$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa File: 22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa (raw, json) Hash identifier: EvH0thtx44E/IDpoRN9wcUhTnqT3qHGWR4o3Y/GofFM= Subject key identifier: D0:EC:4C:48:D6:E5:C7:34:05:93:93:B6:2B:8F:05:22:83:34:F9:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3845FE578649163AB5380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 20172 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:5f:e5:78:64:91:63:ab:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=e2034359-3922-4f1b-ac37-12fcf555ad41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:22:d8:c2:01:18:ae:9f:43:e9:e6:ea:91: ca:99:5c:f5:e2:80:20:14:c3:07:41:93:1d:61:a4: 7d:9f:d2:74:8c:ce:78:bc:e9:b8:ff:75:b8:f7:e7: 2b:37:c1:54:1e:80:9b:09:7a:c3:46:c0:2c:a9:2f: 70:81:80:be:f5:ee:4f:34:8e:ae:50:71:f5:c7:8d: 12:53:c3:27:f4:f7:d9:4e:ad:70:b6:bc:7b:12:ba: 8a:30:0b:5b:1c:0e:bd:cb:ce:7b:41:e8:23:6b:b2: 40:8e:bd:c5:84:15:c2:4b:84:25:42:a4:f0:ab:03: d1:e5:ef:1a:11:ee:8d:fb:a4:c4:0f:36:b6:7e:6f: c2:bc:e7:e9:4f:35:7c:e4:3d:4d:99:87:e2:f9:6e: 74:28:92:1c:58:fa:d7:f1:af:66:7c:2a:36:4d:29: 52:9a:5a:91:af:8e:1f:a6:8c:66:e9:66:af:9e:1e: 2d:2f:4c:95:38:fe:dc:67:30:a6:25:c9:eb:64:46: 18:fb:d8:45:82:ff:f0:b6:fc:d7:65:69:99:c5:90: fe:55:14:f0:40:1c:d8:f1:e2:54:a9:c2:a6:b9:3b: 5b:4b:ed:10:d7:58:fc:ca:b5:bd:b7:b7:80:39:d3: 68:30:9e:fc:b7:aa:34:95:20:32:b4:9d:f6:00:f3: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EC:4C:48:D6:E5:C7:34:05:93:93:B6:2B:8F:05:22:83:34:F9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1f:61:05:65:61:e8:c0:78:bc:8a:17:72:81:6c:2e:e0:bf: 0d:f8:30:33:e5:88:18:3b:b2:b0:d4:66:4e:25:44:83:cf:e3: 38:1b:44:12:13:bb:91:92:33:73:5d:a0:e9:f2:17:55:82:41: d6:b5:dc:89:cb:0c:a8:ef:e2:26:01:03:17:2f:cb:73:ac:07: 42:00:e7:eb:cd:db:f4:56:dd:72:17:e4:30:8f:1d:85:b3:41: 7c:c0:c0:8f:f4:56:10:25:47:83:0f:2a:60:54:e7:cf:ea:0f: 7e:47:ac:0a:f6:6b:1a:e1:6e:c1:9c:a6:1f:d4:f4:5c:b3:17: 33:f9:f0:7d:1e:77:a9:8c:0c:9a:93:8f:dd:ce:39:6b:e4:d2: e2:6b:2a:16:79:e4:37:61:65:85:39:9f:6d:86:00:ba:5f:01: b4:36:71:3c:47:30:37:ca:a3:8f:dc:fd:07:6c:fb:ad:c2:c6: ba:7c:44:54:b0:3c:05:9f:a0:45:66:6f:44:ec:ab:eb:38:38: f4:42:5d:76:e5:44:18:52:80:5d:17:87:63:f5:82:64:1d:5f: da:ac:f7:a1:0c:04:c0:ec:2c:7c:5a:73:24:e3:ac:34:48:ac: 5e:e1:2d:22:73:27:26:5c:73:d8:7e:15:1a:8c:6e:20:17:32: c9:fc:ec:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44Rf5XhkkWOrU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk ZTIwMzQzNTktMzkyMi00ZjFiLWFjMzctMTJmY2Y1NTVhZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnki2MIBGK6fQ+nm6pHKmVz14oAgFMMHQZMd YaR9n9J0jM54vOm4/3W49+crN8FUHoCbCXrDRsAsqS9wgYC+9e5PNI6uUHH1x40S U8Mn9PfZTq1wtrx7ErqKMAtbHA69y857Qegja7JAjr3FhBXCS4QlQqTwqwPR5e8a Ee6N+6TEDza2fm/CvOfpTzV85D1NmYfi+W50KJIcWPrX8a9mfCo2TSlSmlqRr44f poxm6Wavnh4tL0yVOP7cZzCmJcnrZEYY+9hFgv/wtvzXZWmZxZD+VRTwQBzY8eJU qcKmuTtbS+0Q11j8yrW9t7eAOdNoMJ78t6o0lSAytJ32APNCpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDsTEjW5cc0BZOTtiuPBSKDNPl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIwMjBkMDctNWEzOS0z YmEyLWJmMjctZWU5YmM0ODExZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAfYQVlYejAeLyKF3KBbC7gvw34MDPliBg7srDUZk4lRIPP4zgb RBITu5GSM3NdoOnyF1WCQda13InLDKjv4iYBAxcvy3OsB0IA5+vN2/RW3XIX5DCP HYWzQXzAwI/0VhAlR4MPKmBU58/qD35HrAr2axrhbsGcph/U9FyzFzP58H0ed6mM DJqTj93OOWvk0uJrKhZ55DdhZYU5n22GALpfAbQ2cTxHMDfKo4/c/Qds+63Cxrp8 RFSwPAWfoEVmb0Tsq+s4OPRCXXblRBhSgF0Xh2P1gmQdX9qs96EMBMDsLHxacyTj rDRIrF7hLSJzJyZcc9h+FRqMbiAXMsn87AM= -----END CERTIFICATE-----Generated at Sun May 11 05:22:43 2025 by rpki-client