$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d8eb669-b877-3b3c-815e-6154c615604f.roa File: 1d8eb669-b877-3b3c-815e-6154c615604f.roa (raw, json) Hash identifier: SS4hnQP34BbcrbrM503RKHWi5koCmwy3l0y/yvdep38= Subject key identifier: B5:62:67:07:84:2B:63:FD:E1:A8:9D:2D:D0:BA:E3:68:AB:60:03:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3878574C6706350A0A480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d8eb669-b877-3b3c-815e-6154c615604f.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 36628 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:87:85:74:c6:70:63:50:a0:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=8bf2d9a5-f696-43c4-ac2a-41f33d257bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:27:59:9f:cd:2b:d9:8e:2f:42:42:d9:fe:44: 1f:4f:50:b8:55:36:65:41:8e:67:4c:6b:41:d9:13: 8a:16:19:65:8f:e6:2e:27:71:89:12:45:6e:2c:32: 86:65:ed:5b:40:9a:d0:09:66:5c:0d:eb:9a:ee:16: 78:94:34:09:f2:df:ce:c1:dc:06:3a:f6:ba:f4:19: fd:d7:97:c2:fd:2c:fe:cd:3b:51:97:f8:02:1d:ee: 93:de:f8:05:a0:b4:ea:22:93:c6:35:0d:cc:cd:c1: 35:a7:08:0a:cf:bd:23:84:b2:e2:35:57:c7:c3:bf: e9:f5:2d:72:13:ca:df:64:41:b6:39:98:61:0e:39: be:41:39:81:69:7c:16:df:3a:7f:df:09:45:51:4e: 05:6f:73:c6:e6:10:c6:37:71:e1:f5:0d:e2:ca:0e: 2f:bf:95:87:91:3a:c0:00:ed:b0:fb:76:ff:d0:39: 3d:bd:0e:c7:c7:ac:03:31:34:1e:c4:32:e3:cf:a4: 48:ee:28:f4:a9:37:0f:1d:0b:2a:ff:4c:83:85:dc: da:1f:87:2f:d6:2f:56:42:e8:fb:90:29:84:85:b3: 39:78:b6:af:71:7c:ec:8a:be:7c:de:80:32:25:99: b8:37:15:2a:42:ad:f5:53:ee:0b:07:b8:08:84:e5: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:67:07:84:2B:63:FD:E1:A8:9D:2D:D0:BA:E3:68:AB:60:03:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d8eb669-b877-3b3c-815e-6154c615604f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cd:1a:d8:8d:d6:f1:9f:9e:f0:e4:3b:30:57:00:4f:7c:ce: 0e:14:82:8b:73:53:25:52:c5:46:fe:58:10:fe:4a:b0:f8:48: 2f:fd:d5:b5:4a:28:7f:e2:58:7b:54:df:27:62:01:9e:1b:84: d9:4e:0e:3b:f6:32:b2:88:6f:e7:d1:7d:25:99:ce:d5:8f:49: 08:6e:80:20:bb:d7:75:17:f8:08:ed:72:b0:0b:1b:76:d7:d3: 34:3e:f6:86:57:13:d4:00:85:70:47:5c:6a:bf:9f:b4:99:04: 07:ae:01:04:a9:4b:a1:ae:f4:98:b1:7d:79:66:df:94:2e:dc: df:d1:2b:63:58:4d:27:3e:60:ff:ec:28:3f:1e:c7:5a:ef:b1: 7b:eb:3d:1e:0d:23:63:76:9c:41:86:0f:9e:d8:cd:9a:a1:39: 86:99:0c:48:26:4a:41:70:38:fb:14:cf:8e:5e:01:81:07:3a: d6:1e:a5:02:89:27:92:4a:5c:d4:66:07:b2:bf:2b:6b:4e:23: 12:a4:a0:32:83:16:94:02:c3:9c:06:9a:54:f0:24:bd:fe:45: 27:63:21:24:69:7d:a8:d3:67:0b:31:38:18:54:96:91:22:61: 1d:66:29:61:61:d0:8c:97:87:b5:36:e4:0b:5a:48:01:d6:cc: 02:be:8c:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44eFdMZwY1CgpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk OGJmMmQ5YTUtZjY5Ni00M2M0LWFjMmEtNDFmMzNkMjU3YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CdZn80r2Y4vQkLZ/kQfT1C4VTZlQY5nTGtB 2ROKFhllj+YuJ3GJEkVuLDKGZe1bQJrQCWZcDeua7hZ4lDQJ8t/OwdwGOva69Bn9 15fC/Sz+zTtRl/gCHe6T3vgFoLTqIpPGNQ3MzcE1pwgKz70jhLLiNVfHw7/p9S1y E8rfZEG2OZhhDjm+QTmBaXwW3zp/3wlFUU4Fb3PG5hDGN3Hh9Q3iyg4vv5WHkTrA AO2w+3b/0Dk9vQ7Hx6wDMTQexDLjz6RI7ij0qTcPHQsq/0yDhdzaH4cv1i9WQuj7 kCmEhbM5eLavcXzsir583oAyJZm4NxUqQq31U+4LB7gIhOWoowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLViZweEK2P94aidLdC642irYANPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQ4ZWI2NjktYjg3Ny0z YjNjLTgxNWUtNjE1NGM2MTU2MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAErNGtiN1vGfnvDkOzBXAE98zg4UgotzUyVSxUb+WBD+SrD4SC/9 1bVKKH/iWHtU3ydiAZ4bhNlODjv2MrKIb+fRfSWZztWPSQhugCC713UX+AjtcrAL G3bX0zQ+9oZXE9QAhXBHXGq/n7SZBAeuAQSpS6Gu9JixfXlm35Qu3N/RK2NYTSc+ YP/sKD8ex1rvsXvrPR4NI2N2nEGGD57YzZqhOYaZDEgmSkFwOPsUz45eAYEHOtYe pQKJJ5JKXNRmB7K/K2tOIxKkoDKDFpQCw5wGmlTwJL3+RSdjISRpfajTZwsxOBhU lpEiYR1mKWFh0IyXh7U25AtaSAHWzAK+jEs= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:00 2025 by rpki-client