$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/502243c1-fb15-33d1-aa95-26f462f34e57.roa File: 502243c1-fb15-33d1-aa95-26f462f34e57.roa (raw, json) Hash identifier: tP+jFe3QWOGQJ9oLmJWr/pyYilZYWpdqdpbeeB9Oxm0= Subject key identifier: A9:5D:30:A9:A4:83:8E:14:BA:0C:84:AD:1D:72:6C:0E:D2:9F:AB:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E384A31EB04E228785BFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/502243c1-fb15-33d1-aa95-26f462f34e57.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396575 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:a3:1e:b0:4e:22:87:85:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=f07d6c21-a076-4f3b-b4f0-9a126c4911d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:c4:4d:c0:5e:fc:45:d3:0f:b3:17:36:57: b3:8e:51:81:c4:32:95:ec:4a:fa:8d:d5:dd:09:e9: ac:ad:43:f4:bf:6b:ff:29:a1:aa:a0:8b:5c:97:e7: a9:99:ee:73:a1:87:30:0b:09:ae:1d:da:b1:ee:45: 61:d5:5f:d2:38:7d:d5:d4:09:ff:5a:f9:bc:39:b8: 06:fd:29:bd:22:4a:2b:f2:4f:88:ff:15:3d:7d:aa: 83:ff:4e:68:b5:91:a9:3f:30:2a:d1:17:54:f5:a0: db:33:d0:a0:32:45:51:9a:6e:35:bb:72:e1:6a:9f: 88:a7:d9:4b:75:b1:23:9b:ec:e5:e1:bd:12:08:ce: 64:59:47:8b:bf:ca:34:e1:c3:ee:05:4a:43:67:f9: 53:af:dc:69:32:35:fe:25:f5:1e:d5:bc:d0:02:2c: 3b:a5:67:4f:6f:cb:08:c6:3f:2b:97:4b:eb:33:3b: 6f:5c:99:2f:5a:4b:a1:cf:8f:5c:11:b0:ee:b1:44: 24:56:70:3e:2d:aa:fa:0e:b1:bd:44:a4:2f:24:de: f0:1e:f7:34:71:87:15:03:03:68:5c:8e:a1:71:c1: b1:b9:c3:b4:bb:7e:33:0c:58:87:bf:a5:87:17:78: d6:23:7c:dc:32:e3:14:02:bb:aa:a7:22:6e:b1:0a: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5D:30:A9:A4:83:8E:14:BA:0C:84:AD:1D:72:6C:0E:D2:9F:AB:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/502243c1-fb15-33d1-aa95-26f462f34e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:07:46:87:83:ed:1b:27:63:a4:3c:36:6f:0f:99:bb:dc:8a: 95:0d:f0:ea:d2:28:41:40:d7:55:ef:63:23:f6:0f:ab:64:41: 8c:7b:09:78:7c:91:c2:a6:20:25:a4:d6:c1:ee:26:5b:8a:f3: c1:26:f9:2a:c3:88:fb:0e:90:3f:b3:01:25:e2:4a:2f:66:2c: d6:e1:f3:93:3a:ec:d9:40:59:4e:a0:25:d8:a0:de:ef:68:38: 41:11:90:e1:df:15:d5:b8:2f:8f:43:09:88:1d:6b:75:0e:dc: 0c:98:56:69:48:b1:ff:59:76:d6:d4:58:7a:67:96:33:f1:8a: 53:7b:8a:d7:92:33:80:54:7b:56:e1:f4:3b:45:7b:9e:e7:62: e6:b2:72:09:56:c9:e4:87:b6:ba:ee:c2:79:0f:92:71:dc:80: 09:ec:8b:51:44:8b:be:bf:0f:9a:de:f4:b3:19:3e:35:1d:fa: eb:87:ff:5e:18:78:15:bd:f3:13:70:c3:bd:9f:eb:89:b8:81: ab:c2:bf:13:e0:33:1a:3c:bd:9c:4a:aa:81:18:e7:53:83:ae: d1:db:4c:a4:a4:b7:df:06:88:dc:f4:a6:d5:7d:47:c0:c8:e1: 79:b9:2b:94:7b:fa:71:73:86:79:77:93:48:13:f0:d1:13:27: 51:d0:3c:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44SjHrBOIoeFv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk ZjA3ZDZjMjEtYTA3Ni00ZjNiLWI0ZjAtOWExMjZjNDkxMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xXETcBe/EXTD7MXNlezjlGBxDKV7Er6jdXd CemsrUP0v2v/KaGqoItcl+epme5zoYcwCwmuHdqx7kVh1V/SOH3V1An/Wvm8ObgG /Sm9Ikor8k+I/xU9faqD/05otZGpPzAq0RdU9aDbM9CgMkVRmm41u3Lhap+Ip9lL dbEjm+zl4b0SCM5kWUeLv8o04cPuBUpDZ/lTr9xpMjX+JfUe1bzQAiw7pWdPb8sI xj8rl0vrMztvXJkvWkuhz49cEbDusUQkVnA+Lar6DrG9RKQvJN7wHvc0cYcVAwNo XI6hccGxucO0u34zDFiHv6WHF3jWI3zcMuMUAruqpyJusQq6JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKldMKmkg44UugyErR1ybA7Sn6vvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTAyMjQzYzEtZmIxNS0z M2QxLWFhOTUtMjZmNDYyZjM0ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0HRoeD7RsnY6Q8Nm8PmbvcipUN8OrSKEFA11XvYyP2D6tkQYx7 CXh8kcKmICWk1sHuJluK88Em+SrDiPsOkD+zASXiSi9mLNbh85M67NlAWU6gJdig 3u9oOEERkOHfFdW4L49DCYgda3UO3AyYVmlIsf9ZdtbUWHpnljPxilN7iteSM4BU e1bh9DtFe57nYuaycglWyeSHtrruwnkPknHcgAnsi1FEi76/D5re9LMZPjUd+uuH /14YeBW98xNww72f64m4gavCvxPgMxo8vZxKqoEY51ODrtHbTKSkt98GiNz0ptV9 R8DI4Xm5K5R7+nFzhnl3k0gT8NETJ1HQPBo= -----END CERTIFICATE-----Generated at Sun May 11 07:26:19 2025 by rpki-client