$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa File: 2fd9995d-d24f-36f9-901e-64486071bed4.roa (raw, json) Hash identifier: o+H+qMGFZ2g+g6ssBI4PUtGZ/6FdmADmOiJ+5ZVmUAo= Subject key identifier: B2:CF:B1:F9:DA:30:EA:33:56:0B:AE:DF:AF:C9:4C:FC:00:93:DF:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2232D5044E4F81EB7A7A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396543 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:2d:50:44:e4:f8:1e:b7:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=61d4d547-07a5-458b-9f51-b6edcc3ee6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:36:71:a8:70:96:d6:ed:2e:1c:64:c0:8c:2a: 1a:90:a3:43:25:96:ed:e2:b0:c5:d7:30:a5:58:99: 17:8b:8d:54:71:20:aa:fb:a9:48:32:95:9b:ad:ed: a6:35:9b:e9:62:d2:1e:ee:69:cf:1a:3c:f2:27:43: f4:a8:61:c9:28:47:79:c9:1e:e4:77:30:28:d8:fa: 0e:18:fe:da:6a:8d:07:52:09:ed:9c:1b:0c:55:9e: 34:0e:0a:1d:03:34:32:57:4b:44:41:10:e9:66:38: ef:6c:65:be:50:fe:df:ff:e6:1b:f6:d3:df:e6:d1: 2f:bb:ca:f1:36:54:3c:70:70:aa:bf:d3:04:20:62: be:4c:c2:85:62:97:b5:6e:d3:b6:de:f8:27:16:2a: 77:0f:ac:af:c1:8a:1a:73:41:ab:6e:ba:ae:bf:6f: f4:b2:57:81:88:c2:34:db:4d:b0:10:83:7c:b5:ca: 25:18:8e:bb:6e:a5:5d:24:07:3a:5a:a9:e5:a1:0a: 84:34:8d:df:de:7d:1a:71:33:c9:27:24:07:09:98: dd:6d:16:f9:dc:03:86:29:e1:ab:b9:b9:08:66:1f: 49:c5:6a:c7:ac:36:df:f5:3f:02:6d:d6:ff:e1:70: 0c:71:47:fb:f7:79:0d:b3:a3:2e:b1:69:b7:a4:d6: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CF:B1:F9:DA:30:EA:33:56:0B:AE:DF:AF:C9:4C:FC:00:93:DF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:71:b3:b4:fe:9d:b0:9d:04:09:dc:46:27:2c:f3:16:9e:fd: c8:2f:3f:97:7f:78:b5:0c:0f:b3:e9:d2:be:7c:2d:aa:21:84: 57:30:f5:c7:14:de:2f:11:d7:ee:d1:38:54:ab:3c:9b:cf:eb: 2f:31:69:12:7d:5e:56:e4:fb:53:52:e6:36:66:72:f4:62:2e: c5:0b:ba:5c:75:51:77:79:21:a6:8c:db:ab:05:49:87:02:f1: d9:f2:8f:01:c9:cf:50:d4:9e:59:20:81:56:cc:df:ad:be:ef: ff:65:0a:17:1a:38:5c:40:a6:cd:da:76:42:fe:59:93:b1:8f: b4:a7:b9:43:e7:74:21:04:b3:e5:63:b5:2b:31:a0:0f:88:05: 85:18:85:2f:7e:6d:70:b8:ea:5f:00:43:3f:0c:b2:00:e4:df: 4e:df:fb:76:7d:bf:d3:6c:70:b7:4f:2c:d9:8d:ea:ed:7f:7a: d6:35:94:bb:42:ed:ba:75:24:65:76:b8:d2:73:22:ca:d2:32: d4:ab:66:d3:6d:8f:dc:ff:c9:71:19:c2:56:fe:02:41:3d:7a: 6c:f6:0d:3e:5c:c1:01:49:13:fd:25:88:9d:d4:76:ee:4e:54: a4:57:07:d8:b9:e9:1f:9b:99:de:dd:ae:64:31:28:1a:4c:20: 5b:cd:a0:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiMtUETk+B63p6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk NjFkNGQ1NDctMDdhNS00NThiLTlmNTEtYjZlZGNjM2VlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTZxqHCW1u0uHGTAjCoakKNDJZbt4rDF1zCl WJkXi41UcSCq+6lIMpWbre2mNZvpYtIe7mnPGjzyJ0P0qGHJKEd5yR7kdzAo2PoO GP7aao0HUgntnBsMVZ40DgodAzQyV0tEQRDpZjjvbGW+UP7f/+Yb9tPf5tEvu8rx NlQ8cHCqv9MEIGK+TMKFYpe1btO23vgnFip3D6yvwYoac0Grbrquv2/0sleBiMI0 202wEIN8tcolGI67bqVdJAc6WqnloQqENI3f3n0acTPJJyQHCZjdbRb53AOGKeGr ubkIZh9JxWrHrDbf9T8Cbdb/4XAMcUf793kNs6MusWm3pNa03QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLPsfnaMOozVguu36/JTPwAk9/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZkOTk5NWQtZDI0Zi0z NmY5LTkwMWUtNjQ0ODYwNzFiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBxs7T+nbCdBAncRics8xae/cgvP5d/eLUMD7Pp0r58LaohhFcw 9ccU3i8R1+7ROFSrPJvP6y8xaRJ9Xlbk+1NS5jZmcvRiLsULulx1UXd5IaaM26sF SYcC8dnyjwHJz1DUnlkggVbM362+7/9lChcaOFxAps3adkL+WZOxj7SnuUPndCEE s+VjtSsxoA+IBYUYhS9+bXC46l8AQz8MsgDk307f+3Z9v9NscLdPLNmN6u1/etY1 lLtC7bp1JGV2uNJzIsrSMtSrZtNtj9z/yXEZwlb+AkE9emz2DT5cwQFJE/0liJ3U du5OVKRXB9i56R+bmd7drmQxKBpMIFvNoIU= -----END CERTIFICATE-----Generated at Sun May 11 05:33:31 2025 by rpki-client