$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa File: 3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa (raw, json) Hash identifier: bZcW3iExEF+89+lWkPW7fBjxk3UiLXsrooarlHvbhOg= Subject key identifier: F3:EB:D3:49:63:94:20:74:03:83:73:4E:2D:F5:C8:75:CE:74:71:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21F122DD52DECD46F05A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 396545 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:12:2d:d5:2d:ec:d4:6f:05:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=b7175514-60f6-4f84-ae7d-254d692ece11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:60:78:ea:68:82:1e:bc:2e:89:cd:88:95: a5:6c:85:84:8b:c2:1b:de:b1:64:6a:cd:cc:c3:d9: f3:bb:79:84:2c:ec:b9:18:b8:5f:60:7d:d2:ff:de: 83:f3:ec:2a:21:fa:ba:b9:97:83:5f:62:54:62:80: 86:ec:fb:c6:43:90:4e:b1:84:22:c4:f6:a4:72:cf: fe:ee:84:9b:76:06:9f:55:7f:a3:4a:ae:98:91:6b: 5d:2b:83:19:da:2c:94:cd:85:8e:dc:bb:7a:69:5b: 56:f2:d2:2c:81:53:32:55:de:77:3e:48:9b:db:09: f9:a0:66:bd:0a:5f:9f:2e:92:cb:cb:6a:e0:2e:0c: bf:62:ba:10:8a:95:25:07:a0:a4:44:f0:05:27:e4: 04:17:a9:eb:9f:b3:3c:d6:45:74:3f:83:79:7e:ae: ed:f2:81:8f:de:29:da:11:a2:86:02:97:a6:7a:e8: 29:3c:4a:61:8c:4b:e8:3b:29:fe:0d:31:cc:e0:b8: 0c:98:54:b7:6f:c5:b2:86:4b:2a:9c:be:79:98:aa: ab:d9:b0:1b:ce:0c:5a:12:b8:db:cd:39:59:72:ec: 00:cb:85:b5:85:62:6c:89:32:07:fa:14:76:f4:30: 59:29:84:de:8c:a8:f1:f7:c5:7d:64:35:42:ef:9c: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EB:D3:49:63:94:20:74:03:83:73:4E:2D:F5:C8:75:CE:74:71:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:be:27:3d:e4:2b:12:62:0a:b1:33:52:99:da:98:65:a0:56: f9:36:c3:33:ba:32:09:04:84:2b:5a:32:48:0b:c1:de:c4:ca: 80:aa:9e:12:24:9e:b6:1a:cd:40:49:39:92:6b:20:6c:7d:68: 11:ad:4f:a2:d8:b3:bf:8f:6f:7d:3f:a6:f9:5a:b3:40:10:60: f9:14:01:2c:98:40:11:3f:14:b7:dc:c3:aa:64:cf:24:96:af: 04:e8:ac:d3:4e:ce:f3:db:d3:2a:22:6d:ed:92:3f:bf:32:86: aa:56:81:c9:05:9e:da:ab:b8:ce:cf:93:8e:d4:6a:5a:47:ed: bc:55:c7:ad:b9:e1:9f:b5:48:45:00:24:2b:d3:5f:18:de:14: bd:9a:cf:f6:d0:4c:2d:88:3b:a5:7b:d6:a0:d1:39:53:a0:63: fb:19:ab:6f:af:91:a7:b4:1f:44:16:2e:ab:af:bf:80:97:24: bd:8f:33:53:f9:14:d8:eb:91:d9:06:43:83:47:bd:58:92:75: 22:be:f2:99:62:1f:c2:cd:06:ec:1a:b4:2b:e9:3f:cf:48:86: 04:65:24:45:80:55:59:99:11:27:34:08:47:32:99:b9:96:fd: 96:20:a6:0c:cb:3d:76:dd:55:6c:15:40:d3:a9:46:90:a5:44: 0a:ba:f5:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh8SLdUt7NRvBaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk YjcxNzU1MTQtNjBmNi00Zjg0LWFlN2QtMjU0ZDY5MmVjZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNdgeOpogh68LonNiJWlbIWEi8Ib3rFkas3M w9nzu3mELOy5GLhfYH3S/96D8+wqIfq6uZeDX2JUYoCG7PvGQ5BOsYQixPakcs/+ 7oSbdgafVX+jSq6YkWtdK4MZ2iyUzYWO3Lt6aVtW8tIsgVMyVd53Pkib2wn5oGa9 Cl+fLpLLy2rgLgy/YroQipUlB6CkRPAFJ+QEF6nrn7M81kV0P4N5fq7t8oGP3ina EaKGApemeugpPEphjEvoOyn+DTHM4LgMmFS3b8WyhksqnL55mKqr2bAbzgxaErjb zTlZcuwAy4W1hWJsiTIH+hR29DBZKYTejKjx98V9ZDVC75zXQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPPr00ljlCB0A4NzTi31yHXOdHHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1NWE3NWYtNDQ3OS0z Y2QwLTk4Y2UtOWM4ZDljOTBhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGG+Jz3kKxJiCrEzUpnamGWgVvk2wzO6MgkEhCtaMkgLwd7EyoCq nhIknrYazUBJOZJrIGx9aBGtT6LYs7+Pb30/pvlas0AQYPkUASyYQBE/FLfcw6pk zySWrwTorNNOzvPb0yoibe2SP78yhqpWgckFntqruM7Pk47UalpH7bxVx6254Z+1 SEUAJCvTXxjeFL2az/bQTC2IO6V71qDROVOgY/sZq2+vkae0H0QWLquvv4CXJL2P M1P5FNjrkdkGQ4NHvViSdSK+8pliH8LNBuwatCvpP89IhgRlJEWAVVmZESc0CEcy mbmW/ZYgpgzLPXbdVWwVQNOpRpClRAq69dM= -----END CERTIFICATE-----Generated at Mon Apr 28 00:52:08 2025 by rpki-client