$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa File: 3042086e-a87d-399b-9e30-fb80daa4afd6.roa (raw, json) Hash identifier: wsJxXXNceFXi0w2cY0LXNwU0jIJC2cKi3lCNi5vtSHE= Subject key identifier: 83:F5:73:53:A5:D5:9C:72:6E:EE:1A:F6:04:2A:71:D4:57:8E:5E:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2217F750EEBC8D124D400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 20172 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:7f:75:0e:eb:c8:d1:24:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=c2eb4e2d-d4d8-4df0-a712-9ab4a5956b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:e1:f3:ba:72:b5:69:42:21:8a:6d:64:c0: fe:ad:39:7e:a9:83:03:06:4a:49:f2:e1:fa:8f:36: 88:74:83:91:fe:e0:9a:14:04:90:d0:6f:2a:13:5a: f6:d8:17:d1:59:6b:03:b4:27:7f:11:4d:23:bf:f3: 1c:69:93:c8:f2:e0:e1:d2:0d:73:4a:76:94:fa:b0: 2a:d5:be:2a:3c:39:81:9d:79:44:d1:ce:26:f0:6a: da:f9:0c:ca:8a:45:62:dd:41:af:f3:cc:14:3f:1d: c5:39:d7:97:c1:0c:28:35:5a:da:d3:a9:e1:a0:e9: 6c:7e:a7:59:f6:92:8e:99:b9:ba:ba:4e:13:61:40: 3e:07:61:2f:a2:24:dd:0e:6f:1d:2e:ab:d4:a7:e3: 0b:18:4a:15:0b:a1:35:e0:06:90:7e:ec:0c:26:5c: cf:e4:1c:a8:71:0f:af:31:47:14:8b:7d:be:2f:53: 69:6b:ae:80:f2:92:b9:53:b3:30:99:55:57:a8:1d: 2b:e8:1f:c4:87:d8:1e:f1:49:89:f9:97:0d:99:06: c7:11:aa:e9:6e:74:09:c9:ee:67:62:36:73:1c:5e: c4:ec:7e:80:63:7f:0b:f3:78:12:a1:47:c6:56:d5: 92:ac:23:3b:ba:cf:9c:03:d1:81:59:d9:20:f7:72: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F5:73:53:A5:D5:9C:72:6E:EE:1A:F6:04:2A:71:D4:57:8E:5E:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:61:aa:b3:df:db:da:b0:94:aa:02:c7:d1:4b:5c:f5:29:06: 58:34:25:4d:42:ac:eb:b5:b0:d3:b1:9d:59:73:f2:91:ce:39: 75:1d:6f:f0:f9:c3:d4:2c:f4:8e:a9:f8:e9:0c:76:e6:96:4e: 6a:c7:45:c0:6e:cf:7b:2a:d1:26:cc:a2:03:e1:11:aa:45:f8: be:b5:99:cd:79:5b:f7:f4:13:4a:4a:14:46:de:64:45:95:f6: 20:44:d4:f3:59:f1:4a:4a:7d:19:cc:74:51:7f:90:7a:a0:61: af:21:63:66:b8:a2:6c:de:ff:a3:52:79:aa:ec:1c:f1:09:e6: ac:5e:0e:88:95:2f:08:52:b8:34:14:4c:f5:5b:1d:95:97:5e: 78:9f:73:8f:5d:71:fb:9d:cb:f9:78:18:ea:ac:ed:de:e6:bd: 62:43:87:e7:f1:9c:64:be:ae:78:c4:2d:6d:30:ba:7b:b9:aa: 9a:23:ed:fa:bd:25:3e:8a:3c:3b:8e:01:1c:89:0c:01:11:9c: 8b:f1:fc:ae:e7:8b:d8:8d:60:eb:86:8f:cd:80:de:2d:0a:00: 32:c2:1a:0e:c8:71:56:9e:ce:0a:67:49:e1:23:f3:90:96:f2: 03:8a:63:d5:44:3b:ec:3f:cc:82:46:ef:cf:8e:3b:f8:6a:b3: 6a:fe:08:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiF/dQ7ryNEk1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk YzJlYjRlMmQtZDRkOC00ZGYwLWE3MTItOWFiNGE1OTU2YjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA287h87pytWlCIYptZMD+rTl+qYMDBkpJ8uH6 jzaIdIOR/uCaFASQ0G8qE1r22BfRWWsDtCd/EU0jv/McaZPI8uDh0g1zSnaU+rAq 1b4qPDmBnXlE0c4m8Gra+QzKikVi3UGv88wUPx3FOdeXwQwoNVra06nhoOlsfqdZ 9pKOmbm6uk4TYUA+B2EvoiTdDm8dLqvUp+MLGEoVC6E14AaQfuwMJlzP5ByocQ+v MUcUi32+L1Npa66A8pK5U7MwmVVXqB0r6B/Eh9ge8UmJ+ZcNmQbHEarpbnQJye5n YjZzHF7E7H6AY38L83gSoUfGVtWSrCM7us+cA9GBWdkg93KKfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIP1c1Ol1Zxybu4a9gQqcdRXjl7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0MjA4NmUtYTg3ZC0z OTliLTllMzAtZmI4MGRhYTRhZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFhqrPf29qwlKoCx9FLXPUpBlg0JU1CrOu1sNOxnVlz8pHOOXUd b/D5w9Qs9I6p+OkMduaWTmrHRcBuz3sq0SbMogPhEapF+L61mc15W/f0E0pKFEbe ZEWV9iBE1PNZ8UpKfRnMdFF/kHqgYa8hY2a4omze/6NSearsHPEJ5qxeDoiVLwhS uDQUTPVbHZWXXnifc49dcfudy/l4GOqs7d7mvWJDh+fxnGS+rnjELW0wunu5qpoj 7fq9JT6KPDuOARyJDAERnIvx/K7ni9iNYOuGj82A3i0KADLCGg7IcVaezgpnSeEj 85CW8gOKY9VEO+w/zIJG78+OO/hqs2r+CFE= -----END CERTIFICATE-----Generated at Sun Apr 27 22:17:20 2025 by rpki-client