$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da924daf-31c2-37c8-9169-f6658d815fd6.roa File: da924daf-31c2-37c8-9169-f6658d815fd6.roa (raw, json) Hash identifier: wOkYGGy74RfXhI4jf7v8wXTjMQyYJ/qXhNji/dxAmEw= Subject key identifier: 15:49:C1:DF:AD:35:63:D2:99:63:A2:86:BC:26:77:B3:A7:E2:2E:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E388EA297D69B2BE1A8700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da924daf-31c2-37c8-9169-f6658d815fd6.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 36625 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:ea:29:7d:69:b2:be:1a:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=c43e5a71-36ec-404c-b809-efca47515447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:31:ad:e0:d7:f9:4f:e3:90:3a:67:96:f8: 07:83:bb:9b:79:3d:95:a1:c9:de:31:47:cd:74:07: 65:af:ab:f4:f3:f2:93:e0:9a:84:7d:bd:a3:94:09: 1e:72:cc:32:64:fe:13:45:e7:72:05:87:0f:29:95: 67:ea:4b:9d:82:fd:b4:61:fc:9e:82:41:56:66:78: 0b:a6:9c:3f:24:8c:5e:e4:59:3a:d9:c9:0a:13:10: 79:a6:70:e2:a3:a9:64:89:a3:03:5a:23:4d:38:50: c3:23:b3:4c:a7:9e:53:1a:e9:89:d3:71:8f:e1:eb: 2b:2e:42:90:7b:0d:b7:88:46:c5:ec:9d:d5:72:5d: 18:ea:51:81:8f:c3:e0:cf:96:54:7b:f2:e2:5b:21: a2:4d:35:68:d4:65:8c:94:f5:b4:da:47:c2:8c:b6: de:f2:76:26:f2:5b:bd:b6:ea:32:6f:60:d4:74:ee: 97:70:af:e5:08:83:93:df:24:2a:bc:fc:c9:72:89: f9:a4:4e:52:7b:a9:ff:2c:16:4e:ba:13:11:c1:d5: 8d:99:f4:79:d0:eb:56:31:93:65:28:07:5d:b5:76: 36:02:93:13:a8:4f:e6:ff:17:26:17:60:1b:f9:58: f2:be:a7:86:53:aa:99:ac:21:83:1a:85:f1:10:42: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:49:C1:DF:AD:35:63:D2:99:63:A2:86:BC:26:77:B3:A7:E2:2E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da924daf-31c2-37c8-9169-f6658d815fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fc:ca:44:3b:e4:3d:18:6c:a9:f9:0c:41:3a:d9:c3:a1:d6: e5:6d:8e:26:53:e6:c8:91:53:1a:e8:d2:68:0e:b6:07:8c:96: 35:da:a3:37:41:0e:91:6c:de:e1:06:76:c8:7a:a3:91:ec:70: 5d:1a:31:32:5d:66:9e:08:c1:32:11:a7:4f:6f:e5:21:e8:0d: 55:9c:18:32:d2:2a:f8:01:fb:93:64:cc:0c:17:12:08:d9:28: 97:58:56:5c:f2:a4:06:d6:41:44:9c:f1:f4:6f:62:4d:f4:2b: 77:5a:15:a7:a8:55:1e:65:2b:5c:e9:8d:50:7b:02:c0:67:dd: 3d:da:fe:8c:ec:be:d0:c1:49:49:f2:00:b0:bd:cd:54:37:2a: 16:4a:aa:e7:08:86:93:cf:89:5f:18:9d:b9:ca:08:47:18:e1: c8:27:aa:19:6d:3d:29:99:f1:5f:49:b7:fd:af:0a:e1:a1:02: 1b:1c:0c:bd:3a:59:09:a2:cf:c5:44:71:18:c4:9b:6c:e9:cf: 67:fc:30:3d:32:8b:80:67:86:dd:60:9d:89:5b:1b:c3:2e:0e: 9c:35:aa:f2:35:14:31:ba:1b:d5:5b:dc:00:12:fa:74:0e:2b: 51:37:d9:a8:ca:b9:e6:72:d9:1a:36:12:42:04:a7:ca:4c:54: 35:6c:c2:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44jqKX1psr4ahwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk YzQzZTVhNzEtMzZlYy00MDRjLWI4MDktZWZjYTQ3NTE1NDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyAxreDX+U/jkDpnlvgHg7ubeT2VocneMUfN dAdlr6v08/KT4JqEfb2jlAkecswyZP4TRedyBYcPKZVn6kudgv20YfyegkFWZngL ppw/JIxe5Fk62ckKExB5pnDio6lkiaMDWiNNOFDDI7NMp55TGumJ03GP4esrLkKQ ew23iEbF7J3Vcl0Y6lGBj8Pgz5ZUe/LiWyGiTTVo1GWMlPW02kfCjLbe8nYm8lu9 tuoyb2DUdO6XcK/lCIOT3yQqvPzJcon5pE5Se6n/LBZOuhMRwdWNmfR50OtWMZNl KAddtXY2ApMTqE/m/xcmF2Ab+VjyvqeGU6qZrCGDGoXxEEIMEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBVJwd+tNWPSmWOihrwmd7On4i71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE5MjRkYWYtMzFjMi0z N2M4LTkxNjktZjY2NThkODE1ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC38ykQ75D0YbKn5DEE62cOh1uVtjiZT5siRUxro0mgOtgeMljXa ozdBDpFs3uEGdsh6o5HscF0aMTJdZp4IwTIRp09v5SHoDVWcGDLSKvgB+5NkzAwX EgjZKJdYVlzypAbWQUSc8fRvYk30K3daFaeoVR5lK1zpjVB7AsBn3T3a/ozsvtDB SUnyALC9zVQ3KhZKqucIhpPPiV8YnbnKCEcY4cgnqhltPSmZ8V9Jt/2vCuGhAhsc DL06WQmiz8VEcRjEm2zpz2f8MD0yi4Bnht1gnYlbG8MuDpw1qvI1FDG6G9Vb3AAS +nQOK1E32ajKueZy2Ro2EkIEp8pMVDVswoM= -----END CERTIFICATE-----Generated at Sun May 11 06:20:48 2025 by rpki-client