$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa File: 4c22d199-24ad-3f30-bf94-3262d73626aa.roa (raw, json) Hash identifier: QfXF5jn4O3o+ozHOCXWVF3hwtFqIZnHRMq6lJ60Trv4= Subject key identifier: 84:1D:80:C8:D9:FD:16:99:35:0F:7E:66:0F:FF:06:F0:F1:83:99:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2235710530806CB9A8060 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 36625 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:57:10:53:08:06:cb:9a:80:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=f244b8d9-8cdc-464d-8b62-919f86729a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:98:84:96:b9:30:09:69:7c:4b:3b:ab:c9: 1b:00:8c:61:15:a9:e0:bf:69:b4:c2:1b:3f:cb:f5: 10:73:88:89:28:2f:0c:dc:4a:44:93:bf:16:10:00: 75:a9:b1:8c:51:6a:90:f6:c6:d1:38:db:7a:0e:1b: 9c:94:6f:87:81:e4:a9:f5:b2:62:6c:d9:45:6f:23: eb:43:96:b2:03:a8:ab:33:32:cb:ad:27:85:c6:dd: eb:29:e5:64:24:05:f2:c7:a9:be:96:f0:c4:b3:0a: 7c:c0:3a:69:3c:d6:d3:c2:a7:f2:39:16:53:0e:1b: b1:cb:69:c5:a6:86:34:63:59:ef:0e:62:ff:06:e4: 52:f9:5e:c2:6d:14:53:5c:ef:d7:30:b4:9d:bf:4e: f2:49:18:16:44:9b:43:ed:2a:ac:f0:a0:4c:aa:e3: 88:91:b7:ea:51:06:b2:b9:cc:21:79:9a:92:49:3d: 75:88:91:63:fb:1f:46:1d:17:f4:54:ed:2a:f5:b0: 8d:7a:79:88:6e:1b:97:5e:88:0b:23:aa:54:bf:d2: b3:3d:03:7c:80:0e:5e:95:f3:e0:5d:01:d6:64:c4: 97:ad:46:78:95:6a:8a:fb:b7:1b:6d:84:2e:79:74: 8f:38:0c:bf:92:6c:99:67:90:1b:c8:c3:23:93:ad: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1D:80:C8:D9:FD:16:99:35:0F:7E:66:0F:FF:06:F0:F1:83:99:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:51:19:5e:17:9c:69:92:10:85:7b:20:3e:c6:db:dd:1b:3e: 34:d2:4e:de:9f:74:6b:ea:a7:00:01:b0:56:5c:d0:90:7e:5e: f4:04:82:8c:44:b5:71:fb:4c:29:91:a0:2a:ce:0c:e5:ac:36: 7e:08:be:c8:fe:34:63:5e:0d:ab:61:61:45:98:b6:52:3b:40: d8:a6:2e:b0:3b:cb:e4:fa:41:e7:f6:74:90:cc:33:57:f2:c1: da:0a:7f:c0:30:aa:47:6a:45:96:55:9f:81:68:de:ff:0c:24: 3c:aa:ea:84:77:03:79:f8:36:37:9c:55:4b:7d:e4:2e:d1:c5: 96:85:42:75:b2:f0:24:21:c4:f5:b1:94:4c:39:df:1e:de:47: fd:b5:eb:0d:87:3c:ab:8f:e9:bd:69:b5:4f:ce:78:94:c9:a3: 94:e3:ee:a2:93:9e:98:e6:8e:9c:d7:55:83:2b:c4:6a:3d:35: 64:6b:05:c6:f5:0e:d6:be:00:7e:95:2a:5a:a2:ac:39:1f:2b: ce:a2:6d:36:f7:ae:15:e2:39:f3:6a:e5:d6:3f:dd:7c:8d:16: 25:3f:2c:7c:58:60:0b:fe:fc:54:e9:83:97:e3:66:43:5a:19: 9e:e8:ea:62:6c:cd:89:34:48:50:49:a3:e7:eb:e8:77:b8:e0: b4:21:0a:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiNXEFMIBsuagGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk ZjI0NGI4ZDktOGNkYy00NjRkLThiNjItOTE5Zjg2NzI5YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt2YhJa5MAlpfEs7q8kbAIxhFangv2m0whs/ y/UQc4iJKC8M3EpEk78WEAB1qbGMUWqQ9sbRONt6DhuclG+HgeSp9bJibNlFbyPr Q5ayA6irMzLLrSeFxt3rKeVkJAXyx6m+lvDEswp8wDppPNbTwqfyORZTDhuxy2nF poY0Y1nvDmL/BuRS+V7CbRRTXO/XMLSdv07ySRgWRJtD7Sqs8KBMquOIkbfqUQay ucwheZqSST11iJFj+x9GHRf0VO0q9bCNenmIbhuXXogLI6pUv9KzPQN8gA5elfPg XQHWZMSXrUZ4lWqK+7cbbYQueXSPOAy/kmyZZ5AbyMMjk63TmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIQdgMjZ/RaZNQ9+Zg//BvDxg5ksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMyMmQxOTktMjRhZC0z ZjMwLWJmOTQtMzI2MmQ3MzYyNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFRGV4XnGmSEIV7ID7G290bPjTSTt6fdGvqpwABsFZc0JB+XvQE goxEtXH7TCmRoCrODOWsNn4Ivsj+NGNeDathYUWYtlI7QNimLrA7y+T6Qef2dJDM M1fywdoKf8AwqkdqRZZVn4Fo3v8MJDyq6oR3A3n4NjecVUt95C7RxZaFQnWy8CQh xPWxlEw53x7eR/216w2HPKuP6b1ptU/OeJTJo5Tj7qKTnpjmjpzXVYMrxGo9NWRr Bcb1Dta+AH6VKlqirDkfK86ibTb3rhXiOfNq5dY/3XyNFiU/LHxYYAv+/FTpg5fj ZkNaGZ7o6mJszYk0SFBJo+fr6He44LQhCkQ= -----END CERTIFICATE-----Generated at Sun Apr 27 22:17:13 2025 by rpki-client