$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/150574a3-0eb8-3413-864e-d6941bfc6bab.roa File: 150574a3-0eb8-3413-864e-d6941bfc6bab.roa (raw, json) Hash identifier: caePXB+LYRyeIjAYRVuG3zOd0LwXtF+RuW1Pzeg6ur0= Subject key identifier: 73:22:C2:37:51:3D:18:44:90:70:CA:12:C1:0E:38:49:21:18:A8:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D7A659B258FB1D29BFBA8080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/150574a3-0eb8-3413-864e-d6941bfc6bab.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 7342 IP address blocks: 2620:74:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:59:b2:58:fb:1d:29:bf:ba:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=b3e4bce7-a0c3-4e82-8126-bf6605770d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:f5:1c:50:c4:ad:3a:04:cb:fc:76:1c:9e: 63:44:f9:16:93:48:cc:64:0f:79:29:66:a8:63:22: e9:d1:03:a1:75:b5:be:85:0f:f8:8c:83:c2:bb:6f: b5:96:06:92:ad:0e:87:09:c3:c5:19:8f:2f:84:49: 9b:77:c2:e9:b0:db:92:5e:35:aa:87:f2:b3:31:3e: b7:d4:fe:9e:5c:fe:ba:90:92:cd:7c:c6:d7:a2:f8: 6c:e6:c5:86:4d:34:d9:34:54:21:2b:4d:3d:bb:71: ec:88:c7:9c:d0:99:80:fb:9b:ba:07:56:3e:da:9b: 43:48:88:2e:fd:53:5f:03:e6:11:7e:28:9c:7e:c8: a2:7d:2d:b0:d4:bb:7e:62:80:c3:84:ab:97:ec:be: 54:95:79:c8:1e:6a:0e:7d:6e:bb:d8:a4:c2:ad:de: cc:d3:25:e1:4a:5f:16:94:86:0f:2b:c8:da:42:63: ce:9c:08:c1:aa:e5:17:c4:7a:0c:9c:9c:35:02:7e: 7c:90:7a:98:ab:8e:71:f2:c6:83:11:d6:4b:06:07: 07:78:b3:8b:13:0e:3d:79:0d:ac:5c:b5:3a:bf:9e: 8d:4b:89:bc:14:5a:8c:bf:6b:42:3c:0f:55:b6:b5: e0:e4:e4:31:dc:35:7a:13:94:08:95:ce:ed:e5:fe: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:22:C2:37:51:3D:18:44:90:70:CA:12:C1:0E:38:49:21:18:A8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/150574a3-0eb8-3413-864e-d6941bfc6bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c6:32:ca:cb:45:72:83:c0:c6:0b:c9:39:11:c3:50:84:3f: 1c:73:92:ec:e2:1a:42:73:ad:e4:a1:f3:c9:1b:05:c3:9f:46: 47:94:95:7a:62:59:f9:3a:c5:bf:49:1a:78:e0:17:12:0c:ec: c5:df:39:a1:85:93:80:3c:5f:7f:73:40:cd:a5:5c:5b:c9:8a: f4:13:47:52:83:e1:1f:5e:ba:01:26:ee:03:68:e3:12:30:1c: 8d:4e:f4:f0:4c:df:11:8a:39:68:0f:b1:d2:a6:33:14:eb:ed: 98:5c:e9:bb:f9:a5:8a:1d:84:fd:88:d1:f0:10:13:ff:e4:d5: 01:44:ea:9e:d9:3c:83:90:39:62:9d:c6:87:33:18:bc:e6:b8: cd:f8:99:36:36:da:20:61:12:73:b7:03:09:e3:91:c8:3b:fb: ce:55:17:85:b0:f4:a8:80:6e:8c:57:1c:b3:45:4c:45:4e:a9: 75:6d:36:a3:fa:42:a4:70:fa:71:6e:6b:ab:5d:19:6a:bf:fe: 4d:89:d4:1c:6e:4c:a2:1e:4a:36:94:3e:a2:15:10:6c:bc:61: 65:2e:a7:64:6b:00:b0:a2:b7:69:39:6a:ae:b3:7e:6f:ec:cc: a7:dc:b6:cc:cc:dc:a2:b5:41:75:53:7e:a1:ca:b6:30:77:0d: 8b:d9:6d:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplmyWPsdKb+6gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk YjNlNGJjZTctYTBjMy00ZTgyLTgxMjYtYmY2NjA1NzcwZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF/1HFDErToEy/x2HJ5jRPkWk0jMZA95KWao YyLp0QOhdbW+hQ/4jIPCu2+1lgaSrQ6HCcPFGY8vhEmbd8LpsNuSXjWqh/KzMT63 1P6eXP66kJLNfMbXovhs5sWGTTTZNFQhK009u3HsiMec0JmA+5u6B1Y+2ptDSIgu /VNfA+YRfiicfsiifS2w1Lt+YoDDhKuX7L5UlXnIHmoOfW672KTCrd7M0yXhSl8W lIYPK8jaQmPOnAjBquUXxHoMnJw1An58kHqYq45x8saDEdZLBgcHeLOLEw49eQ2s XLU6v56NS4m8FFqMv2tCPA9VtrXg5OQx3DV6E5QIlc7t5f7fTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHMiwjdRPRhEkHDKEsEOOEkhGKgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTUwNTc0YTMtMGViOC0z NDEzLTg2NGUtZDY5NDFiZmM2YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnGMsrLRXKDwMYLyTkRw1CEPxxzkuziGkJzreSh88kbBcOfRkeU lXpiWfk6xb9JGnjgFxIM7MXfOaGFk4A8X39zQM2lXFvJivQTR1KD4R9eugEm7gNo 4xIwHI1O9PBM3xGKOWgPsdKmMxTr7Zhc6bv5pYodhP2I0fAQE//k1QFE6p7ZPIOQ OWKdxoczGLzmuM34mTY22iBhEnO3Awnjkcg7+85VF4Ww9KiAboxXHLNFTEVOqXVt NqP6QqRw+nFua6tdGWq//k2J1BxuTKIeSjaUPqIVEGy8YWUup2RrALCit2k5aq6z fm/szKfctszM3KK1QXVTfqHKtjB3DYvZbbg= -----END CERTIFICATE-----Generated at Mon Apr 28 17:03:28 2025 by rpki-client