$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa File: 28e5bcba-df81-3e05-af86-6daead68d7c5.roa (raw, json) Hash identifier: lAIK1oyZjIvAbw5oxrRTROlx/iHc1I3S2CjBlkg61D0= Subject key identifier: A3:CB:49:B5:CE:A8:AE:72:1A:61:57:DA:0B:F8:9A:68:2F:EB:D6:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21EDC8BE045D4CCB67800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 36621 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:dc:8b:e0:45:d4:cc:b6:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=13b5cc14-189d-4437-aa22-8e0da68cf2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:7b:31:41:f2:0b:b8:35:ae:8d:67:3f:8b: a9:82:dc:9e:1f:9c:59:71:b8:0c:a7:e0:3e:b3:e9: d0:9b:a3:98:1d:2e:82:2e:05:8a:76:7b:68:5a:c8: 20:c3:5f:6a:dc:d6:c9:e5:28:2a:f1:fb:46:32:74: 7e:4c:ec:c7:21:98:4e:62:f4:7d:f8:1e:d9:58:71: 98:98:1a:f9:dc:c8:94:c9:74:08:b1:bf:96:4b:31: 75:59:3d:f2:59:3e:e5:56:16:52:18:92:36:88:38: 2a:85:54:60:4a:f9:d1:dc:d2:26:48:37:0a:b3:9d: 11:02:9c:b7:22:86:55:03:13:61:d7:4d:f2:09:32: 7f:78:10:95:46:7e:5c:97:3f:3d:2a:90:dc:aa:80: 58:b5:85:bb:57:71:20:95:30:63:c4:d0:75:14:f9: 79:39:0b:6b:ac:17:be:df:91:ae:5c:16:e1:9a:5f: f2:f2:9d:bb:be:f4:d7:43:08:9b:4b:e3:04:5a:81: d4:ee:a3:8d:92:dd:ce:ac:d1:ed:5d:b2:cd:ed:21: 00:ee:5b:4a:38:7c:a5:d2:c1:b1:74:08:8b:7f:62: e6:94:ac:de:9f:9a:70:d2:f4:39:7a:03:c2:26:24: d7:41:6b:49:f7:a5:e0:b7:70:25:5f:8e:8c:b0:2e: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:49:B5:CE:A8:AE:72:1A:61:57:DA:0B:F8:9A:68:2F:EB:D6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:27:5c:cd:67:5d:0d:f6:8a:07:ee:b9:9b:ab:2a:39:f4:22: cb:fe:18:2b:b0:35:cb:82:8a:0a:44:83:a7:6b:f3:f8:93:1b: 08:4b:87:11:21:73:d2:75:e7:55:e3:09:b9:83:5b:76:64:62: f7:f8:38:b1:90:5c:a3:92:ea:fb:de:2b:5a:fd:e9:f0:a3:fb: 11:c1:4e:83:a0:61:4a:b3:26:33:8c:e1:43:05:03:cf:f7:78: eb:0b:62:1d:87:54:3f:11:92:f3:c7:3b:eb:03:ec:37:9b:98: a2:f8:e0:3e:c1:ef:56:75:d3:68:3f:5b:57:71:99:a5:b0:78: d2:9f:08:80:04:e9:08:05:94:d2:9b:dc:e6:1b:7c:7a:7c:8a: d2:f7:b2:44:a9:be:46:27:f6:4d:62:fd:fc:53:24:0a:1a:e1: 43:3f:8b:8d:aa:b4:c2:5f:79:7e:f6:8c:6a:18:bb:f3:a5:b5: 95:5f:6a:ca:92:50:c8:47:65:ca:ee:fe:28:07:0c:fa:12:24: 97:66:7c:aa:8c:99:c9:4c:f2:e0:b7:df:9b:5c:35:5e:4b:48: 56:99:9e:d2:dd:6d:8e:fa:06:e0:78:6d:c5:e2:74:29:37:1f: 30:8d:a5:67:70:ef:47:92:4b:57:c0:d9:4a:ee:e3:57:4f:7d: 39:80:e8:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh7ci+BF1My2eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk MTNiNWNjMTQtMTg5ZC00NDM3LWFhMjItOGUwZGE2OGNmMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ57MUHyC7g1ro1nP4upgtyeH5xZcbgMp+A+ s+nQm6OYHS6CLgWKdntoWsggw19q3NbJ5Sgq8ftGMnR+TOzHIZhOYvR9+B7ZWHGY mBr53MiUyXQIsb+WSzF1WT3yWT7lVhZSGJI2iDgqhVRgSvnR3NImSDcKs50RApy3 IoZVAxNh103yCTJ/eBCVRn5clz89KpDcqoBYtYW7V3EglTBjxNB1FPl5OQtrrBe+ 35GuXBbhml/y8p27vvTXQwibS+MEWoHU7qONkt3OrNHtXbLN7SEA7ltKOHyl0sGx dAiLf2LmlKzen5pw0vQ5egPCJiTXQWtJ96Xgt3AlX46MsC4b1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPLSbXOqK5yGmFX2gv4mmgv69aXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNWJjYmEtZGY4MS0z ZTA1LWFmODYtNmRhZWFkNjhkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8nXM1nXQ32igfuuZurKjn0Isv+GCuwNcuCigpEg6dr8/iTGwhL hxEhc9J151XjCbmDW3ZkYvf4OLGQXKOS6vveK1r96fCj+xHBToOgYUqzJjOM4UMF A8/3eOsLYh2HVD8RkvPHO+sD7DebmKL44D7B71Z102g/W1dxmaWweNKfCIAE6QgF lNKb3OYbfHp8itL3skSpvkYn9k1i/fxTJAoa4UM/i42qtMJfeX72jGoYu/OltZVf asqSUMhHZcru/igHDPoSJJdmfKqMmclM8uC335tcNV5LSFaZntLdbY76BuB4bcXi dCk3HzCNpWdw70eSS1fA2Uru41dPfTmA6NA= -----END CERTIFICATE-----Generated at Mon Apr 28 09:56:03 2025 by rpki-client