$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d261f34-293e-3f41-a767-d6925c2719c5.roa File: 5d261f34-293e-3f41-a767-d6925c2719c5.roa (raw, json) Hash identifier: AwiiUsWgBHl6pPFNl/+oohSMBnjzkXK8O7pGMGoKEPo= Subject key identifier: 20:6F:8A:BA:8D:D0:77:E5:2A:18:B3:7E:30:28:46:0D:58:F4:45:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858498E64970CFF9EB79E909239C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d261f34-293e-3f41-a767-d6925c2719c5.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 7342 IP address blocks: 2620:74:32::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:97:0c:ff:9e:b7:9e:90:92:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=a5d47767-6c3e-457b-9bb5-ef40d0cf83ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:7e:f9:59:4a:a5:75:8d:32:49:ea:8d:2c: 89:d2:29:ce:1f:d2:a8:00:8b:fe:cd:f4:20:8a:84: 0a:b2:27:b7:e1:67:fb:f6:f8:b4:a4:26:17:6c:05: ca:9d:d0:dc:23:7b:a9:17:d1:c3:a6:a1:cf:70:c9: a9:f5:c6:e1:49:8b:51:fd:bc:1a:48:2c:5b:1a:c9: 81:97:88:99:50:ef:25:15:d2:2e:91:c2:0d:58:12: a4:39:e7:a5:62:db:ce:a8:c3:b8:da:a4:9b:79:0b: 84:d5:be:27:67:4a:b4:c2:76:ac:6f:44:7a:6d:38: 80:96:b2:04:8e:7a:05:2e:8a:c4:c6:75:2d:95:ef: af:30:53:2a:01:c8:d6:14:6e:c1:51:bb:d0:f2:06: a6:40:c9:b0:8b:84:d3:c9:0b:2f:fb:ee:2a:e3:7e: fc:e9:e0:cb:a0:2e:c4:9d:2c:00:fe:02:95:a4:f5: 62:b4:74:00:e3:be:62:65:c7:2c:8d:73:11:ca:96: e7:c9:c8:48:d6:db:e5:2a:2f:9c:72:35:fc:44:a9: 9f:90:55:1e:36:a0:ca:e9:3c:31:e5:e6:2b:3d:01: 68:a2:16:b2:7e:88:b0:48:ae:30:e5:97:f8:5d:4a: 6e:6e:b8:11:ec:31:f8:d4:48:ed:97:2a:6b:95:b0: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6F:8A:BA:8D:D0:77:E5:2A:18:B3:7E:30:28:46:0D:58:F4:45:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d261f34-293e-3f41-a767-d6925c2719c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:32::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:83:84:b6:e8:24:d1:36:35:48:e6:e5:a9:20:4a:d0:36:7a: 90:d6:7a:d2:05:77:ff:5c:84:90:8e:fb:58:0b:2f:ef:f7:10: 76:71:cb:4a:c3:70:9d:f6:2d:cc:87:37:b3:ca:76:7c:08:6b: 90:cb:43:77:4a:24:65:ce:11:d2:13:1b:4b:d9:37:46:1f:b2: 69:3d:84:e0:bb:18:88:2d:41:fd:1f:74:40:55:4f:a9:57:c6: fc:11:b2:8a:b9:be:6d:b0:11:67:0b:3e:c0:2b:2a:b5:bc:0f: 6d:bd:fe:a3:b2:ae:c2:c0:5c:26:2e:ad:44:a7:47:4a:e0:01: c7:31:72:7c:a8:42:63:c7:3f:20:c1:86:8e:43:78:2a:96:55: ca:d4:58:66:0d:a5:29:74:e2:d4:80:64:88:d4:9e:88:b9:58: 7b:4c:1b:59:ef:36:be:2a:fc:3e:ed:86:b6:93:7a:07:17:2d: 55:90:67:cc:25:86:7d:b9:1d:c0:31:62:f9:ce:68:36:fe:0a: 42:24:0c:e5:5d:18:39:c7:95:9d:a5:2f:d9:58:63:79:c4:da: cc:0b:cf:fe:d5:03:dc:2d:e2:eb:5f:ff:f9:b6:c8:8c:88:de: ba:fb:aa:27:aa:d4:ba:3f:25:a1:d1:a4:a2:6c:fe:0b:55:a4: 68:64:ba:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmOZJcM/563npCSOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YTVkNDc3NjctNmMzZS00NTdiLTliYjUtZWY0MGQwY2Y4M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApch++VlKpXWNMknqjSyJ0inOH9KoAIv+zfQg ioQKsie34Wf79vi0pCYXbAXKndDcI3upF9HDpqHPcMmp9cbhSYtR/bwaSCxbGsmB l4iZUO8lFdIukcINWBKkOeelYtvOqMO42qSbeQuE1b4nZ0q0wnasb0R6bTiAlrIE jnoFLorExnUtle+vMFMqAcjWFG7BUbvQ8gamQMmwi4TTyQsv++4q43786eDLoC7E nSwA/gKVpPVitHQA475iZccsjXMRypbnychI1tvlKi+ccjX8RKmfkFUeNqDK6Twx 5eYrPQFoohayfoiwSK4w5Zf4XUpubrgR7DH41EjtlyprlbBTJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBvirqN0HflKhizfjAoRg1Y9EXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQyNjFmMzQtMjkzZS0z ZjQxLWE3NjctZDY5MjVjMjcxOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIGDhLboJNE2NUjm5akgStA2epDWetIFd/9chJCO+1gLL+/3EHZx y0rDcJ32LcyHN7PKdnwIa5DLQ3dKJGXOEdITG0vZN0Yfsmk9hOC7GIgtQf0fdEBV T6lXxvwRsoq5vm2wEWcLPsArKrW8D229/qOyrsLAXCYurUSnR0rgAccxcnyoQmPH PyDBho5DeCqWVcrUWGYNpSl04tSAZIjUnoi5WHtMG1nvNr4q/D7thraTegcXLVWQ Z8wlhn25HcAxYvnOaDb+CkIkDOVdGDnHlZ2lL9lYY3nE2swLz/7VA9wt4utf//m2 yIyI3rr7qieq1Lo/JaHRpKJs/gtVpGhkuh0= -----END CERTIFICATE-----Generated at Sun May 11 05:37:27 2025 by rpki-client