$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7ee59c61-4210-3c19-b7b4-cba2ea4d03a9.roa File: 7ee59c61-4210-3c19-b7b4-cba2ea4d03a9.roa (raw, json) Hash identifier: vCxgoznruwioIMLVAFR2Lein70hLCotzInlAFXBrNA8= Subject key identifier: CB:DF:51:CA:55:3B:FB:40:A7:77:43:13:59:AA:A6:D4:96:E3:3A:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38819FA89378FADEACFF0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7ee59c61-4210-3c19-b7b4-cba2ea4d03a9.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 397211 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:19:fa:89:37:8f:ad:ea:cf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=da6f7a88-7508-4eca-af66-b19e851ff62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:bc:9d:7a:1e:11:3a:00:a2:b8:02:37:61: 9d:a5:a9:34:44:84:2c:90:82:74:21:0e:c4:a1:a7: d7:ba:7f:5c:27:42:16:b5:6b:01:ee:8d:f0:4d:94: 21:96:2f:85:ac:cb:a7:da:3d:c6:54:14:f4:12:52: 8a:71:af:bd:f9:c3:e6:18:7b:ed:f8:7b:6e:5f:e1: e9:b3:f3:77:a9:0b:9d:f0:30:64:25:c3:e5:ea:e5: fd:58:0b:32:4a:8d:fa:1d:cd:2a:e4:d2:70:15:0b: 1c:24:d2:78:ff:58:bc:f6:80:8b:b7:c1:b7:e2:a8: ec:02:45:b8:e2:57:ad:6b:30:ad:0f:e9:c0:f5:c4: 06:05:77:b5:b2:f7:b5:6b:f8:2d:11:2d:7c:3f:43: e6:1f:1c:1e:8f:20:bb:44:08:bb:3b:9a:22:35:35: b0:d8:78:ee:a5:02:36:2f:bf:af:a3:5a:73:22:67: 7e:cc:d4:09:98:6c:1f:81:2b:28:e7:15:bb:62:6d: 4c:e2:40:d6:a1:12:68:90:af:d6:39:43:50:94:dc: 67:50:59:c1:e4:46:d1:23:ff:7d:b9:8d:2e:86:7a: 49:31:0c:19:b8:4a:50:5d:d4:53:1c:9f:2b:57:bf: 8b:c4:bc:b8:06:f5:54:07:47:dc:eb:95:ae:99:d9: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:51:CA:55:3B:FB:40:A7:77:43:13:59:AA:A6:D4:96:E3:3A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7ee59c61-4210-3c19-b7b4-cba2ea4d03a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1a:13:8c:7c:36:72:f9:5f:8c:1e:e1:b0:26:4a:aa:ef:7b: 75:12:12:a5:39:b8:63:c0:a4:4d:64:eb:a9:d3:4f:39:94:21: 8e:af:d9:35:48:9b:6e:6e:07:32:17:1c:48:c5:02:03:05:35: 5c:a5:ae:30:c5:4c:1c:b2:80:c5:06:c2:a6:71:f8:60:71:b7: 15:52:bf:c1:f7:28:5a:6e:c4:11:05:e4:ce:69:93:2b:d1:d4: 66:ce:f7:c2:bf:94:eb:9f:c4:4c:c7:ec:52:ab:8a:f1:bd:80: c0:ce:29:46:f3:7f:8c:f9:b2:b7:bc:27:f4:53:69:69:aa:31: 34:50:99:49:c8:fb:30:f1:76:ce:a5:ef:3c:5e:45:d4:8a:08: 69:4e:60:72:23:bd:0c:29:41:8d:99:b7:33:ef:d1:4d:63:c6: c5:ab:47:dd:c4:73:5a:5d:7a:cf:38:c0:80:e0:12:24:5f:72: e9:48:86:37:db:8a:21:2b:68:80:17:3d:20:9e:ac:f4:f9:0f: 7d:2c:27:4c:06:e7:a6:2e:13:59:1d:f1:12:7a:6d:9f:ef:42: a9:7b:44:3a:50:c3:ed:02:bb:59:0c:57:bb:7c:ca:39:dd:d8: 49:f9:3e:7b:e0:e0:22:2e:65:73:92:d8:e0:9c:01:a4:de:c1: 66:1f:ab:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44gZ+ok3j63qz/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk ZGE2ZjdhODgtNzUwOC00ZWNhLWFmNjYtYjE5ZTg1MWZmNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUC8nXoeEToAorgCN2Gdpak0RIQskIJ0IQ7E oafXun9cJ0IWtWsB7o3wTZQhli+FrMun2j3GVBT0ElKKca+9+cPmGHvt+HtuX+Hp s/N3qQud8DBkJcPl6uX9WAsySo36Hc0q5NJwFQscJNJ4/1i89oCLt8G34qjsAkW4 4letazCtD+nA9cQGBXe1sve1a/gtES18P0PmHxwejyC7RAi7O5oiNTWw2HjupQI2 L7+vo1pzImd+zNQJmGwfgSso5xW7Ym1M4kDWoRJokK/WOUNQlNxnUFnB5EbRI/99 uY0uhnpJMQwZuEpQXdRTHJ8rV7+LxLy4BvVUB0fc65Wumdnv4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvfUcpVO/tAp3dDE1mqptSW4zrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2VlNTljNjEtNDIxMC0z YzE5LWI3YjQtY2JhMmVhNGQwM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFUaE4x8NnL5X4we4bAmSqrve3USEqU5uGPApE1k66nTTzmUIY6v 2TVIm25uBzIXHEjFAgMFNVylrjDFTByygMUGwqZx+GBxtxVSv8H3KFpuxBEF5M5p kyvR1GbO98K/lOufxEzH7FKrivG9gMDOKUbzf4z5sre8J/RTaWmqMTRQmUnI+zDx ds6l7zxeRdSKCGlOYHIjvQwpQY2ZtzPv0U1jxsWrR93Ec1pdes84wIDgEiRfculI hjfbiiEraIAXPSCerPT5D30sJ0wG56YuE1kd8RJ6bZ/vQql7RDpQw+0Cu1kMV7t8 yjnd2En5Pnvg4CIuZXOS2OCcAaTewWYfq1Q= -----END CERTIFICATE-----Generated at Sun May 11 08:29:49 2025 by rpki-client