$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa File: 4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa (raw, json) Hash identifier: wvT+Dk3ODt23Kn9lK1O2cXqGKfK3DYgfM2HkQ24RBZI= Subject key identifier: 65:FC:94:15:7F:4D:15:5A:52:41:99:6C:C2:24:D1:3A:CF:9E:D8:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858497544716C7CD15F2466FA06E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396580 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:71:6c:7c:d1:5f:24:66:fa:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=38b05db1-82cc-4001-9911-a2ec3a649940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:a6:d6:49:80:0b:4d:74:b8:19:84:50:c8: 5e:76:06:5e:cb:45:7e:8e:f4:1c:ed:28:fc:c7:e2: 05:16:cf:ed:98:3b:3e:ff:f6:3a:2e:0c:8f:6f:e3: 2e:8c:f7:62:69:51:c4:a6:58:2e:f3:82:c4:e2:51: 9a:33:b0:63:bd:76:f6:3b:b7:09:08:14:6a:30:8b: a7:50:f5:69:e9:55:c1:9e:4d:4b:25:8a:67:7a:d8: 6b:6d:55:fa:f0:13:20:84:4a:52:20:04:dc:4e:1a: cf:c9:c7:4c:bd:6a:77:78:41:17:f8:14:ef:55:44: c9:27:09:22:bc:9d:9a:6c:74:df:c1:16:3c:1d:b0: 57:96:c4:f4:e0:1e:a2:90:c0:e7:c3:2f:c9:2a:aa: 56:41:1c:c2:6d:6c:96:5f:44:5a:4d:1d:34:1a:1d: 72:33:fd:59:78:e5:2f:e3:1a:ef:a5:c6:88:cf:40: 55:47:b1:73:cd:f5:3b:fc:4e:98:93:0d:f8:18:39: 9f:15:89:4b:80:f9:f5:46:63:f4:fc:03:d4:f4:bd: 2f:e3:1f:39:86:75:d5:8d:34:98:74:a9:aa:f6:36: 8e:9a:c7:06:ee:9d:8a:5b:4c:f3:d4:ae:0b:f1:b6: b2:bb:ea:1b:37:4b:02:e4:a3:e3:7d:3b:21:4e:97: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FC:94:15:7F:4D:15:5A:52:41:99:6C:C2:24:D1:3A:CF:9E:D8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c8:f3:e2:43:34:fc:58:6a:bf:93:cf:8b:9d:5a:0d:7d:3b: 1d:1a:10:cf:54:40:2a:68:54:29:d6:59:13:ab:2c:85:bf:cf: 97:ab:79:da:9f:ca:7a:d7:c1:a9:bd:f4:cd:4a:c3:8f:0f:90: ef:c4:29:9e:59:cb:09:43:20:9d:8c:41:6e:33:fc:b4:f5:2a: 99:ea:e3:c0:d2:f0:9c:44:53:95:25:4c:e8:ec:97:95:43:ab: 0a:b1:6c:51:ce:83:47:d0:8b:be:f9:4a:c4:2b:13:e9:d4:f4: fc:11:ac:9a:3f:22:46:ae:1c:59:fc:5b:cb:b4:55:ee:74:ed: b0:bf:97:1b:d0:99:97:02:4f:ec:24:d6:13:69:2e:c1:7c:13: 64:bf:7d:e1:d0:c7:c9:55:30:90:d8:39:ca:3e:b0:f7:b0:02: dc:80:83:1e:71:68:37:5f:f4:dc:99:1e:f4:e0:18:6b:97:70: 93:b8:ee:db:1e:fc:2d:4d:16:f7:26:d3:6e:a9:46:aa:39:86: ce:fa:2f:21:c9:b7:31:47:ff:54:ee:3e:d4:c7:7d:b5:e2:1a: 71:ae:fc:71:b4:af:4e:21:46:01:f4:96:80:28:cf:15:56:5f: 01:7f:bf:82:46:53:a0:2f:1b:92:3f:bb:a7:3c:37:0b:61:06: af:a8:f4:b8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RHFsfNFfJGb6BuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MzhiMDVkYjEtODJjYy00MDAxLTk5MTEtYTJlYzNhNjQ5OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuCm1kmAC010uBmEUMhedgZey0V+jvQc7Sj8 x+IFFs/tmDs+//Y6LgyPb+MujPdiaVHEplgu84LE4lGaM7BjvXb2O7cJCBRqMIun UPVp6VXBnk1LJYpnethrbVX68BMghEpSIATcThrPycdMvWp3eEEX+BTvVUTJJwki vJ2abHTfwRY8HbBXlsT04B6ikMDnwy/JKqpWQRzCbWyWX0RaTR00Gh1yM/1ZeOUv 4xrvpcaIz0BVR7FzzfU7/E6Ykw34GDmfFYlLgPn1RmP0/APU9L0v4x85hnXVjTSY dKmq9jaOmscG7p2KW0zz1K4L8bayu+obN0sC5KPjfTshTpd12QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGX8lBV/TRVaUkGZbMIk0TrPnthiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ1N2QyZWUtMmRhYy0z Yzg1LWJhZTAtYzVjZjllZTljYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAkyPPiQzT8WGq/k8+LnVoNfTsdGhDPVEAqaFQp 1lkTqyyFv8+Xq3nan8p618GpvfTNSsOPD5DvxCmeWcsJQyCdjEFuM/y09SqZ6uPA 0vCcRFOVJUzo7JeVQ6sKsWxRzoNH0Iu++UrEKxPp1PT8EayaPyJGrhxZ/FvLtFXu dO2wv5cb0JmXAk/sJNYTaS7BfBNkv33h0MfJVTCQ2DnKPrD3sALcgIMecWg3X/Tc mR704Bhrl3CTuO7bHvwtTRb3JtNuqUaqOYbO+i8hybcxR/9U7j7Ux3214hpxrvxx tK9OIUYB9JaAKM8VVl8Bf7+CRlOgLxuSP7unPDcLYQavqPS4 -----END CERTIFICATE-----Generated at Mon Apr 28 10:26:58 2025 by rpki-client