuQMNO8vLcGayTWpoaLNWHFV4NmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTYyMWU5YWEtNzExMi0z Yzk1LWJiMmMtZGEwOWMzYWY4MzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNjEBUINuRUeZKNjeuAhQbJKMh9VPq5Z4M606ExFa77K0Bv+b1R DJ0hTC+EBZl8VZY5sa3W9ZkTUr4mhhRBRVr9BUJJnmNhoyuZHYgAk/p7ljzOJhbS js6EJTIbqCAXrReQ6EFS8WVtyVrxpwFGvUlwBeJLLQojlM4yLuEAqYXS8I8TjhEr 0oqNSmzID11ReAJZIHaGQILgPxppDOJJNbEJjxKr3U6fVVgQzFI9zPd64aBT5puI lGMNbzYQttlyMReEp1sHTVGkdzd88peTrNpzX/hxjViKEzqtTlcpwgQcREkR1T5f OGqItCGzbdERtsuT0jIZNMnMmAAfay1V6Ng= -----END CERTIFICATE-----Generated at Sun May 11 08:18:00 2025 by rpki-client