$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bafad66-82bb-3bda-a62d-fd6314179046.roa File: 7bafad66-82bb-3bda-a62d-fd6314179046.roa (raw, json) Hash identifier: +TmMd4WSNU47ix4z9hjHiUt9zw3UnZlBC0B0C+bNBq0= Subject key identifier: 4F:A4:4C:17:38:DF:12:E2:1A:10:C5:19:E0:D4:0C:FB:0F:6C:C4:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E388AAC43129017F57C180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bafad66-82bb-3bda-a62d-fd6314179046.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396540 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:aa:c4:31:29:01:7f:57:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=5742873e-449f-4014-8698-a97b89a9d2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:03:11:35:d0:7f:d1:97:6c:c0:78:91:06: fc:fb:c6:75:c1:cf:c0:4e:c2:85:f8:13:56:ad:60: 93:5a:59:7d:20:f1:ef:47:13:06:6a:00:b5:2b:8e: 67:1d:07:8e:17:47:c4:01:6f:55:fc:91:40:a2:c6: 30:09:fc:53:e8:d6:ce:d7:09:2d:5c:56:0a:8c:81: 93:6f:a7:3a:fb:43:15:22:0b:47:fb:d0:fa:5e:6e: 42:b4:d2:9d:b8:f8:00:99:13:ff:9e:d5:ea:a6:fc: e4:a2:32:97:ee:60:85:a9:2b:bd:dd:fd:2c:1e:e7: 5d:a7:36:0c:f6:04:54:5c:db:27:05:a4:ba:5a:23: a1:49:30:68:fc:7a:05:24:dd:12:1c:66:be:9b:53: 4c:2d:f8:8f:17:d7:68:76:68:bc:28:c8:e6:1c:d6: 40:b8:e1:9a:ca:c5:fb:f2:bc:a3:9d:c2:b3:70:aa: 5d:b2:51:71:fc:75:60:f8:ea:25:38:95:0f:36:f8: a4:1a:4b:c8:d5:56:19:ae:c2:f1:1e:0e:4d:64:e9: 1e:4f:b1:9c:92:15:bd:b2:47:f9:9f:f3:be:81:ce: 3c:eb:56:91:c0:e5:06:78:25:c0:12:d9:b3:81:32: 0f:8e:5e:e5:c1:85:b6:07:26:74:52:a5:8f:00:1a: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:4C:17:38:DF:12:E2:1A:10:C5:19:E0:D4:0C:FB:0F:6C:C4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bafad66-82bb-3bda-a62d-fd6314179046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:55:c3:88:6b:3c:4c:f4:db:15:d7:63:c3:5a:28:0e:2b:63: 3d:94:2f:e5:ee:4a:49:23:fe:56:e3:cf:73:ca:09:61:22:87: 47:dd:bd:81:57:33:c4:04:36:5b:e7:ed:1d:84:e6:d2:fa:be: 37:41:bf:5e:ff:05:ca:64:f8:bf:65:3f:67:8f:7f:73:d9:3b: a2:1f:1d:c6:6f:e3:0e:66:d3:9b:9f:25:b1:69:64:c5:67:2f: de:84:db:33:cb:19:a6:2f:48:fc:cb:e0:fb:b6:0c:9d:31:25: 30:e9:ad:49:64:74:3d:e5:8b:0e:e1:eb:99:b5:39:56:e4:0b: d7:fe:e6:a0:b3:2a:97:9e:32:e9:e8:e6:0f:4d:2a:bb:3b:5b: a9:c2:0c:43:20:a5:5f:1a:88:42:9a:89:13:d7:71:14:4c:ee: a8:de:f4:6c:06:b5:fb:95:1a:55:2d:39:21:b4:41:ed:c0:aa: 10:f1:4d:35:4a:7f:a5:74:2b:b7:95:36:a0:71:06:9e:1a:d3: 12:30:0d:c0:9d:d8:2c:2c:b5:3e:e8:08:f0:b5:aa:6c:11:d5: 6b:e7:8a:88:55:53:c8:56:a7:95:21:07:cd:84:d8:1e:0e:60: 38:ef:31:ca:79:a1:4c:36:cd:f1:aa:38:82:1d:bd:8a:55:d0: b9:59:97:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44iqxDEpAX9XwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk NTc0Mjg3M2UtNDQ5Zi00MDE0LTg2OTgtYTk3Yjg5YTlkMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1sDETXQf9GXbMB4kQb8+8Z1wc/ATsKF+BNW rWCTWll9IPHvRxMGagC1K45nHQeOF0fEAW9V/JFAosYwCfxT6NbO1wktXFYKjIGT b6c6+0MVIgtH+9D6Xm5CtNKduPgAmRP/ntXqpvzkojKX7mCFqSu93f0sHuddpzYM 9gRUXNsnBaS6WiOhSTBo/HoFJN0SHGa+m1NMLfiPF9dodmi8KMjmHNZAuOGaysX7 8ryjncKzcKpdslFx/HVg+OolOJUPNvikGkvI1VYZrsLxHg5NZOkeT7GckhW9skf5 n/O+gc4861aRwOUGeCXAEtmzgTIPjl7lwYW2ByZ0UqWPABozbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+kTBc43xLiGhDFGeDUDPsPbMShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2JhZmFkNjYtODJiYi0z YmRhLWE2MmQtZmQ2MzE0MTc5MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElVw4hrPEz02xXXY8NaKA4rYz2UL+XuSkkj/lbjz3PKCWEih0fd vYFXM8QENlvn7R2E5tL6vjdBv17/Bcpk+L9lP2ePf3PZO6IfHcZv4w5m05ufJbFp ZMVnL96E2zPLGaYvSPzL4Pu2DJ0xJTDprUlkdD3liw7h65m1OVbkC9f+5qCzKpee Muno5g9NKrs7W6nCDEMgpV8aiEKaiRPXcRRM7qje9GwGtfuVGlUtOSG0Qe3AqhDx TTVKf6V0K7eVNqBxBp4a0xIwDcCd2CwstT7oCPC1qmwR1WvniohVU8hWp5UhB82E 2B4OYDjvMcp5oUw2zfGqOIIdvYpV0LlZlx0= -----END CERTIFICATE-----Generated at Sun May 11 06:15:20 2025 by rpki-client