$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa File: 0697b4b5-f608-31ea-86a4-9f99a6da708b.roa (raw, json) Hash identifier: beiBu8l8JxW1Xs7UWo4wAmtKYHyHxki+u/BIAABj5OE= Subject key identifier: 6A:20:C7:74:C8:06:81:18:4E:8B:AD:05:62:2F:FC:6C:A7:DF:27:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C222AE804390756AFD8F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 397201 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:22:ae:80:43:90:75:6a:fd:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=6239702a-aed5-4928-ad8c-fda65b7a93aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f7:bb:a8:2f:e3:6a:12:a8:77:28:c4:87:36: fa:e2:6b:25:5f:77:8d:e2:b5:a3:32:48:ee:6c:4b: 26:9b:db:c0:91:72:2a:01:f7:96:7f:0d:74:5b:b3: d7:3c:8d:14:99:1d:7b:55:1e:9f:da:fb:33:d1:50: 5a:5a:9a:fb:58:0e:92:71:1f:26:b4:58:1d:0c:30: 95:50:b5:27:89:c0:33:45:54:a3:30:ad:0a:28:fb: c5:24:9f:f9:2e:f7:f2:45:8d:36:39:1e:a8:c7:5b: 41:90:ff:90:09:13:77:49:7d:30:36:e4:ca:63:65: d9:d5:2b:45:45:83:7c:79:1d:2e:be:ba:4d:c5:f0: 69:38:68:3e:f7:a3:7c:b1:9f:10:60:be:d7:01:5f: b6:7c:10:d3:35:9c:de:af:af:0a:14:bd:30:ae:de: f4:e8:92:29:e6:15:0c:e1:e4:7a:5d:05:ab:1e:5d: 75:6c:c8:86:9b:6e:c5:90:26:81:70:61:b0:29:36: 0c:62:04:d3:99:a1:fa:12:61:a5:65:34:72:9f:bb: 66:bc:b6:86:d2:75:b0:3d:42:72:e6:c9:cb:85:49: 96:8f:26:cb:35:18:da:d4:43:32:a1:b2:fc:a1:93: 97:80:a0:11:58:c2:3e:70:7e:f0:9a:85:7c:c8:14: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:20:C7:74:C8:06:81:18:4E:8B:AD:05:62:2F:FC:6C:A7:DF:27:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:41:80:b3:b0:eb:9a:bd:86:f8:4b:e8:26:ab:bf:42:c5:fd: 6a:fc:ca:f0:07:f1:36:77:26:c0:14:63:4e:da:ab:e4:43:f5: aa:17:c0:76:52:95:a6:60:15:77:f2:b0:bc:11:f7:eb:f4:b3: d0:84:be:bd:c5:89:71:b3:45:17:68:0e:05:8a:bc:66:ba:bc: 0c:4a:4b:c9:d8:41:ab:06:ac:ba:c6:88:30:6a:f0:5d:fd:d9: 19:bd:56:c2:85:a5:cc:55:24:1f:2e:e3:b8:9e:2e:35:03:32: a8:a9:5c:c0:f5:a9:e6:92:9d:d5:e7:9e:f8:07:2b:da:43:b8: 2c:22:be:ec:b8:6b:47:12:10:44:5a:35:3b:9e:c7:d7:6c:7a: 8a:3c:e3:d4:81:34:cd:30:d5:8a:0a:2f:a6:9a:29:e0:e5:ba: b5:59:f8:be:f4:4e:b7:29:86:c1:7d:d9:1c:76:cc:02:1d:55: df:5f:b1:66:c6:e1:b6:35:49:1b:e3:5c:0d:18:d3:78:a5:52: 16:2a:3f:21:39:66:4d:23:98:70:7e:81:b6:25:58:53:ec:6d: b3:6e:4b:84:1f:c2:8b:1d:ee:a3:42:34:d7:47:d3:0e:26:0d: f1:55:65:e0:09:8b:fa:08:74:a2:ca:e8:bc:7e:e0:87:c5:f2: b6:e1:aa:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiKugEOQdWr9j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk NjIzOTcwMmEtYWVkNS00OTI4LWFkOGMtZmRhNjViN2E5M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfe7qC/jahKodyjEhzb64mslX3eN4rWjMkju bEsmm9vAkXIqAfeWfw10W7PXPI0UmR17VR6f2vsz0VBaWpr7WA6ScR8mtFgdDDCV ULUnicAzRVSjMK0KKPvFJJ/5LvfyRY02OR6ox1tBkP+QCRN3SX0wNuTKY2XZ1StF RYN8eR0uvrpNxfBpOGg+96N8sZ8QYL7XAV+2fBDTNZzer68KFL0wrt706JIp5hUM 4eR6XQWrHl11bMiGm27FkCaBcGGwKTYMYgTTmaH6EmGlZTRyn7tmvLaG0nWwPUJy 5snLhUmWjybLNRja1EMyobL8oZOXgKARWMI+cH7wmoV8yBTcAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGogx3TIBoEYToutBWIv/Gyn3ydBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDY5N2I0YjUtZjYwOC0z MWVhLTg2YTQtOWY5OWE2ZGE3MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJBgLOw65q9hvhL6Carv0LF/Wr8yvAH8TZ3JsAUY07aq+RD9aoX wHZSlaZgFXfysLwR9+v0s9CEvr3FiXGzRRdoDgWKvGa6vAxKS8nYQasGrLrGiDBq 8F392Rm9VsKFpcxVJB8u47ieLjUDMqipXMD1qeaSndXnnvgHK9pDuCwivuy4a0cS EERaNTuex9dseoo849SBNM0w1YoKL6aaKeDlurVZ+L70TrcphsF92Rx2zAIdVd9f sWbG4bY1SRvjXA0Y03ilUhYqPyE5Zk0jmHB+gbYlWFPsbbNuS4Qfwosd7qNCNNdH 0w4mDfFVZeAJi/oIdKLK6Lx+4IfF8rbhqnw= -----END CERTIFICATE-----Generated at Mon Apr 28 10:57:02 2025 by rpki-client