$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa File: 4cee037e-2581-3264-9e76-963e4f5cc668.roa (raw, json) Hash identifier: 11Svfi5ijwKA+7GUiiVOi4C9KSPMyqmCvgaOfyIEOxg= Subject key identifier: 54:FD:07:9F:88:58:80:D6:64:B1:42:F6:9E:66:8A:59:2C:37:02:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C22390046FD82BD3B3EB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa Signing time: Tue 15 Apr 2025 12:34:56 +0000 ROA not before: Tue 15 Apr 2025 12:34:56 +0000 ROA not after: Mon 14 Jul 2025 12:34:56 +0000 asID: 32651 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:90:04:6f:d8:2b:d3:b3:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:56 2025 GMT Not After : Jul 14 12:34:56 2025 GMT Subject: CN=574346e4-875c-4cda-893e-0670d02fec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:f8:57:9b:c1:3a:e4:0b:22:8f:e2:c9:e5: 1d:e7:20:78:e9:bb:5e:3e:8f:f0:2a:91:60:de:1b: 5d:18:22:69:bb:14:9d:fd:c1:8c:45:f7:a7:a2:50: 60:6e:1e:be:b2:03:6e:66:34:9f:b4:91:cc:5a:d1: 00:1d:e1:a7:b6:67:30:7c:71:81:80:ff:5f:b4:70: d5:b0:52:35:fc:21:a2:1d:50:71:d4:48:d0:f9:f5: 77:93:64:b5:0f:73:22:43:4a:67:bf:b9:f9:cf:28: 64:a4:ea:8a:a7:b5:c7:67:69:2e:41:1c:56:21:82: f4:18:9b:45:9c:de:52:6d:28:17:85:f8:0e:c0:ff: b4:42:dd:0e:f5:c1:c6:6b:5f:06:f3:b4:d6:c3:f2: 68:c9:8f:fc:e6:b9:28:df:f3:4d:c3:14:53:52:d9: c7:ca:e5:d8:34:8c:dd:0e:36:35:a2:49:c7:45:1d: af:1a:18:ff:85:d6:19:d1:b1:e3:20:13:0f:62:e8: 04:7d:f4:87:17:5c:2b:72:80:17:02:48:85:93:f4: 59:df:12:68:27:bc:23:d5:18:59:dc:d8:49:0d:86: 3c:f2:f0:cc:b3:66:b2:e7:8e:f0:39:bf:da:bb:03: df:33:3d:a5:4b:17:07:b2:3f:28:e9:f1:15:8a:44: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FD:07:9F:88:58:80:D6:64:B1:42:F6:9E:66:8A:59:2C:37:02:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2b:95:07:28:e3:15:6c:9e:44:03:62:79:8e:f5:7d:bd:ce: 25:69:6e:68:50:ae:90:6d:03:1d:a8:b3:6a:b2:f5:a2:43:e5: 63:d4:7b:bf:ef:3f:8d:ef:c6:ef:e8:8d:da:41:20:8c:30:3f: 1c:72:d0:cd:65:7d:23:fa:ae:52:c3:86:14:a0:47:57:07:52: d4:9e:15:92:64:63:58:a3:bc:70:f8:73:2c:d0:72:1f:f2:f1: a8:30:82:c0:65:fd:2b:28:7d:28:5b:40:f3:1e:fd:24:be:14: 48:e4:07:03:b9:4e:46:c3:11:f4:f5:3e:3d:c8:f7:53:2d:5b: 61:d2:73:07:8b:6a:ec:80:d0:1b:04:96:e0:ab:5c:c2:cd:ce: 10:b6:22:f5:e9:91:70:6e:1f:7d:fa:bb:f0:3f:bb:85:c3:71: 87:70:82:d2:4b:31:b4:1e:b0:4d:46:a9:5d:f0:d6:b8:8d:8d: 6c:95:eb:db:64:5c:4c:1f:ce:0c:51:1d:08:dc:f6:4b:20:69: 12:89:12:62:90:ee:a4:3b:fd:19:2e:3d:86:69:5a:65:a3:c8: 12:95:35:81:ce:c7:30:90:57:e4:3b:d1:c4:26:e5:01:b6:f6: 53:db:5b:96:16:0c:bf:ae:91:10:4e:02:2b:38:73:e3:33:bc: c9:e8:9e:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiOQBG/YK9Oz6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NloXDTI1MDcxNDEyMzQ1NlowLzEtMCsGA1UEAxMk NTc0MzQ2ZTQtODc1Yy00Y2RhLTg5M2UtMDY3MGQwMmZlYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGr4V5vBOuQLIo/iyeUd5yB46btePo/wKpFg 3htdGCJpuxSd/cGMRfenolBgbh6+sgNuZjSftJHMWtEAHeGntmcwfHGBgP9ftHDV sFI1/CGiHVBx1EjQ+fV3k2S1D3MiQ0pnv7n5zyhkpOqKp7XHZ2kuQRxWIYL0GJtF nN5SbSgXhfgOwP+0Qt0O9cHGa18G87TWw/JoyY/85rko3/NNwxRTUtnHyuXYNIzd DjY1oknHRR2vGhj/hdYZ0bHjIBMPYugEffSHF1wrcoAXAkiFk/RZ3xJoJ7wj1RhZ 3NhJDYY88vDMs2ay547wOb/auwPfMz2lSxcHsj8o6fEVikRB+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFT9B5+IWIDWZLFC9p5milksNwLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGNlZTAzN2UtMjU4MS0z MjY0LTllNzYtOTYzZTRmNWNjNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADsrlQco4xVsnkQDYnmO9X29ziVpbmhQrpBtAx2os2qy9aJD5WPU e7/vP43vxu/ojdpBIIwwPxxy0M1lfSP6rlLDhhSgR1cHUtSeFZJkY1ijvHD4cyzQ ch/y8agwgsBl/SsofShbQPMe/SS+FEjkBwO5TkbDEfT1Pj3I91MtW2HScweLauyA 0BsEluCrXMLNzhC2IvXpkXBuH336u/A/u4XDcYdwgtJLMbQesE1GqV3w1riNjWyV 69tkXEwfzgxRHQjc9ksgaRKJEmKQ7qQ7/RkuPYZpWmWjyBKVNYHOxzCQV+Q70cQm 5QG29lPbW5YWDL+ukRBOAis4c+MzvMnoniU= -----END CERTIFICATE-----Generated at Sun Apr 27 20:00:51 2025 by rpki-client