$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa File: 95d67456-7bfe-3633-bb8e-6f617a5bea59.roa (raw, json) Hash identifier: a1I0LJk46gZQx6EDEm1gqaFtNAyCTNPxLeONqlbL+p4= Subject key identifier: F6:83:13:07:5C:15:64:43:46:52:DB:20:0F:62:14:91:8A:5C:8E:A0 Certificate issuer: /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de Certificate serial: 010D0C9F432858491AA6D1B121C28D0687BDD340 Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 55194 IP address blocks: 2604:5480:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d1:b1:21:c2:8d:06:87:bd:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=aa508061-762a-4a3c-a222-46767ba72fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:7d:24:52:13:a6:26:d5:e8:5f:62:21:1e: e7:4c:f9:22:5e:b9:3c:c5:a2:56:ba:70:8f:3b:7d: 50:c2:78:4f:fc:f1:3f:ce:55:a0:a3:e6:76:56:8e: 89:16:49:6c:62:a0:6e:ee:87:c2:a4:9c:f5:72:52: 0c:dc:15:2f:ff:8c:5b:a9:df:d4:c2:20:91:9b:db: 02:e5:4c:67:21:1c:97:60:ee:ef:37:d9:84:44:2b: 6d:f2:34:d5:f4:5d:11:d2:81:60:b5:a5:3b:f4:cc: ac:80:50:30:88:4a:1d:9b:4d:a1:dd:49:37:61:e4: 5a:37:73:48:37:9d:0f:65:94:02:d9:b7:52:c4:16: 64:c1:93:ec:80:b7:f7:f8:d7:7d:0d:c6:4e:55:52: 47:73:96:a3:6d:13:be:80:98:20:e6:fd:28:89:9a: 1d:58:e5:18:cb:d6:00:56:f5:8e:31:37:a0:cd:77: a4:26:0e:9e:d3:bc:f2:1a:e4:1c:6f:5b:23:92:7d: 6d:13:49:b0:5d:59:ce:e3:fe:8c:50:66:e8:9f:72: 2b:61:a9:1d:34:e4:28:7f:94:fa:47:16:af:42:b0: 3f:b5:6b:6b:74:2f:2c:5f:f8:33:b1:12:bf:8c:df: e6:85:e2:0b:f0:b6:66:33:8a:35:77:5d:dc:6e:52: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:83:13:07:5C:15:64:43:46:52:DB:20:0F:62:14:91:8A:5C:8E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl X509v3 Authority Key Identifier: keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer sbgp-ipAddrBlock: critical IPv6: 2604:5480:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:87:96:8b:1a:a6:f8:06:cc:e7:45:e5:de:34:98:17:9e:05: ae:06:74:56:ea:fd:13:c3:73:6c:b2:32:22:cb:75:08:c4:86: e9:71:f8:87:f2:95:2f:47:08:ef:33:41:4c:15:46:c7:b6:a5: 11:6f:a9:43:33:79:a4:18:06:56:d2:da:07:ea:a2:df:d4:68: 8d:13:74:9a:0a:a8:92:79:96:a2:c1:b6:d2:cd:8c:b1:fd:13: da:ee:42:22:7d:c0:cd:e0:13:e0:f7:74:3a:e9:4f:44:15:cd: 08:dc:bc:32:6f:50:87:4d:c7:6d:49:8f:d6:74:37:61:0f:ed: d8:1d:8a:a4:c3:e7:66:f3:47:39:ea:ee:f1:af:7d:f7:86:4a: 6f:e8:22:b4:27:16:dc:f9:94:f6:04:81:3e:69:2f:e8:a6:95: 3b:37:da:cf:c2:f8:4c:25:d2:62:3f:3a:7e:f0:89:b4:ea:18: b9:1d:be:29:4e:00:d8:23:1a:3f:6b:a7:fc:83:af:0d:45:91: 48:c1:d4:4f:4d:17:e7:1d:20:82:f4:e1:02:79:95:d2:63:8a: 7a:a8:dd:91:5d:a0:ea:72:55:28:dc:02:6d:2b:9d:0e:17:0a: 9d:41:5f:2d:84:90:86:ac:2b:cb:cf:f8:77:aa:3e:67:a4:5e: 82:d1:47:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkaptGxIcKNBoe900AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhN2ZhZDgtZGQ3OC00OGVlLWI4MGYtMzNjMTZiZDcx N2RlMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YWE1MDgwNjEtNzYyYS00YTNjLWEyMjItNDY3NjdiYTcyZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iF9JFITpibV6F9iIR7nTPkiXrk8xaJWunCP O31QwnhP/PE/zlWgo+Z2Vo6JFklsYqBu7ofCpJz1clIM3BUv/4xbqd/UwiCRm9sC 5UxnIRyXYO7vN9mERCtt8jTV9F0R0oFgtaU79MysgFAwiEodm02h3Uk3YeRaN3NI N50PZZQC2bdSxBZkwZPsgLf3+Nd9DcZOVVJHc5ajbRO+gJgg5v0oiZodWOUYy9YA VvWOMTegzXekJg6e07zyGuQcb1sjkn1tE0mwXVnO4/6MUGbon3IrYakdNOQof5T6 RxavQrA/tWtrdC8sX/gzsRK/jN/mheIL8LZmM4o1d13cblJl1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPaDEwdcFWRDRlLbIA9iFJGKXI6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NGE3 ZmFkOC1kZDc4LTQ4ZWUtYjgwZi0zM2MxNmJkNzE3ZGUvOTVkNjc0NTYtN2JmZS0z NjMzLWJiOGUtNmY2MTdhNWJlYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzRhN2ZhZDgtZGQ3OC00OGVlLWI4 MGYtMzNjMTZiZDcxN2RlLzc0YTdmYWQ4LWRkNzgtNDhlZS1iODBmLTMzYzE2YmQ3 MTdkZS5jcmwwHwYDVR0jBBgwFoAUMoN56V6X/OSClyA78NcdwjSTr5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NGE3ZmFkOC1kZDc4LTQ4ZWUtYjgwZi0zM2Mx NmJkNzE3ZGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgRUgAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGHlosapvgGzOdF5d40mBeeBa4GdFbq/RPDc2yyMiLLdQjEhulx +IfylS9HCO8zQUwVRse2pRFvqUMzeaQYBlbS2gfqot/UaI0TdJoKqJJ5lqLBttLN jLH9E9ruQiJ9wM3gE+D3dDrpT0QVzQjcvDJvUIdNx21Jj9Z0N2EP7dgdiqTD52bz Rznq7vGvffeGSm/oIrQnFtz5lPYEgT5pL+imlTs32s/C+Ewl0mI/On7wibTqGLkd vilOANgjGj9rp/yDrw1FkUjB1E9NF+cdIIL04QJ5ldJjinqo3ZFdoOpyVSjcAm0r nQ4XCp1BXy2EkIasK8vP+HeqPmekXoLRRzs= -----END CERTIFICATE-----Generated at Mon Apr 28 20:34:11 2025 by rpki-client