$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d76972-663a-3465-a0e0-a39180ea9455.roa File: a1d76972-663a-3465-a0e0-a39180ea9455.roa (raw, json) Hash identifier: i5IApAPPZDNGVWki8H76gsG4Wrik7jSTR+qDdkCWoxc= Subject key identifier: 90:0D:85:6B:A7:20:2C:78:9E:56:8D:A5:7E:FE:71:15:8A:C2:C1:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38708C6D780C9FABB7E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d76972-663a-3465-a0e0-a39180ea9455.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396568 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:08:c6:d7:80:c9:fa:bb:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=04952841-6f90-4d02-a8d2-7fd316d233e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:69:64:4d:b1:57:4e:ca:ae:c1:ed:b7:05: a4:ea:d7:1f:ea:83:31:3d:27:6e:55:4f:73:e5:96: 0f:98:c0:7d:0a:50:dd:ec:55:23:59:ad:aa:6e:ec: 66:57:90:9c:05:7c:6c:90:5b:d0:5d:fe:f6:c5:be: 06:5e:cb:21:5f:8f:27:d3:ea:a0:ff:b6:c4:6a:cd: 38:fe:a8:6a:52:86:8d:cd:38:2f:81:f8:c6:f0:ea: 58:5e:a5:58:20:ad:60:3c:03:9c:8d:63:c1:5e:28: 92:f9:d6:38:93:e5:cb:aa:b1:09:54:7c:29:7d:8e: 4e:3e:bc:5d:22:07:94:b9:21:2b:b3:ea:78:ef:75: 5f:27:a7:ac:52:f6:e9:24:94:13:a8:13:e1:f1:49: 6f:40:aa:5c:74:92:18:22:ed:c6:67:c2:f2:33:9e: be:20:ea:2b:90:90:89:87:97:be:79:71:71:28:ba: 31:77:c6:14:15:a2:e7:ea:a4:eb:a3:ea:ae:d7:f7: 71:ab:de:2f:9f:2f:8a:e1:8c:6d:a4:b8:32:c3:89: e7:4b:d4:e6:fb:37:c0:fc:71:13:5c:42:60:56:b1: d9:06:bd:f4:5b:16:0e:10:88:15:cd:70:bf:3b:fd: 32:7c:da:3d:82:9e:51:90:df:35:83:30:8d:90:20: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0D:85:6B:A7:20:2C:78:9E:56:8D:A5:7E:FE:71:15:8A:C2:C1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d76972-663a-3465-a0e0-a39180ea9455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:93:de:47:2f:dd:d2:04:91:9e:66:dd:91:6d:d7:45:bd:25: 06:28:f3:63:a3:2b:78:e2:7c:6c:bf:1d:45:84:ad:da:33:ed: db:22:8b:7a:98:17:28:5a:4c:2a:bd:f6:ae:85:71:c2:fc:7b: 6e:2b:15:2c:1d:10:b2:43:1e:5d:6e:72:2a:74:9b:da:cb:54: a1:fd:f2:45:cc:81:92:d0:f9:c1:16:13:d4:0f:d6:39:64:68: f5:a6:f8:f5:d0:ed:5f:c5:5c:ed:93:45:6b:78:72:27:74:23: b7:5b:46:d1:a2:0e:69:cf:80:2d:5c:a3:86:63:fb:ea:6e:cc: 8b:cb:8f:81:b0:3b:8a:73:d6:2a:6c:17:59:4c:87:98:a1:03: 2b:13:af:4f:a6:d0:82:98:50:d1:1d:16:17:79:42:13:a1:51: 07:cd:e4:17:31:bf:38:5f:b8:f4:ac:83:aa:37:a5:bf:99:8a: 41:c3:84:86:9c:6c:5d:b1:4b:f4:e7:43:f9:fc:c2:43:20:5b: f7:19:f6:d5:b3:3a:1b:3a:65:25:22:08:e5:25:b6:cf:1c:de: 2c:0e:df:ce:12:a1:aa:f0:dd:11:58:51:f4:93:cb:7b:16:eb: cf:4e:b2:10:db:d6:ff:93:19:bf:78:5c:5e:e9:ca:95:ff:88: 19:4d:40:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44cIxteAyfq7fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk MDQ5NTI4NDEtNmY5MC00ZDAyLWE4ZDItN2ZkMzE2ZDIzM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOBpZE2xV07KrsHttwWk6tcf6oMxPSduVU9z 5ZYPmMB9ClDd7FUjWa2qbuxmV5CcBXxskFvQXf72xb4GXsshX48n0+qg/7bEas04 /qhqUoaNzTgvgfjG8OpYXqVYIK1gPAOcjWPBXiiS+dY4k+XLqrEJVHwpfY5OPrxd IgeUuSErs+p473VfJ6esUvbpJJQTqBPh8UlvQKpcdJIYIu3GZ8LyM56+IOorkJCJ h5e+eXFxKLoxd8YUFaLn6qTro+qu1/dxq94vny+K4YxtpLgyw4nnS9Tm+zfA/HET XEJgVrHZBr30WxYOEIgVzXC/O/0yfNo9gp5RkN81gzCNkCDslQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJANhWunICx4nlaNpX7+cRWKwsEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTFkNzY5NzItNjYzYS0z NDY1LWEwZTAtYTM5MTgwZWE5NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCT3kcv3dIEkZ5m3ZFt10W9JQYo82OjK3jifGy/HUWErdoz7dsi i3qYFyhaTCq99q6FccL8e24rFSwdELJDHl1ucip0m9rLVKH98kXMgZLQ+cEWE9QP 1jlkaPWm+PXQ7V/FXO2TRWt4cid0I7dbRtGiDmnPgC1co4Zj++puzIvLj4GwO4pz 1ipsF1lMh5ihAysTr0+m0IKYUNEdFhd5QhOhUQfN5BcxvzhfuPSsg6o3pb+ZikHD hIacbF2xS/TnQ/n8wkMgW/cZ9tWzOhs6ZSUiCOUlts8c3iwO384Soarw3RFYUfST y3sW689OshDb1v+TGb94XF7pypX/iBlNQNI= -----END CERTIFICATE-----Generated at Sun May 11 08:16:56 2025 by rpki-client