$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa File: d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa (raw, json) Hash identifier: DJxp/Hm33d17BsGBp6ghC8n5zmgZgYl94/Tp426/sPw= Subject key identifier: 31:5B:96:BA:9C:66:C8:57:A6:B3:7A:C2:C4:CB:32:2E:24:CF:BB:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38857C997282E57EB2EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396599 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:57:c9:97:28:2e:57:eb:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=501bc1a3-91ed-46bb-9c1f-4ef496b68ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:82:ad:14:0f:72:37:2b:53:1e:3d:38:4c: 4c:42:a0:2f:0b:7a:b8:e1:2f:61:52:43:55:e8:ac: db:cd:59:78:dd:ab:d5:f4:d4:ab:3f:fb:a7:1c:55: b3:dc:42:1a:3b:aa:0e:4b:02:20:cc:5c:51:86:bf: 9c:2e:76:f7:56:73:9f:99:01:c3:f4:b8:f7:8f:dc: 1c:7e:b1:14:de:4b:5f:c4:c0:e6:5e:96:70:f7:76: 98:b3:01:77:d4:9a:9b:32:55:f4:d7:55:f5:e5:05: 4a:65:b2:97:39:ce:47:2c:fe:be:f7:5a:59:3b:9b: aa:0c:dc:d4:60:e0:4e:ad:1f:5f:4e:f2:e5:b9:94: c1:4c:57:42:c1:6b:82:b9:83:86:6b:fe:35:9e:75: f0:d3:75:d1:3a:1c:35:62:60:4d:18:5b:c3:80:fe: b2:5d:42:6e:69:69:01:ed:88:fa:1d:9e:fe:d1:f3: b7:21:03:ab:63:db:b4:62:a4:9a:1a:f8:5b:d0:67: 0b:0c:d2:48:2d:c5:f0:4a:32:c2:5b:2e:f3:c0:f3: 32:8f:1d:0a:d8:a4:30:ad:b0:c8:be:ec:4b:23:d0: 3b:b6:21:b3:a3:9e:93:22:1a:40:e5:03:f6:71:5d: 85:84:c3:a0:6a:f5:51:20:29:05:34:db:2f:68:46: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5B:96:BA:9C:66:C8:57:A6:B3:7A:C2:C4:CB:32:2E:24:CF:BB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9a:33:fb:92:16:3d:e3:a4:34:89:e9:ad:4b:26:02:84:2f: e9:65:b0:c6:d9:24:2a:e8:1d:18:32:e3:5e:2c:12:c5:b0:70: e2:ca:9e:d5:ab:5e:ef:34:6a:b2:40:8a:7b:46:d2:ab:43:02: fb:d7:dc:1c:00:f3:5c:fb:03:17:f8:b0:dc:56:bc:99:b8:4a: 33:f1:83:d0:f1:9b:90:51:ee:be:17:11:01:b2:e7:df:45:ab: 10:b3:ba:d3:3a:35:1d:f2:20:3e:3e:f8:9b:b6:3e:91:5e:51: be:ae:3d:7b:98:73:99:b3:f5:5d:fd:f8:e1:87:54:07:92:ed: cd:c8:c5:f1:3c:80:9d:a4:c0:a6:8a:ca:59:89:90:4b:04:e5: 48:5b:13:d7:73:18:c7:5c:80:52:6e:99:ff:a2:b7:3d:99:3f: 93:2b:3b:b6:f8:ef:15:60:2d:f2:1e:dd:2d:96:7a:09:9d:63: 46:82:83:c2:16:7b:87:0c:c1:09:ef:dc:58:43:30:1c:3b:63: 3f:df:2e:dd:01:1e:80:fe:1a:20:b2:13:2c:1c:1a:6d:17:86: b9:e8:fd:e5:58:ff:4e:9b:db:1c:a5:e6:96:c0:ed:1b:17:87: 99:d0:15:e1:27:3a:45:c1:8c:1f:57:8c:79:e8:97:d1:f1:c1: b6:0b:94:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44hXyZcoLlfrLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk NTAxYmMxYTMtOTFlZC00NmJiLTljMWYtNGVmNDk2YjY4ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2CrRQPcjcrUx49OExMQqAvC3q44S9hUkNV 6KzbzVl43avV9NSrP/unHFWz3EIaO6oOSwIgzFxRhr+cLnb3VnOfmQHD9Lj3j9wc frEU3ktfxMDmXpZw93aYswF31JqbMlX011X15QVKZbKXOc5HLP6+91pZO5uqDNzU YOBOrR9fTvLluZTBTFdCwWuCuYOGa/41nnXw03XROhw1YmBNGFvDgP6yXUJuaWkB 7Yj6HZ7+0fO3IQOrY9u0YqSaGvhb0GcLDNJILcXwSjLCWy7zwPMyjx0K2KQwrbDI vuxLI9A7tiGzo56TIhpA5QP2cV2FhMOgavVRICkFNNsvaEbD3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFblrqcZshXprN6wsTLMi4kz7thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFkMGE2NzUtZTJkMi0z NjY0LWIxYjUtOGJkNTBiNWQ0NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2aM/uSFj3jpDSJ6a1LJgKEL+llsMbZJCroHRgy414sEsWwcOLK ntWrXu80arJAintG0qtDAvvX3BwA81z7Axf4sNxWvJm4SjPxg9Dxm5BR7r4XEQGy 599FqxCzutM6NR3yID4++Ju2PpFeUb6uPXuYc5mz9V39+OGHVAeS7c3IxfE8gJ2k wKaKylmJkEsE5UhbE9dzGMdcgFJumf+itz2ZP5MrO7b47xVgLfIe3S2WegmdY0aC g8IWe4cMwQnv3FhDMBw7Yz/fLt0BHoD+GiCyEywcGm0Xhrno/eVY/06b2xyl5pbA 7RsXh5nQFeEnOkXBjB9XjHnol9HxwbYLlIA= -----END CERTIFICATE-----Generated at Sun May 11 05:26:53 2025 by rpki-client