$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37017879-1cd1-3a73-b030-37e4f4fed693.roa File: 37017879-1cd1-3a73-b030-37e4f4fed693.roa (raw, json) Hash identifier: P1dKV5gxSTLim6ZYHAJP0ty+7LLJP/sqt9rxdaHYlxw= Subject key identifier: 0A:8E:90:D7:CD:E7:09:4E:FC:7B:F8:10:3F:10:10:0A:71:1E:E9:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21EEA198A6AD2661F9F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37017879-1cd1-3a73-b030-37e4f4fed693.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 25485 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:ea:19:8a:6a:d2:66:1f:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=24f473f2-a41c-4111-8c8a-166b538f270b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:fc:91:9a:13:85:05:15:7e:4b:66:e1:28: 99:bc:7e:dc:2b:bc:8e:f9:0b:3e:bb:81:dc:1e:76: b2:ae:5b:4b:e5:2d:4f:81:3e:f7:dd:5b:b6:c5:66: 20:4f:16:6a:98:23:21:96:14:7a:04:a9:f8:4c:82: 01:3e:87:1d:aa:46:43:0c:37:8a:de:cc:05:1d:33: 32:3d:b5:d7:ec:cb:98:5f:6e:f6:f1:e2:b7:40:a8: d9:3f:f6:1b:16:28:f5:ce:06:0c:5c:e6:b5:38:49: 87:b1:f5:4f:1b:50:01:0c:04:a6:16:1d:d9:e7:64: de:22:4e:7d:c9:d5:2c:c4:e9:be:60:11:ce:ec:ea: b0:6c:bd:af:69:43:c8:32:f1:48:75:45:f1:11:b3: 6e:38:4a:f8:7e:e7:d2:80:83:8a:fc:c0:32:fa:7c: a4:ad:38:fe:c2:ba:3d:52:26:de:83:da:5a:83:7c: 9b:79:ea:eb:5d:cd:d1:15:8b:98:97:8a:bb:79:17: 2b:8e:84:75:58:da:89:81:74:0c:76:01:76:ec:ca: 51:12:71:cd:8f:be:e8:b7:81:b8:b9:81:ab:09:b5: f5:ab:20:ce:2a:9d:da:83:82:3b:71:81:2f:86:5d: af:54:5f:26:17:18:98:c3:f8:6e:1f:b1:e5:71:67: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:90:D7:CD:E7:09:4E:FC:7B:F8:10:3F:10:10:0A:71:1E:E9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37017879-1cd1-3a73-b030-37e4f4fed693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:87:dd:70:f9:f9:f7:b0:2d:bc:64:c9:be:80:fd:61:b5:a0: 47:3b:4e:da:78:6e:74:32:61:a5:3a:75:4c:1e:b1:d4:c4:9f: 94:69:f9:1e:d3:a3:0c:b2:56:d3:f6:bb:ad:7e:2d:c5:45:32: 46:cc:0a:94:34:3e:49:a0:ff:26:4a:0b:e5:ca:df:14:cd:86: 33:4c:2e:77:6c:cb:59:49:95:f1:6d:d0:fa:e1:fe:8e:a8:29: cd:8e:bb:de:eb:c4:95:93:90:cb:39:46:b5:fd:eb:16:60:1f: 90:17:5c:0a:31:f3:f2:84:d1:1c:ce:10:20:80:ea:77:f3:6c: 44:d9:12:4d:33:1e:7b:5a:b4:1d:3f:04:a7:e3:3f:b0:39:77: 4e:aa:af:fe:af:db:58:a0:80:eb:9d:2b:90:88:88:a4:12:26: 7b:4b:b3:f0:ab:25:f4:7c:e5:87:dc:9c:b8:9d:9d:f5:4f:f8: 8a:b0:81:a2:6b:e9:55:33:65:27:0d:90:6b:ad:f9:09:36:21: 77:e4:12:1f:48:b1:f7:1a:1f:6b:b1:96:86:79:7c:3a:2a:59: 02:64:f2:b3:8c:97:d3:8b:29:99:bc:09:98:fb:4f:b1:52:b5: cc:f0:75:19:37:43:aa:83:b0:83:32:ed:92:01:e2:0a:2f:df: 02:c1:c6:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh7qGYpq0mYfn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk MjRmNDczZjItYTQxYy00MTExLThjOGEtMTY2YjUzOGYyNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+D8kZoThQUVfktm4SiZvH7cK7yO+Qs+u4Hc HnayrltL5S1PgT733Vu2xWYgTxZqmCMhlhR6BKn4TIIBPocdqkZDDDeK3swFHTMy PbXX7MuYX2728eK3QKjZP/YbFij1zgYMXOa1OEmHsfVPG1ABDASmFh3Z52TeIk59 ydUsxOm+YBHO7OqwbL2vaUPIMvFIdUXxEbNuOEr4fufSgIOK/MAy+nykrTj+wro9 Uibeg9pag3ybeerrXc3RFYuYl4q7eRcrjoR1WNqJgXQMdgF27MpREnHNj77ot4G4 uYGrCbX1qyDOKp3ag4I7cYEvhl2vVF8mFxiYw/huH7HlcWfglQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqOkNfN5wlO/Hv4ED8QEApxHulBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzcwMTc4NzktMWNkMS0z YTczLWIwMzAtMzdlNGY0ZmVkNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOH3XD5+fewLbxkyb6A/WG1oEc7Ttp4bnQyYaU6dUwesdTEn5Rp +R7TowyyVtP2u61+LcVFMkbMCpQ0Pkmg/yZKC+XK3xTNhjNMLndsy1lJlfFt0Prh /o6oKc2Ou97rxJWTkMs5RrX96xZgH5AXXAox8/KE0RzOECCA6nfzbETZEk0zHnta tB0/BKfjP7A5d06qr/6v21iggOudK5CIiKQSJntLs/CrJfR85YfcnLidnfVP+Iqw gaJr6VUzZScNkGut+Qk2IXfkEh9IsfcaH2uxloZ5fDoqWQJk8rOMl9OLKZm8CZj7 T7FStczwdRk3Q6qDsIMy7ZIB4gov3wLBxq0= -----END CERTIFICATE-----Generated at Sun May 11 08:46:29 2025 by rpki-client