$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa File: 462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa (raw, json) Hash identifier: NNu3m1oq47kENdOO8e/aqVJSxTcvf7+fgcz4dl47GQ0= Subject key identifier: 4C:37:7E:8C:DB:85:EC:85:2A:F3:93:47:B6:8D:03:B8:BD:51:46:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C223A0C9E9ED4C98867DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa Signing time: Tue 15 Apr 2025 12:34:56 +0000 ROA not before: Tue 15 Apr 2025 12:34:56 +0000 ROA not after: Mon 14 Jul 2025 12:34:56 +0000 asID: 36618 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:a0:c9:e9:ed:4c:98:86:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:56 2025 GMT Not After : Jul 14 12:34:56 2025 GMT Subject: CN=f5b8308c-5f10-4303-aa76-fe91f66f4924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:7c:09:79:1e:0a:fa:f4:b0:4c:a8:28:9f: 78:64:c1:5c:b0:1a:91:ec:7d:f4:ae:dc:da:bc:a9: 6f:41:cb:1b:c1:a9:c8:f0:74:57:2f:37:78:c6:f9: 7a:1d:69:c8:aa:ff:8d:de:00:2b:86:94:c1:ff:69: bf:96:c0:09:1d:8e:8f:26:71:2e:cc:79:47:0a:8d: af:fd:6b:38:9d:31:ce:d7:d1:2a:c1:ec:87:01:2d: f4:df:db:7c:ab:76:f6:ba:d7:dc:70:32:cf:de:8c: 0b:cb:ac:c2:e2:4a:95:e2:75:c4:25:77:3f:19:a8: 9b:3e:40:1d:23:18:a2:46:aa:a7:30:52:99:bd:5e: 1a:44:ce:02:9a:33:85:a8:5c:f1:d6:2f:34:51:10: f7:4a:34:96:89:3d:3e:40:52:b0:e3:85:67:79:0f: 9d:87:1d:be:ff:e2:e8:1f:aa:9b:ef:7e:82:39:79: 44:35:09:a6:77:71:ea:8d:a8:03:6b:55:ad:bf:4a: 6d:ad:52:bd:0d:77:fd:4c:64:04:5c:ab:6d:01:13: 49:cf:35:5a:1d:fe:9d:10:7e:0b:3e:92:92:01:ae: e2:c3:78:e5:25:ee:ac:c6:17:9a:dc:6e:49:20:fe: ae:f6:97:38:85:f5:cd:b9:de:2b:66:69:84:ab:a4: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:7E:8C:DB:85:EC:85:2A:F3:93:47:B6:8D:03:B8:BD:51:46:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:69:41:62:8d:6d:2c:73:e6:aa:09:fa:9f:6a:52:f4:76:a6: 47:03:c8:37:b5:1d:52:37:f8:60:22:c8:85:14:d1:c6:16:78: 8c:d6:3b:47:98:60:e1:86:ba:47:83:12:7a:be:c8:77:8f:af: 15:a7:92:d6:bc:ac:c9:12:f6:09:e9:ec:3f:c0:f2:1c:78:74: 8d:99:e5:8b:15:d7:26:c3:c6:31:31:98:ba:08:60:ae:0c:a2: aa:68:46:de:27:63:3e:dd:28:11:f2:93:82:93:0e:10:70:31: b7:c7:34:b9:ed:03:9a:fe:d6:6e:e8:2b:b5:9a:b2:29:9a:ad: b9:3d:2a:15:98:c8:59:ff:4f:a3:eb:2e:4d:69:91:cd:38:5b: 4d:bb:87:3f:90:c7:f8:f5:cd:c3:73:4e:e4:d6:e0:a6:be:6a: bf:63:34:aa:60:4d:4d:99:fb:98:38:bb:64:59:68:f5:76:16: f8:76:ed:8f:1b:96:bd:92:a3:86:cd:7d:ad:d2:7f:a0:7b:22: 6f:81:20:75:62:55:8f:96:d6:88:ee:4c:e3:a2:eb:d4:ff:7b: 6e:02:3a:c6:cb:4a:c9:90:98:33:4c:b5:ed:c8:2e:e2:43:89: c8:48:61:e3:62:31:1f:19:e5:a1:10:c5:73:11:6a:1b:61:c0: e3:32:6c:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiOgyentTJiGfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NloXDTI1MDcxNDEyMzQ1NlowLzEtMCsGA1UEAxMk ZjViODMwOGMtNWYxMC00MzAzLWFhNzYtZmU5MWY2NmY0OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoet8CXkeCvr0sEyoKJ94ZMFcsBqR7H30rtza vKlvQcsbwanI8HRXLzd4xvl6HWnIqv+N3gArhpTB/2m/lsAJHY6PJnEuzHlHCo2v /Ws4nTHO19EqweyHAS3039t8q3b2utfccDLP3owLy6zC4kqV4nXEJXc/GaibPkAd IxiiRqqnMFKZvV4aRM4CmjOFqFzx1i80URD3SjSWiT0+QFKw44VneQ+dhx2+/+Lo H6qb736COXlENQmmd3HqjagDa1Wtv0ptrVK9DXf9TGQEXKttARNJzzVaHf6dEH4L PpKSAa7iw3jlJe6sxhea3G5JIP6u9pc4hfXNud4rZmmEq6TCyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEw3fozbheyFKvOTR7aNA7i9UUZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDYyZTdjZWItZTMyZC0z MGI5LTg1ZGUtYWM0ZDY5OGUzZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJpQWKNbSxz5qoJ+p9qUvR2pkcDyDe1HVI3+GAiyIUU0cYWeIzW O0eYYOGGukeDEnq+yHePrxWnkta8rMkS9gnp7D/A8hx4dI2Z5YsV1ybDxjExmLoI YK4MoqpoRt4nYz7dKBHyk4KTDhBwMbfHNLntA5r+1m7oK7Wasimarbk9KhWYyFn/ T6PrLk1pkc04W027hz+Qx/j1zcNzTuTW4Ka+ar9jNKpgTU2Z+5g4u2RZaPV2Fvh2 7Y8blr2So4bNfa3Sf6B7Im+BIHViVY+W1ojuTOOi69T/e24COsbLSsmQmDNMte3I LuJDichIYeNiMR8Z5aEQxXMRahthwOMybC4= -----END CERTIFICATE-----Generated at Sun Apr 27 19:12:48 2025 by rpki-client