$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa File: 507b0811-c273-30ef-a628-dfc4f6e1715c.roa (raw, json) Hash identifier: kSMxF0lWNMA0bv9q3ZsCdsKzHBpAGTfG0ll+dkYCFTI= Subject key identifier: 4A:BA:20:35:08:7F:93:83:2E:E4:7C:F2:6B:32:7A:6B:0C:F2:0C:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849CE9A72414BC0C0D8FA00F940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7342 IP address blocks: 2620:74:ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:72:41:4b:c0:c0:d8:fa:00:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=86f908ca-0e3f-4219-8731-504d63e7e2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:e6:f2:95:a2:40:30:cc:4e:b8:dd:7b:ed: 96:71:72:99:ac:6a:89:3c:f4:65:4e:8e:8c:9f:64: 51:f8:3a:a2:bb:f8:2b:e1:a3:ab:36:74:bf:b1:ea: 22:c3:6f:28:34:24:ad:fc:69:49:80:a1:4e:05:44: da:46:c8:7a:01:3d:58:bb:0e:d7:57:da:b6:2e:e3: bf:aa:30:c9:61:5e:a4:89:ae:13:ea:c8:93:8e:d1: d4:1b:54:98:7f:41:7a:cb:62:88:25:8e:f1:18:39: 52:53:69:eb:fc:de:15:0b:bf:4a:58:38:b9:12:50: 4e:50:6b:5d:c1:60:e1:71:6e:af:dc:ca:0d:fb:79: 75:e7:5b:e7:8a:2a:84:98:02:55:8b:32:7c:2f:34: 12:fe:3a:ac:fb:65:4d:90:44:0e:72:1f:ad:ff:f6: 0a:61:e4:b2:2b:81:60:d6:1a:58:87:10:bf:d3:36: 22:dd:2f:41:b9:45:d3:a6:10:12:ad:ee:e9:c2:d2: 9f:9f:90:00:eb:6d:ab:63:fe:0e:b6:de:f4:11:bf: 88:0c:f5:b4:2c:e7:31:46:8e:11:8c:f5:af:a9:00: a1:6b:54:7a:6c:ac:0d:0b:0b:5d:e0:9a:66:d7:22: c6:18:03:b8:25:82:2f:28:cd:71:e9:31:9f:22:aa: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BA:20:35:08:7F:93:83:2E:E4:7C:F2:6B:32:7A:6B:0C:F2:0C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ab::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:29:27:6b:a4:44:24:f3:1a:aa:04:37:50:9d:e3:4f:54:27: 19:9a:e5:a9:a9:79:4a:3f:97:89:26:aa:80:1e:eb:9f:72:45: b2:5f:20:74:57:ca:ea:a8:5e:16:62:3a:87:28:c2:16:68:9b: 02:2f:a2:a6:b7:b2:98:11:f5:0d:c9:e7:ef:e7:c7:33:9f:58: 54:9d:c4:b9:d2:a8:41:78:bd:42:b6:1b:43:16:fc:1f:2d:53: 2a:22:93:e9:05:af:72:2f:28:2e:84:2e:46:67:2a:36:85:4b: be:73:fd:e6:f9:14:ee:72:fc:4e:ee:65:de:31:c9:69:3e:0f: 6c:e5:5d:90:ab:b1:3a:bf:3f:7f:77:40:70:d5:f7:1e:ec:59: f0:51:74:34:82:76:0a:96:88:fb:b5:91:8b:3a:ab:dd:02:96: 8e:39:c0:74:41:10:89:4b:34:d1:ee:65:82:70:33:9b:86:a3: e8:5a:55:46:43:d8:d2:8a:1c:3d:88:7f:ea:72:05:c3:24:a1: 80:b4:1f:27:d8:44:3a:fb:74:d1:2b:91:90:0d:33:a0:b0:45: 7a:a0:ce:63:06:b9:34:b0:cd:11:0d:64:ca:a1:bb:25:64:3f: 63:c4:44:c4:81:a9:62:ce:98:7e:29:86:27:28:76:5a:0d:39: 77:02:15:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmnJBS8DA2PoA+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODZmOTA4Y2EtMGUzZi00MjE5LTg3MzEtNTA0ZDYzZTdlMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC/m8pWiQDDMTrjde+2WcXKZrGqJPPRlTo6M n2RR+Dqiu/gr4aOrNnS/seoiw28oNCSt/GlJgKFOBUTaRsh6AT1Yuw7XV9q2LuO/ qjDJYV6kia4T6siTjtHUG1SYf0F6y2KIJY7xGDlSU2nr/N4VC79KWDi5ElBOUGtd wWDhcW6v3MoN+3l151vniiqEmAJVizJ8LzQS/jqs+2VNkEQOch+t//YKYeSyK4Fg 1hpYhxC/0zYi3S9BuUXTphASre7pwtKfn5AA622rY/4Ott70Eb+IDPW0LOcxRo4R jPWvqQCha1R6bKwNCwtd4Jpm1yLGGAO4JYIvKM1x6TGfIqrf9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEq6IDUIf5ODLuR88msyemsM8gywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTA3YjA4MTEtYzI3My0z MGVmLWE2MjgtZGZjNGY2ZTE3MTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8pJ2ukRCTzGqoEN1Cd409UJxma5ampeUo/l4kmqoAe659yRbJf IHRXyuqoXhZiOocowhZomwIvoqa3spgR9Q3J5+/nxzOfWFSdxLnSqEF4vUK2G0MW /B8tUyoik+kFr3IvKC6ELkZnKjaFS75z/eb5FO5y/E7uZd4xyWk+D2zlXZCrsTq/ P393QHDV9x7sWfBRdDSCdgqWiPu1kYs6q90Clo45wHRBEIlLNNHuZYJwM5uGo+ha VUZD2NKKHD2If+pyBcMkoYC0HyfYRDr7dNErkZANM6CwRXqgzmMGuTSwzRENZMqh uyVkP2PERMSBqWLOmH4phicodloNOXcCFSw= -----END CERTIFICATE-----Generated at Sun May 11 05:25:48 2025 by rpki-client