$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36952738-8b91-3ac9-8622-6ced3436cb49.roa File: 36952738-8b91-3ac9-8622-6ced3436cb49.roa (raw, json) Hash identifier: xh3jISUi7pz1S2Z1Omh99N64w9tJj/wF9Bbnq0IlON4= Subject key identifier: F5:AE:65:E5:78:8E:46:A0:3E:4B:91:43:34:7B:E4:25:89:4F:FA:B2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9ABEF14EE30DDDA111D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36952738-8b91-3ac9-8622-6ced3436cb49.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 397203 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:ab:ef:14:ee:30:dd:da:11:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=d405b820-0d2a-4662-9c05-9f8cec1f215b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:3e:3c:1a:99:14:7b:cd:83:ca:a1:84:d1: ea:97:ad:40:b9:07:52:ee:b9:3d:1e:29:29:f6:a7: b5:13:51:bf:5d:a2:e6:f7:f0:79:ab:57:07:51:fd: c9:3a:28:c9:a1:b1:cc:b7:79:16:63:fc:41:87:be: db:76:90:07:da:e7:8a:f2:15:6c:9d:b3:b3:6d:b4: 19:82:71:fd:56:3d:08:b9:7a:a9:97:48:cb:ea:fe: 29:91:41:b0:08:05:35:fd:0e:04:50:3a:d2:2b:4d: c8:15:c3:48:87:4b:5e:b2:46:16:0b:d7:6c:3e:02: d6:dc:cd:c0:d0:64:4e:17:27:09:60:7e:77:45:b7: 2f:f4:86:aa:d6:63:b9:8c:a0:9f:ba:b2:f1:16:4d: f6:25:85:12:86:c8:0d:3e:cc:7b:cc:be:f3:9e:25: 23:9e:af:8d:f5:96:28:14:28:eb:71:b2:db:72:a4: c3:82:d6:1d:20:81:5c:10:e8:66:90:f5:6f:04:8e: 69:22:9f:de:12:48:71:ef:d5:9c:00:dd:15:86:5d: c4:68:24:a2:3c:4e:bf:ae:13:db:7e:0c:1a:97:72: 6f:90:b7:9d:52:2b:ac:c4:9a:65:cc:d9:66:72:42: 84:81:45:18:bb:26:69:e8:18:ee:4a:c3:7e:c5:06: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AE:65:E5:78:8E:46:A0:3E:4B:91:43:34:7B:E4:25:89:4F:FA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36952738-8b91-3ac9-8622-6ced3436cb49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a6:fc:84:fa:9f:a1:e6:51:0b:31:46:84:b6:83:c6:3d:f5: a8:5a:52:04:4d:22:99:5f:eb:2f:53:25:cb:2e:12:18:da:d1: 87:a0:ba:7d:21:24:ff:0e:bf:06:81:44:9e:7e:dd:54:ea:b2: ff:f4:2c:09:57:49:c6:ff:41:82:cb:79:5a:00:63:65:91:7f: f8:f9:1e:12:68:ad:31:dc:a3:4a:cf:80:0a:6d:c4:76:06:34: 23:1a:05:db:39:79:79:58:79:24:b2:2f:88:4e:9b:15:80:11: 3d:c7:ed:69:f5:8f:0b:8f:cb:c6:2c:22:a4:b5:29:52:61:e7: 9e:2d:8c:99:17:8f:70:21:e8:30:34:27:9d:d0:0a:d0:60:99: d3:f9:81:2c:c6:68:10:bb:f9:6f:82:8e:fe:f9:e8:9a:5e:56: 9c:69:14:cb:1e:8a:ad:ab:27:95:1c:85:b1:4c:90:bf:07:6f: 16:94:59:bf:0f:10:2a:70:ad:69:7d:61:7f:d3:53:d4:00:26: c3:20:56:4e:ca:cb:48:7c:6b:0f:74:c7:a7:6f:ec:bd:0f:6b: 49:77:f8:fc:f5:f0:fb:5c:ce:5d:e3:e1:57:5d:b4:35:4a:c5: 75:80:ba:c1:a2:48:aa:14:11:55:32:8c:1f:04:4a:b6:7b:44: 9e:21:0a:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuavvFO4w3doRHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQwNWI4MjAtMGQyYS00NjYyLTljMDUtOWY4Y2VjMWYyMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4o+PBqZFHvNg8qhhNHql61AuQdS7rk9Hikp 9qe1E1G/XaLm9/B5q1cHUf3JOijJobHMt3kWY/xBh77bdpAH2ueK8hVsnbOzbbQZ gnH9Vj0IuXqpl0jL6v4pkUGwCAU1/Q4EUDrSK03IFcNIh0teskYWC9dsPgLW3M3A 0GROFycJYH53Rbcv9Iaq1mO5jKCfurLxFk32JYUShsgNPsx7zL7zniUjnq+N9ZYo FCjrcbLbcqTDgtYdIIFcEOhmkPVvBI5pIp/eEkhx79WcAN0Vhl3EaCSiPE6/rhPb fgwal3JvkLedUiusxJplzNlmckKEgUUYuyZp6BjuSsN+xQayEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPWuZeV4jkagPkuRQzR75CWJT/qyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY5NTI3MzgtOGI5MS0z YWM5LTg2MjItNmNlZDM0MzZjYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANpvyE+p+h5lELMUaEtoPGPfWoWlIETSKZX+sv UyXLLhIY2tGHoLp9IST/Dr8GgUSeft1U6rL/9CwJV0nG/0GCy3laAGNlkX/4+R4S aK0x3KNKz4AKbcR2BjQjGgXbOXl5WHkksi+ITpsVgBE9x+1p9Y8Lj8vGLCKktSlS YeeeLYyZF49wIegwNCed0ArQYJnT+YEsxmgQu/lvgo7++eiaXlacaRTLHoqtqyeV HIWxTJC/B28WlFm/DxAqcK1pfWF/01PUACbDIFZOystIfGsPdMenb+y9D2tJd/j8 9fD7XM5d4+FXXbQ1SsV1gLrBokiqFBFVMowfBEq2e0SeIQp2 -----END CERTIFICATE-----Generated at Mon Apr 28 21:11:37 2025 by rpki-client