$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa File: 711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa (raw, json) Hash identifier: dOd8zRWWflRXwcNN/zx16cYlDBZEWW3+uISSjDNO+iE= Subject key identifier: CC:B1:8C:A2:3F:BD:13:45:76:A3:58:03:D7:6D:3D:57:3B:3A:3F:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2217158FC8448590B8040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396586 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:71:58:fc:84:48:59:0b:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=b7f2fb8d-9ffd-4915-8100-0cc0537774fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:4c:7c:34:1c:6d:ae:c2:52:f3:44:e2:d7: 49:f5:27:be:37:d0:51:3f:46:24:3e:87:aa:05:f8: e7:12:a9:41:dd:bc:17:38:df:97:94:b9:10:72:87: a1:a4:a1:9e:d1:12:53:51:a2:cb:7f:f0:22:d4:c4: 75:9e:b3:aa:8b:eb:e4:3c:aa:c5:08:f1:bf:50:a5: 7a:c5:bd:37:c2:ad:d8:e6:9c:8f:4e:a7:c8:ba:e2: 3d:cf:e0:c2:87:7b:a9:12:b1:01:b8:2a:6e:ac:a4: 71:68:ab:ad:04:8e:83:e1:97:0c:8f:a1:a2:8a:b2: f4:61:5e:4f:b5:0e:e9:5e:be:6e:9e:81:28:59:d4: d5:c0:ed:75:d1:c9:25:d9:5a:f8:16:94:bd:54:49: 02:7e:0c:56:00:74:cd:83:e6:1b:ed:e2:ea:0d:1e: 63:9e:5a:2f:6a:61:2b:e6:59:d6:80:42:46:35:ea: 17:56:96:4b:ab:b5:7a:cd:62:71:1f:4e:61:71:dd: 2b:8e:82:d6:00:be:19:50:8a:41:e7:b4:fb:6e:d9: 3a:29:96:f8:78:78:6b:69:d9:53:ea:ef:6a:e0:75: 05:33:79:49:bf:5e:7c:a1:a1:67:46:22:65:76:9d: 45:4d:1a:77:96:ef:02:1c:57:b5:03:ac:ba:87:52: b2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B1:8C:A2:3F:BD:13:45:76:A3:58:03:D7:6D:3D:57:3B:3A:3F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:10:75:01:90:51:6d:71:98:bb:f7:7d:89:96:59:7e:7a:7f: 9e:63:1c:c9:b6:6f:f7:dd:26:e8:62:7e:ad:9c:3e:34:b3:86: 8c:06:a9:f7:e9:b3:cd:57:c3:ed:03:cb:93:2d:52:b9:87:eb: c1:11:30:6c:99:75:a1:80:96:11:46:dd:2f:93:ff:67:6d:f3: 86:2a:4e:17:d9:32:73:8c:b6:1d:2a:aa:35:d4:e4:60:00:3a: 06:59:0e:82:89:b1:69:98:0a:b4:e6:fc:cc:f9:a8:f1:f4:36: cf:84:56:a1:2a:84:18:6a:7e:f4:63:3d:4a:55:98:ad:0c:e4: 8d:33:40:9e:f6:82:fd:c5:7b:67:ed:90:06:37:28:97:52:96: d3:d3:c5:be:b4:9d:81:c7:cc:c1:a1:a1:61:5d:43:7c:d0:db: d1:72:02:bb:d5:25:d0:14:c2:c8:43:cc:7e:9d:ea:80:a8:8d: f6:fc:13:1c:1e:46:d3:5b:1b:e9:2f:11:49:97:04:39:c6:44: 5c:58:54:ee:86:eb:19:9e:47:dc:83:ac:ff:fe:45:ef:0f:87: 2a:18:94:ca:79:cd:f5:2b:b8:91:c5:f9:60:14:13:b6:c1:b8: 7d:23:c7:13:57:54:af:d0:b0:f2:bc:33:1c:8d:78:5d:ec:aa: 86:dc:f3:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiFxWPyESFkLgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk YjdmMmZiOGQtOWZmZC00OTE1LTgxMDAtMGNjMDUzNzc3NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w9MfDQcba7CUvNE4tdJ9Se+N9BRP0YkPoeq BfjnEqlB3bwXON+XlLkQcoehpKGe0RJTUaLLf/Ai1MR1nrOqi+vkPKrFCPG/UKV6 xb03wq3Y5pyPTqfIuuI9z+DCh3upErEBuCpurKRxaKutBI6D4ZcMj6GiirL0YV5P tQ7pXr5unoEoWdTVwO110ckl2Vr4FpS9VEkCfgxWAHTNg+Yb7eLqDR5jnlovamEr 5lnWgEJGNeoXVpZLq7V6zWJxH05hcd0rjoLWAL4ZUIpB57T7btk6KZb4eHhradlT 6u9q4HUFM3lJv158oaFnRiJldp1FTRp3lu8CHFe1A6y6h1KyFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMyxjKI/vRNFdqNYA9dtPVc7Oj/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzExYzU5YjItYmViNS0z ZmFlLTlmYzUtNzM1YWIyMWEyYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMQdQGQUW1xmLv3fYmWWX56f55jHMm2b/fdJuhifq2cPjSzhowG qffps81Xw+0Dy5MtUrmH68ERMGyZdaGAlhFG3S+T/2dt84YqThfZMnOMth0qqjXU 5GAAOgZZDoKJsWmYCrTm/Mz5qPH0Ns+EVqEqhBhqfvRjPUpVmK0M5I0zQJ72gv3F e2ftkAY3KJdSltPTxb60nYHHzMGhoWFdQ3zQ29FyArvVJdAUwshDzH6d6oCojfb8 ExweRtNbG+kvEUmXBDnGRFxYVO6G6xmeR9yDrP/+Re8PhyoYlMp5zfUruJHF+WAU E7bBuH0jxxNXVK/QsPK8MxyNeF3sqobc884= -----END CERTIFICATE-----Generated at Sun May 11 05:24:32 2025 by rpki-client