$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa File: c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa (raw, json) Hash identifier: HhaCGhdo6FsAcFPFHbrwYRVygmvRwW0qVeibzoBUJlo= Subject key identifier: 29:E3:60:C0:5E:9C:C3:BF:BD:BB:D8:50:B4:17:11:BF:6E:8F:9A:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E387260FC9DC3AFCCC9D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 40717 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:26:0f:c9:dc:3a:fc:cc:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=179694b8-dd89-4f80-aa97-7d9cb4c043ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:c9:5e:ca:8e:52:2c:d4:2c:38:3b:a6:1c: cd:2c:a1:5b:03:7f:e3:1c:56:94:91:b2:7b:63:8a: 00:b5:6e:40:fd:13:65:a5:d8:d7:06:cd:9c:f0:88: e1:74:69:9e:5c:64:6f:8e:7e:33:98:4e:ac:09:9c: 8c:19:d5:49:a7:6e:c8:8a:59:00:a5:05:18:b3:d2: 30:62:e3:40:e9:04:c8:59:0b:75:88:7a:f7:5e:ab: c5:68:85:f1:01:31:35:bd:28:96:06:3c:1b:7f:c9: b0:d1:be:51:af:b8:e1:70:5c:a4:bd:45:ab:49:a5: 44:50:97:e4:5a:1a:6b:e3:ac:ca:8d:35:1a:2f:fb: 96:d4:cd:d9:11:9e:c1:07:0d:6f:f0:76:53:3f:29: 90:af:61:48:f0:b2:e8:71:c6:dd:12:9f:3f:51:11: 02:51:5b:b4:52:df:1a:58:ac:c1:77:d3:c4:e4:ad: 6e:d7:ae:de:b1:88:79:61:f8:14:73:88:11:01:d2: b2:4f:6e:1a:01:86:b8:b1:1a:ca:12:cd:5b:4a:2d: e7:76:b9:51:38:34:12:7d:07:85:25:7c:bd:8d:6b: 8b:49:ef:b3:bc:d0:bf:f9:fd:1e:9d:a9:d6:d3:57: 6e:5c:59:7a:60:f4:99:2d:76:3d:f1:47:1b:5f:09: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E3:60:C0:5E:9C:C3:BF:BD:BB:D8:50:B4:17:11:BF:6E:8F:9A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:da:28:8b:1a:17:38:3c:5d:52:47:d6:ba:7a:19:2a:f0:4e: be:c1:bb:bd:00:9f:5a:27:c8:f0:65:fa:51:16:3e:9f:d1:bd: 9f:05:56:d0:3b:5d:bd:9a:61:2d:1e:a3:66:89:19:1a:4a:e6: ec:57:f6:05:27:b3:62:85:56:55:6d:6b:3b:70:1d:d5:70:c4: ba:67:27:e3:1f:a5:37:1f:9b:d1:2e:1d:d0:c7:b2:3e:f7:48: 7d:67:08:84:79:69:03:16:3f:61:2b:47:9f:af:99:68:75:eb: db:5a:73:0b:f3:fc:3a:ea:44:e9:11:cb:f1:0d:28:3c:24:ab: 73:fc:d7:ce:39:b8:dd:07:68:ab:f0:7d:75:fd:da:37:8f:f3: 6d:8f:a3:09:93:2f:37:c7:2a:78:1e:c4:5d:7d:97:cf:40:7e: d2:a8:d1:e2:ec:f6:f9:8f:f7:c7:ac:ac:e3:9e:0a:0a:11:43: 4b:ef:ab:a5:d7:a1:7b:29:1e:0f:d5:7e:70:89:03:77:d7:f7: 01:24:14:de:bd:8c:a1:aa:32:82:cf:6e:47:6a:22:2d:a6:97: 25:22:26:90:a8:8e:5e:53:05:ea:e4:5d:0c:4f:43:d4:bf:c3: e0:c9:53:e4:8f:fc:89:ab:56:f4:0e:db:2e:26:f3:18:1d:5e: 54:e6:95:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44cmD8ncOvzMnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk MTc5Njk0YjgtZGQ4OS00ZjgwLWFhOTctN2Q5Y2I0YzA0M2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMvJXsqOUizULDg7phzNLKFbA3/jHFaUkbJ7 Y4oAtW5A/RNlpdjXBs2c8IjhdGmeXGRvjn4zmE6sCZyMGdVJp27IilkApQUYs9Iw YuNA6QTIWQt1iHr3XqvFaIXxATE1vSiWBjwbf8mw0b5Rr7jhcFykvUWrSaVEUJfk Whpr46zKjTUaL/uW1M3ZEZ7BBw1v8HZTPymQr2FI8LLoccbdEp8/URECUVu0Ut8a WKzBd9PE5K1u167esYh5YfgUc4gRAdKyT24aAYa4sRrKEs1bSi3ndrlRODQSfQeF JXy9jWuLSe+zvNC/+f0enanW01duXFl6YPSZLXY98UcbXwlWRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCnjYMBenMO/vbvYULQXEb9uj5oBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdjOTViY2QtOTc5YS0z YzA5LWIxNmUtNjFjNGY5MWE0Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/aKIsaFzg8XVJH1rp6GSrwTr7Bu70An1onyPBl+lEWPp/RvZ8F VtA7Xb2aYS0eo2aJGRpK5uxX9gUns2KFVlVtaztwHdVwxLpnJ+MfpTcfm9EuHdDH sj73SH1nCIR5aQMWP2ErR5+vmWh169tacwvz/DrqROkRy/ENKDwkq3P81845uN0H aKvwfXX92jeP822PowmTLzfHKngexF19l89AftKo0eLs9vmP98esrOOeCgoRQ0vv q6XXoXspHg/VfnCJA3fX9wEkFN69jKGqMoLPbkdqIi2mlyUiJpCojl5TBerkXQxP Q9S/w+DJU+SP/ImrVvQO2y4m8xgdXlTmle4= -----END CERTIFICATE-----Generated at Sun May 11 05:23:40 2025 by rpki-client