$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/342f0d47-0835-3d25-a85c-3d8e8c202c6f.roa File: 342f0d47-0835-3d25-a85c-3d8e8c202c6f.roa (raw, json) Hash identifier: +DErP4mD+oypGjTc025L0Bn0HMEI8nP+a2U89a5mIfs= Subject key identifier: CF:A5:E0:3B:2A:92:C5:55:5E:E5:00:74:96:B9:45:18:85:67:1F:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C223745E06937B3EA60B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/342f0d47-0835-3d25-a85c-3d8e8c202c6f.roa Signing time: Tue 15 Apr 2025 12:34:56 +0000 ROA not before: Tue 15 Apr 2025 12:34:56 +0000 ROA not after: Mon 14 Jul 2025 12:34:56 +0000 asID: 396569 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:74:5e:06:93:7b:3e:a6:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:56 2025 GMT Not After : Jul 14 12:34:56 2025 GMT Subject: CN=a89be1a5-4a8f-4c51-bbf6-38d93173d9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:28:a9:69:d5:e8:cd:6f:c8:12:97:81:19: a0:81:c6:ca:2d:fb:45:e3:2e:3a:d1:d8:fc:21:00: 77:d1:bd:ee:b0:86:7c:71:33:1d:c8:92:d2:d3:7c: 11:85:9e:ef:d0:b8:c4:c0:28:ff:d9:35:b9:ba:e4: 26:18:cd:4c:34:90:d5:d0:93:18:56:8e:ad:13:4a: 1b:bf:df:54:b5:ec:01:c5:e1:71:cc:cb:6d:35:1e: 19:68:ba:f0:8e:37:9b:7d:a0:7a:8e:9f:70:cb:d2: ea:60:9c:3a:e8:e0:c6:64:69:ca:d1:fd:03:13:f5: 53:a1:69:19:04:9e:62:09:d2:4a:0e:ca:f4:c7:c7: e2:c7:bd:15:ca:d9:fa:68:11:02:ae:df:50:3a:a5: 1b:b8:aa:ae:01:04:f3:a3:10:24:39:af:92:c8:a7: 16:55:20:de:e5:26:91:f2:10:1a:dc:26:36:0a:67: 8a:cf:b0:67:83:91:ed:42:a5:07:7f:1f:c1:f5:bd: fd:a3:46:bb:f7:f8:f7:55:da:3e:bc:be:9a:b9:4b: 91:13:e3:62:27:14:b1:1d:9b:ce:1f:b6:6f:11:cc: c1:de:e9:ae:63:4f:31:60:19:4f:cb:07:65:24:5e: 6c:9f:5a:8a:81:08:37:8c:33:bf:8e:19:62:0c:d4: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:E0:3B:2A:92:C5:55:5E:E5:00:74:96:B9:45:18:85:67:1F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/342f0d47-0835-3d25-a85c-3d8e8c202c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6c:e2:98:27:dc:53:b7:79:8c:a4:d5:4c:c9:41:44:18:31: 75:41:f3:7d:08:d6:9e:fb:d8:a5:35:eb:8c:5a:9c:a2:bf:5c: a1:84:c8:37:6d:95:e2:9f:94:c1:f4:29:a1:48:c4:97:45:49: 13:5f:06:3b:83:8d:e8:6e:3c:a0:ba:4f:8b:7d:d6:a4:c7:17: 1e:93:32:4e:8e:e2:d7:64:bb:54:7f:37:eb:b6:02:94:c4:51: 23:b3:08:4b:f8:c3:31:56:9d:c8:6a:98:61:ab:9e:67:90:e7: b2:18:cc:83:32:2c:0d:05:06:63:80:4b:63:51:1c:1e:f8:c3: 6c:fc:d7:8e:07:35:c8:50:81:ee:f6:78:2f:30:00:f0:76:bd: 2b:4a:59:07:87:01:bf:dd:4b:33:c7:b6:6e:5f:9d:d8:bf:8b: b6:04:42:88:13:e1:ce:08:ac:71:5a:98:10:a8:4f:7c:a2:a0: ee:da:c8:a9:22:13:91:8f:9b:4e:69:d4:f7:ef:c7:6b:79:2c: b4:7b:29:8b:84:c2:d1:42:68:36:42:41:8d:af:8e:8c:c7:1a: 5b:3c:cf:d3:cd:5b:e3:e1:20:4e:45:4a:1a:3a:97:13:50:ac: 22:a6:c2:ab:65:91:b7:83:78:cf:48:5b:ea:0b:c1:9a:0a:c5: 3a:ca:73:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiN0XgaTez6mC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NloXDTI1MDcxNDEyMzQ1NlowLzEtMCsGA1UEAxMk YTg5YmUxYTUtNGE4Zi00YzUxLWJiZjYtMzhkOTMxNzNkOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLEoqWnV6M1vyBKXgRmggcbKLftF4y460dj8 IQB30b3usIZ8cTMdyJLS03wRhZ7v0LjEwCj/2TW5uuQmGM1MNJDV0JMYVo6tE0ob v99UtewBxeFxzMttNR4ZaLrwjjebfaB6jp9wy9LqYJw66ODGZGnK0f0DE/VToWkZ BJ5iCdJKDsr0x8fix70Vytn6aBECrt9QOqUbuKquAQTzoxAkOa+SyKcWVSDe5SaR 8hAa3CY2CmeKz7Bng5HtQqUHfx/B9b39o0a79/j3Vdo+vL6auUuRE+NiJxSxHZvO H7ZvEczB3umuY08xYBlPywdlJF5sn1qKgQg3jDO/jhliDNSe4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+l4DsqksVVXuUAdJa5RRiFZx/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQyZjBkNDctMDgzNS0z ZDI1LWE4NWMtM2Q4ZThjMjAyYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADps4pgn3FO3eYyk1UzJQUQYMXVB830I1p772KU164xanKK/XKGE yDdtleKflMH0KaFIxJdFSRNfBjuDjehuPKC6T4t91qTHFx6TMk6O4tdku1R/N+u2 ApTEUSOzCEv4wzFWnchqmGGrnmeQ57IYzIMyLA0FBmOAS2NRHB74w2z8144HNchQ ge72eC8wAPB2vStKWQeHAb/dSzPHtm5fndi/i7YEQogT4c4IrHFamBCoT3yioO7a yKkiE5GPm05p1Pfvx2t5LLR7KYuEwtFCaDZCQY2vjozHGls8z9PNW+PhIE5FSho6 lxNQrCKmwqtlkbeDeM9IW+oLwZoKxTrKc0Y= -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:51 2025 by rpki-client