$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa File: d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa (raw, json) Hash identifier: DSljnhLlPbdEadFd/0EWBHH10gi0TfFeSIDa3s6sjcs= Subject key identifier: 75:3B:29:45:E0:F8:0C:5B:AF:BD:AC:44:BA:E6:7B:4F:70:34:AB:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38309D7EB9CC54B322D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 36617 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:83:09:d7:eb:9c:c5:4b:32:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=af999c66-578e-4503-8009-35a85470a195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:09:48:40:36:75:8a:0a:30:cf:5c:b1:75: 58:43:f6:f5:19:81:81:c9:c6:da:0f:6e:2d:08:7c: e5:1b:23:b1:b0:af:c5:9c:79:b1:d3:db:8b:ed:38: 8d:b6:35:90:14:dd:73:d0:77:56:af:5a:7f:b2:71: dc:73:76:c0:51:83:fa:72:1f:30:8d:a2:e1:7a:ed: 5e:05:b7:be:bc:df:0b:98:1c:26:08:34:c7:08:e1: cf:17:49:7d:05:44:5e:a6:c2:e4:1d:6e:a2:c4:e6: 80:32:a5:77:24:92:2e:18:cc:50:0d:e0:1f:db:34: bf:1e:24:ea:e7:37:32:51:e2:10:8d:d0:bd:fb:3a: ca:94:d7:78:44:68:59:86:af:5d:92:a4:47:17:a8: 4b:a9:d9:34:ba:f0:d5:25:fd:a1:cc:36:01:30:ec: 21:12:bb:db:e5:e7:09:8d:76:d4:ec:9c:ed:1f:d6: a9:17:56:ce:35:f3:dc:18:cd:34:99:dd:a1:5f:0b: c2:c2:49:9e:ad:68:21:86:8c:83:63:d1:0c:02:5c: 9a:49:40:59:b4:23:d3:22:ef:a4:59:f4:d6:d9:75: e3:49:52:1c:45:68:cf:82:4a:5a:d0:4b:52:ba:5d: ea:3f:3f:58:2c:e1:d4:05:cd:9b:84:7a:42:f7:3e: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3B:29:45:E0:F8:0C:5B:AF:BD:AC:44:BA:E6:7B:4F:70:34:AB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cf:a5:6f:45:c2:9b:24:0b:02:88:94:74:2e:be:49:ba:ff: 31:0c:0a:81:ee:d3:36:15:9c:ce:59:12:1d:2f:b9:43:38:24: 08:74:f0:53:6d:fe:29:75:83:98:a5:03:0e:ad:5e:61:fc:a4: 1a:5a:0d:7d:03:a5:4f:b2:84:84:ca:0f:0c:79:1f:20:cf:73: 70:28:cf:8f:9a:22:8c:5b:d4:b3:44:52:ec:ae:e1:01:5d:ec: 48:8d:14:3c:a9:08:9d:1f:b6:4a:4c:43:29:60:97:e9:ce:f2: 1f:ab:8a:81:7a:77:bd:0d:0d:4e:48:2e:1c:98:80:5b:31:51: 7d:c8:48:c0:f1:68:07:c0:1e:8f:e8:23:88:a2:b5:99:0d:29: a0:70:d6:69:da:19:17:91:dc:9c:b2:08:3b:81:d9:41:fa:c5: da:0c:29:2a:05:68:80:8e:12:f5:73:95:92:13:56:5a:60:9e: 47:cc:37:e1:97:69:96:02:c5:a0:1f:0c:19:49:d1:24:c2:65: b0:57:dd:7f:76:7d:7b:fc:f8:6f:e8:30:d7:f4:e8:0a:38:2e: d0:a2:27:f5:5b:fd:de:61:c8:ce:51:cb:0d:54:3c:60:5a:ce: 6b:2f:4e:7e:75:0c:f0:ac:8f:ce:91:44:4b:35:ec:08:99:44: 70:f5:44:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44MJ1+ucxUsyLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk YWY5OTljNjYtNTc4ZS00NTAzLTgwMDktMzVhODU0NzBhMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzIJSEA2dYoKMM9csXVYQ/b1GYGBycbaD24t CHzlGyOxsK/FnHmx09uL7TiNtjWQFN1z0HdWr1p/snHcc3bAUYP6ch8wjaLheu1e Bbe+vN8LmBwmCDTHCOHPF0l9BURepsLkHW6ixOaAMqV3JJIuGMxQDeAf2zS/HiTq 5zcyUeIQjdC9+zrKlNd4RGhZhq9dkqRHF6hLqdk0uvDVJf2hzDYBMOwhErvb5ecJ jXbU7JztH9apF1bONfPcGM00md2hXwvCwkmerWghhoyDY9EMAlyaSUBZtCPTIu+k WfTW2XXjSVIcRWjPgkpa0EtSul3qPz9YLOHUBc2bhHpC9z49PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHU7KUXg+Axbr72sRLrme09wNKssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdmYTY0ZWItYzliNy0z NzZlLThiMmEtMmNlMTZlOWQ1YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDPpW9FwpskCwKIlHQuvkm6/zEMCoHu0zYVnM5ZEh0vuUM4JAh0 8FNt/il1g5ilAw6tXmH8pBpaDX0DpU+yhITKDwx5HyDPc3Aoz4+aIoxb1LNEUuyu 4QFd7EiNFDypCJ0ftkpMQylgl+nO8h+rioF6d70NDU5ILhyYgFsxUX3ISMDxaAfA Ho/oI4iitZkNKaBw1mnaGReR3JyyCDuB2UH6xdoMKSoFaICOEvVzlZITVlpgnkfM N+GXaZYCxaAfDBlJ0STCZbBX3X92fXv8+G/oMNf06Ao4LtCiJ/Vb/d5hyM5Ryw1U PGBazmsvTn51DPCsj86RREs17AiZRHD1RFU= -----END CERTIFICATE-----Generated at Sun May 11 05:26:59 2025 by rpki-client