$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa File: ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa (raw, json) Hash identifier: TVYc4LxXJCq//1O+C+V8Gu+B0aV+O0F3r1g7g7nf4Rw= Subject key identifier: C0:2F:B8:5E:20:BD:3F:9A:AA:98:15:62:18:24:B0:8D:99:DA:E3:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38554604350D46CC40100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 396608 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:54:60:43:50:d4:6c:c4:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=23e85128-9401-4f42-a021-3df6fe564480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:f7:29:ff:4c:e7:f3:20:2d:da:fd:44:f7: 13:d4:82:e1:03:6d:51:d0:a7:bf:5a:a8:82:1c:73: ed:bd:c0:6d:33:db:b5:4d:89:32:bd:0e:b3:da:12: 4b:4a:72:58:05:b5:95:69:8a:ea:5a:4a:0a:97:b4: ac:2f:ae:5a:64:58:a9:e9:af:ed:d4:ab:39:77:98: 13:99:44:b2:3e:75:ff:16:00:87:65:fd:ab:35:cf: d6:d5:b8:fe:b0:cf:16:45:c8:71:64:66:c2:2d:1b: 06:5c:97:db:33:e4:06:c8:db:5e:65:a8:73:93:26: 98:db:3e:c3:66:fe:88:4a:a1:55:cc:1b:bc:f1:c4: 7d:19:20:71:90:e9:2f:af:1b:2d:62:7b:89:53:87: 43:cd:c2:ec:7f:cf:67:43:a2:d9:03:53:49:e1:3d: 40:6e:d7:d2:05:c9:8a:92:10:48:9a:6b:49:2d:3d: c4:73:3d:3f:55:24:75:c9:5b:8c:ee:91:d7:d0:f8: b2:de:67:1b:b7:d2:70:46:62:85:ae:b4:1d:ea:0c: 8f:c8:0f:e2:06:9d:e6:b7:30:1e:15:96:8a:53:de: 12:51:a4:7c:8a:b4:a0:4b:7a:fe:e5:e7:3e:49:2b: a8:b5:74:17:76:09:90:7f:cf:55:e6:aa:85:3c:66: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2F:B8:5E:20:BD:3F:9A:AA:98:15:62:18:24:B0:8D:99:DA:E3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba4e71c0-9dba-3d97-9b38-74d71df6a323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8b:89:c5:30:3a:08:6c:a7:18:2a:b2:07:75:26:5f:70:54: 4f:64:6e:0c:9e:4a:4e:1a:4a:74:f6:4b:ed:ad:30:ca:15:ac: ac:2f:47:3e:e2:b0:bf:cb:71:5b:5a:2e:67:f9:9c:8d:64:a6: 88:f8:cc:46:44:e8:9a:62:a0:05:66:5f:6d:dd:fb:6a:ac:05: cd:26:1b:3d:16:84:b6:cb:17:b1:35:3f:84:93:f0:c6:f6:24: 33:50:fd:e7:fe:fb:cc:62:95:73:7b:f4:f0:83:0f:24:de:45: 1e:c8:87:b7:f1:fe:5c:8f:27:ef:a8:91:5f:c3:2b:d6:30:86: 87:12:fe:73:05:bd:b2:da:5f:c1:a9:83:6b:51:db:0d:e5:f9: 17:f4:5e:b5:a7:f5:22:0f:4f:3b:63:d1:58:8b:6e:bc:68:7a: bd:9c:31:e6:25:31:ed:57:92:30:3b:6e:ee:d8:9f:24:11:51: 23:46:31:08:63:95:64:9a:da:94:e7:01:7b:8b:6c:e4:33:cb: 6b:d3:32:f4:d4:a4:92:1f:4f:df:09:8b:f8:52:b3:5e:c9:f7: 9e:00:74:b0:cf:79:3f:32:b8:f3:36:cb:0f:84:af:bc:ab:2f: cc:23:93:dd:7a:dd:92:44:c7:4e:1f:b6:48:bd:83:f5:12:34: c1:3e:27:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44VUYENQ1GzEAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk MjNlODUxMjgtOTQwMS00ZjQyLWEwMjEtM2RmNmZlNTY0NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ED3Kf9M5/MgLdr9RPcT1ILhA21R0Ke/WqiC HHPtvcBtM9u1TYkyvQ6z2hJLSnJYBbWVaYrqWkoKl7SsL65aZFip6a/t1Ks5d5gT mUSyPnX/FgCHZf2rNc/W1bj+sM8WRchxZGbCLRsGXJfbM+QGyNteZahzkyaY2z7D Zv6ISqFVzBu88cR9GSBxkOkvrxstYnuJU4dDzcLsf89nQ6LZA1NJ4T1AbtfSBcmK khBImmtJLT3Ecz0/VSR1yVuM7pHX0Piy3mcbt9JwRmKFrrQd6gyPyA/iBp3mtzAe FZaKU94SUaR8irSgS3r+5ec+SSuotXQXdgmQf89V5qqFPGaXYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMAvuF4gvT+aqpgVYhgksI2Z2uNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE0ZTcxYzAtOWRiYS0z ZDk3LTliMzgtNzRkNzFkZjZhMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFeLicUwOghspxgqsgd1Jl9wVE9kbgyeSk4aSnT2S+2tMMoVrKwv Rz7isL/LcVtaLmf5nI1kpoj4zEZE6JpioAVmX23d+2qsBc0mGz0WhLbLF7E1P4ST 8Mb2JDNQ/ef++8xilXN79PCDDyTeRR7Ih7fx/lyPJ++okV/DK9YwhocS/nMFvbLa X8Gpg2tR2w3l+Rf0XrWn9SIPTztj0ViLbrxoer2cMeYlMe1XkjA7bu7YnyQRUSNG MQhjlWSa2pTnAXuLbOQzy2vTMvTUpJIfT98Ji/hSs17J954AdLDPeT8yuPM2yw+E r7yrL8wjk9163ZJEx04ftki9g/USNME+Jwc= -----END CERTIFICATE-----Generated at Sun May 11 05:28:14 2025 by rpki-client