$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcbf31e4-0309-38cb-b27e-d0cb27abbe3d.roa File: bcbf31e4-0309-38cb-b27e-d0cb27abbe3d.roa (raw, json) Hash identifier: k2ZF0xMKI0OvRSVhFtC1qY1uhwOu8jRKmFNYVOzErM0= Subject key identifier: CA:47:A8:EA:0C:83:F5:6F:E8:37:6E:4F:FC:5C:4C:29:4C:0D:C7:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E387A82334948F6A735910 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcbf31e4-0309-38cb-b27e-d0cb27abbe3d.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396555 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:a8:23:34:94:8f:6a:73:59:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=40f7fe15-502b-49c0-ac6a-f974be0ad763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:51:90:c3:24:bb:3e:67:22:db:8f:48:76: c6:c4:2c:11:35:21:c5:ab:2c:6e:57:4b:b2:9e:cc: 99:89:40:d2:34:3e:57:0d:ad:91:44:ba:c0:7c:ff: 94:8a:b0:35:0a:bd:12:8d:ba:5a:ff:71:c2:31:1a: 54:f3:5f:73:b6:d2:9a:78:ae:cf:ef:be:c4:3c:e0: 13:d9:1b:29:d7:a4:fa:17:db:f4:66:da:5d:89:e0: c0:fd:51:2d:0d:20:06:74:0f:79:17:b7:2d:6b:ec: 59:f1:18:75:05:ff:4d:f1:25:d2:34:6f:8e:13:19: cc:80:73:00:7a:a0:1d:55:ad:3a:af:1b:8c:73:7f: 51:87:5c:dd:77:ec:19:a4:8a:57:2d:e2:60:ae:a9: 80:47:84:bf:e4:b5:9d:60:ff:ea:8b:e5:54:34:ac: 2e:50:cb:45:d5:88:19:e2:be:0f:ed:0d:8f:91:67: 77:05:0b:1f:fb:36:11:f6:5e:b7:7d:a6:13:ae:f9: f4:f8:9e:c4:16:8d:00:c1:e9:5a:75:9c:2a:cf:d9: db:b2:8c:ba:49:9e:ee:30:d2:14:27:03:db:21:0e: be:a9:e3:7e:60:ee:bb:02:6e:f4:d5:46:22:8b:b5: cc:f0:9c:f4:2e:3e:d9:91:d9:9b:cc:c8:aa:16:5d: fe:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:47:A8:EA:0C:83:F5:6F:E8:37:6E:4F:FC:5C:4C:29:4C:0D:C7:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcbf31e4-0309-38cb-b27e-d0cb27abbe3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9e:9d:46:41:35:2e:c1:c9:f5:41:d2:95:48:78:84:56:98: 22:b7:7c:a8:2c:80:6c:fc:33:f6:c2:9e:be:86:97:e0:f5:fa: e4:20:2f:31:5c:6a:6e:7e:23:d8:49:7b:e1:ee:25:6e:82:6a: f7:f8:4d:84:0e:5f:1c:ed:6a:80:2e:3b:d6:6a:35:f2:33:12: aa:78:d8:0e:2e:ef:83:51:f4:ac:ae:ea:06:c4:03:11:1a:b1: 08:28:a3:9a:03:79:dc:ab:a4:f0:78:c4:2e:78:50:da:0b:7d: 87:fb:ad:63:ba:b5:4b:89:23:d3:17:20:56:11:07:4d:53:13: 61:76:42:19:5b:c8:2f:d4:7b:d6:a6:2c:f9:61:4e:b2:34:66: d6:ae:fc:36:12:4b:0d:8d:e0:ca:03:ac:11:3a:a7:93:fd:b1: d9:7d:63:a7:55:7d:f8:6d:a3:0c:b5:ee:1c:b9:ae:fc:94:d6: cd:72:d6:31:e4:f3:22:d7:e4:75:45:5e:5d:fe:45:a2:62:3a: 87:74:b7:f4:b8:15:5e:bc:6c:f4:6c:7e:29:62:20:db:0d:09: 71:e2:87:92:5a:55:54:ab:5b:39:a9:21:23:73:0f:8e:ad:d1: ec:1b:ee:8b:63:d4:88:40:1f:ac:c2:e2:06:d0:c7:24:0e:64: 78:b1:e5:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44eoIzSUj2pzWRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk NDBmN2ZlMTUtNTAyYi00OWMwLWFjNmEtZjk3NGJlMGFkNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/RRkMMkuz5nItuPSHbGxCwRNSHFqyxuV0uy nsyZiUDSND5XDa2RRLrAfP+UirA1Cr0Sjbpa/3HCMRpU819zttKaeK7P777EPOAT 2Rsp16T6F9v0ZtpdieDA/VEtDSAGdA95F7cta+xZ8Rh1Bf9N8SXSNG+OExnMgHMA eqAdVa06rxuMc39Rh1zdd+wZpIpXLeJgrqmAR4S/5LWdYP/qi+VUNKwuUMtF1YgZ 4r4P7Q2PkWd3BQsf+zYR9l63faYTrvn0+J7EFo0AweladZwqz9nbsoy6SZ7uMNIU JwPbIQ6+qeN+YO67Am701UYii7XM8Jz0Lj7ZkdmbzMiqFl3+TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpHqOoMg/Vv6DduT/xcTClMDceFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNiZjMxZTQtMDMwOS0z OGNiLWIyN2UtZDBjYjI3YWJiZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGenUZBNS7ByfVB0pVIeIRWmCK3fKgsgGz8M/bCnr6Gl+D1+uQg LzFcam5+I9hJe+HuJW6Cavf4TYQOXxztaoAuO9ZqNfIzEqp42A4u74NR9Kyu6gbE AxEasQgoo5oDedyrpPB4xC54UNoLfYf7rWO6tUuJI9MXIFYRB01TE2F2QhlbyC/U e9amLPlhTrI0Ztau/DYSSw2N4MoDrBE6p5P9sdl9Y6dVffhtowy17hy5rvyU1s1y 1jHk8yLX5HVFXl3+RaJiOod0t/S4FV68bPRsfiliINsNCXHih5JaVVSrWzmpISNz D46t0ewb7otj1IhAH6zC4gbQxyQOZHix5RY= -----END CERTIFICATE-----Generated at Sun May 11 05:35:09 2025 by rpki-client