$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa File: 60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa (raw, json) Hash identifier: EPyw5FEzb70zEpgf58vlGR+4qJf0LoWKn0OSrCOMu1M= Subject key identifier: 09:C0:34:A8:F4:D8:C2:34:96:02:6E:35:29:9D:35:9E:51:79:65:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E382FBC56D94B3DC51D400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396578 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:82:fb:c5:6d:94:b3:dc:51:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=a6b41ac6-4232-4d3a-8cb5-7bb2bfc42eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bb:5c:c8:59:68:de:66:5d:70:f2:43:25:11: 68:98:9f:b9:9f:10:33:72:fe:3f:e8:98:ce:08:ef: 81:ec:cd:b3:55:83:49:93:d6:33:b9:49:d6:d7:d6: a7:00:f0:1c:95:28:21:f3:8d:c9:36:c0:eb:f0:fd: 93:59:f3:14:ab:2e:1c:72:d0:a3:6d:9c:28:c3:43: 3d:94:bc:09:b1:80:b8:18:d4:ce:21:69:0e:f9:3b: 7a:2b:55:60:ed:cb:4e:1e:a1:97:54:1c:33:5f:58: 40:5c:cc:11:2e:06:e4:e4:0c:ac:47:e4:a0:9e:54: 66:9d:35:8b:d6:ed:ae:5c:78:ea:ce:b0:a5:8d:9c: f1:6f:a6:0b:7e:c1:fe:8b:0a:72:8e:c9:42:52:81: 14:dc:9d:fa:35:c9:ec:55:6a:ed:f3:bd:89:96:20: 26:5c:7f:13:0d:4a:6e:34:9f:01:46:39:e6:fb:a7: 3a:8b:cd:dc:75:46:dd:dc:14:ca:8c:99:54:1a:97: b3:5f:f0:2e:9d:21:e7:20:1d:5a:59:18:a7:81:6a: e1:3b:39:e5:72:1b:a1:6a:b2:46:57:35:7e:7f:b1: e5:a1:32:66:e1:33:ca:7e:97:f8:6f:91:1a:81:e1: 93:bc:24:59:78:5d:13:7d:2e:b3:34:cf:69:c5:5e: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:34:A8:F4:D8:C2:34:96:02:6E:35:29:9D:35:9E:51:79:65:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2e:cf:bc:d5:ef:97:ff:1d:53:59:25:63:3c:b5:f7:bf:d0: 1a:62:87:7a:77:65:db:45:37:43:bd:ca:62:46:0f:d4:c4:4b: bc:cc:bc:27:b5:c3:40:d4:18:ba:0d:9a:9e:a8:9c:82:c4:c8: 0b:56:0d:2e:c2:95:e5:32:a5:2a:a4:d2:56:6f:c4:05:08:e9: b8:a2:af:93:7e:77:f3:f2:ca:97:bd:f3:3b:34:c8:ab:fc:bb: 3f:69:65:b0:48:4d:db:19:12:e7:f0:f0:87:b4:89:5c:c6:12: 54:f6:cb:43:a2:9c:1d:8b:bc:7d:5d:ee:9a:3c:b6:98:bc:d0: 88:0a:7e:87:62:83:a4:c7:de:9c:9c:23:e4:6d:1a:8f:1f:11: aa:00:bd:f7:eb:6c:53:dc:2c:c5:6e:2f:7b:0a:f5:d0:b0:e0: 9f:93:4a:88:23:04:c9:11:62:4e:e4:f6:05:a3:99:21:3e:16: 69:58:ea:df:90:d6:86:63:26:53:42:0c:21:06:6f:7b:8e:4e: dc:49:7e:26:63:54:5e:aa:08:04:97:7a:51:07:1c:f1:d8:7f: 68:95:b7:d6:e7:8b:97:39:5d:f8:f4:55:9a:7a:e9:6d:b8:e3: 6e:94:4f:7f:17:f9:fc:d3:d6:40:b1:a4:b1:bf:f2:f1:28:fe: fa:6a:43:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44L7xW2Us9xR1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk YTZiNDFhYzYtNDIzMi00ZDNhLThjYjUtN2JiMmJmYzQyZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrtcyFlo3mZdcPJDJRFomJ+5nxAzcv4/6JjO CO+B7M2zVYNJk9YzuUnW19anAPAclSgh843JNsDr8P2TWfMUqy4cctCjbZwow0M9 lLwJsYC4GNTOIWkO+Tt6K1Vg7ctOHqGXVBwzX1hAXMwRLgbk5AysR+SgnlRmnTWL 1u2uXHjqzrCljZzxb6YLfsH+iwpyjslCUoEU3J36NcnsVWrt872JliAmXH8TDUpu NJ8BRjnm+6c6i83cdUbd3BTKjJlUGpezX/AunSHnIB1aWRingWrhOznlchuharJG VzV+f7HloTJm4TPKfpf4b5EageGTvCRZeF0TfS6zNM9pxV6WEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnANKj02MI0lgJuNSmdNZ5ReWUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBiYWVlMGUtZmI0ZC0z MDdiLWFiYjktNmZkYmZjZWE3NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYuz7zV75f/HVNZJWM8tfe/0Bpih3p3ZdtFN0O9ymJGD9TES7zM vCe1w0DUGLoNmp6onILEyAtWDS7CleUypSqk0lZvxAUI6biir5N+d/Pyype98zs0 yKv8uz9pZbBITdsZEufw8Ie0iVzGElT2y0OinB2LvH1d7po8tpi80IgKfodig6TH 3pycI+RtGo8fEaoAvffrbFPcLMVuL3sK9dCw4J+TSogjBMkRYk7k9gWjmSE+FmlY 6t+Q1oZjJlNCDCEGb3uOTtxJfiZjVF6qCASXelEHHPHYf2iVt9bni5c5Xfj0VZp6 6W24426UT38X+fzT1kCxpLG/8vEo/vpqQ38= -----END CERTIFICATE-----Generated at Sun May 11 06:21:52 2025 by rpki-client