$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa File: b67d2449-0a1a-3022-bf24-1497fa2f892a.roa (raw, json) Hash identifier: 00Qoxug2zPbhcXw6Rvc4jKK2ykrOPAHkv2osKhxcMAA= Subject key identifier: 92:E5:4C:79:76:C8:AC:1A:AF:98:B5:2B:CC:46:4B:BE:53:07:0B:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38431D3148E1EB8F21980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396546 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:31:d3:14:8e:1e:b8:f2:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=b3a6af84-2d46-400d-8b45-16dc40a394aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:2a:a9:e9:e8:e5:c2:94:2c:39:ef:24:b1: d1:e4:db:d0:16:7d:c7:32:48:4d:47:fd:6d:1c:b8: 31:16:ba:37:52:c2:31:39:dc:d8:c4:a4:14:85:7e: a4:c7:e1:5d:af:c1:41:a2:22:06:16:ed:9a:93:b3: fe:92:5d:40:35:c7:e0:63:db:df:62:a4:5b:65:6e: ed:9b:9e:d0:63:37:6e:fd:b3:57:41:e5:6e:a4:cc: d8:30:90:80:3b:99:33:bb:10:da:31:fc:b4:21:4b: 9d:ee:39:a7:a4:1b:39:0a:5e:b4:3a:72:63:0e:50: 50:e0:a2:da:44:e2:3d:ca:b8:cb:e4:91:56:ba:25: 7b:8b:aa:09:38:71:4b:47:68:ad:e0:a4:7f:c7:36: bb:56:d6:9d:21:1c:38:2a:12:eb:b4:8f:c9:38:3a: 89:7b:fb:a3:80:87:e3:33:f0:de:c1:70:b9:03:42: ac:26:34:87:53:1f:db:e1:7d:e8:43:25:9d:2c:26: dd:9f:72:ea:bd:94:a9:b9:1a:c5:f9:cd:ef:1c:d9: 89:e1:f4:3c:eb:41:ab:00:5b:69:9c:25:c3:ed:67: fc:78:34:07:bb:c5:39:c2:55:d8:9c:5d:4b:5d:d0: 57:1d:f1:a4:b2:e7:c7:47:c3:f8:c0:da:df:c1:11: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E5:4C:79:76:C8:AC:1A:AF:98:B5:2B:CC:46:4B:BE:53:07:0B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4f:f4:30:4a:40:6f:dd:9d:cb:f1:2e:10:85:4c:bd:a1:5d: 36:e8:c2:ea:15:c5:a5:82:d3:ae:24:fb:52:1d:a4:14:32:90: ba:18:dd:50:90:c9:7d:fa:aa:ce:4b:27:bc:18:a5:fb:d0:cc: b2:1a:79:6f:41:47:8e:48:03:3f:b1:1f:bb:c7:b5:8f:e4:66: ed:0d:c9:59:e9:6c:0b:97:8d:b7:97:bc:6b:a0:4c:58:15:a8: 93:32:08:b0:e7:bf:d4:7c:80:2e:aa:d9:72:04:34:6b:b0:b0: f9:d6:81:b3:17:cc:0f:1d:42:98:6e:51:2f:fa:33:50:46:a2: 0e:b2:5b:0d:f7:25:9b:f2:9b:68:e0:47:90:d4:36:32:c8:7f: 5a:c6:3b:3c:ec:f8:b0:5a:71:82:69:87:52:a9:02:4f:0b:6c: 97:34:e9:f6:ab:39:6d:08:75:90:3a:b6:03:7c:a9:3c:67:ab: 00:96:3f:10:f2:ca:97:09:64:72:ca:c3:35:93:a3:0c:0e:19: 76:b9:49:83:cd:81:8f:e4:a3:b5:84:81:4b:7b:fd:46:d5:82: 7d:18:20:e6:9a:92:38:43:ee:bd:5c:95:04:4d:4a:89:bd:9c: 6b:13:f5:72:50:ce:22:fd:88:5d:fc:fb:5b:3b:af:58:07:be: 69:8f:bb:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44Qx0xSOHrjyGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk YjNhNmFmODQtMmQ0Ni00MDBkLThiNDUtMTZkYzQwYTM5NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Yqqeno5cKULDnvJLHR5NvQFn3HMkhNR/1t HLgxFro3UsIxOdzYxKQUhX6kx+Fdr8FBoiIGFu2ak7P+kl1ANcfgY9vfYqRbZW7t m57QYzdu/bNXQeVupMzYMJCAO5kzuxDaMfy0IUud7jmnpBs5Cl60OnJjDlBQ4KLa ROI9yrjL5JFWuiV7i6oJOHFLR2it4KR/xza7VtadIRw4KhLrtI/JODqJe/ujgIfj M/DewXC5A0KsJjSHUx/b4X3oQyWdLCbdn3LqvZSpuRrF+c3vHNmJ4fQ860GrAFtp nCXD7Wf8eDQHu8U5wlXYnF1LXdBXHfGksufHR8P4wNrfwREE2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJLlTHl2yKwar5i1K8xGS75TBwvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY3ZDI0NDktMGExYS0z MDIyLWJmMjQtMTQ5N2ZhMmY4OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG1P9DBKQG/dncvxLhCFTL2hXTbowuoVxaWC064k+1IdpBQykLoY 3VCQyX36qs5LJ7wYpfvQzLIaeW9BR45IAz+xH7vHtY/kZu0NyVnpbAuXjbeXvGug TFgVqJMyCLDnv9R8gC6q2XIENGuwsPnWgbMXzA8dQphuUS/6M1BGog6yWw33JZvy m2jgR5DUNjLIf1rGOzzs+LBacYJph1KpAk8LbJc06farOW0IdZA6tgN8qTxnqwCW PxDyypcJZHLKwzWTowwOGXa5SYPNgY/ko7WEgUt7/UbVgn0YIOaakjhD7r1clQRN Som9nGsT9XJQziL9iF38+1s7r1gHvmmPu1k= -----END CERTIFICATE-----Generated at Sun May 11 05:24:34 2025 by rpki-client