$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58afe234-22fd-32e1-ae5d-a44ee4d80579.roa File: 58afe234-22fd-32e1-ae5d-a44ee4d80579.roa (raw, json) Hash identifier: 6LKmI8bz1C+em4Y3tF6tfFopMJ1Sl9hM/DuqAg8axC8= Subject key identifier: CB:43:E9:40:81:EC:47:98:B9:02:19:44:E8:68:72:42:C3:6F:BD:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9ABCD736DB8295C2D59C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58afe234-22fd-32e1-ae5d-a44ee4d80579.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396608 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:ab:cd:73:6d:b8:29:5c:2d:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=c5867b84-8476-4777-ac7b-f64cfbedc808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:ed:2d:df:28:d0:4f:60:c0:bd:a3:00:f5: d8:8a:c4:7a:2c:e1:b5:23:29:12:8c:bc:a6:da:5e: 44:62:c4:2a:f6:5b:02:8b:22:b9:a3:57:30:37:9d: a8:6a:5e:af:08:b2:67:d2:b7:6c:37:35:a7:b3:94: 54:44:84:42:83:d3:8f:80:24:5c:da:98:ed:88:66: 26:25:cb:27:e7:2b:65:1e:c1:f9:54:4a:33:35:ab: b0:06:a2:82:28:30:d4:88:58:7c:3b:db:fe:bb:66: ce:e7:57:d9:cf:f6:e0:26:15:50:c0:63:53:7f:43: 22:5e:eb:cb:20:5b:c9:a7:4d:15:cd:07:37:5e:64: 18:ca:98:af:29:0f:4f:8d:0d:45:49:3c:de:2c:16: 53:93:f6:fd:5b:4c:33:af:21:4b:d9:e1:53:71:a7: b3:d3:b1:4e:97:ac:73:b8:ee:e7:4e:4e:f0:8b:b3: d2:20:20:1e:32:54:de:00:d9:45:00:39:93:15:71: 3c:9c:17:cf:56:e5:38:7f:c6:49:8f:a9:0c:8a:3b: 29:f0:17:c8:c1:04:24:fe:89:74:15:c8:21:bb:55: fc:b5:ed:46:ef:2b:2e:03:be:ff:9e:3e:cb:46:27: c6:2e:af:81:fa:19:25:3d:e2:09:c4:cc:b9:e8:72: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:43:E9:40:81:EC:47:98:B9:02:19:44:E8:68:72:42:C3:6F:BD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58afe234-22fd-32e1-ae5d-a44ee4d80579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a3:d6:be:87:98:25:d5:7c:b2:5d:90:04:1b:2b:ee:25:ff: f5:dd:28:fa:76:f1:4b:72:30:a4:bc:84:06:4b:9b:be:a9:25: 3e:7c:86:41:38:6e:4b:26:a6:ce:e1:02:51:f5:e9:83:02:f1: 26:c1:c0:96:84:37:75:5f:88:aa:19:b8:c8:95:f4:bf:5a:8e: 17:60:bd:cc:d5:17:2c:ca:c4:a6:8e:d4:dd:07:bf:3c:db:a5: e8:5a:a0:b2:e6:3b:8a:3f:05:49:c3:f7:59:3d:e5:05:b1:85: eb:c1:97:70:ea:5d:43:08:9e:c3:65:d4:8b:cd:f5:32:88:94: 5f:cf:68:9d:80:d6:1f:5f:1e:b3:25:f0:df:a9:15:e2:e9:1f: 99:e1:a7:ce:69:a7:fc:30:7f:81:14:ed:73:8f:35:14:91:11: 88:b6:9f:3a:70:6e:1e:36:0c:45:15:ec:83:d6:d9:5e:97:23: 26:e5:4f:5f:6b:a1:30:ac:30:f5:e8:c1:fc:1f:89:23:d9:ea: 48:d7:9c:2b:0b:ca:e9:43:01:c4:b7:6c:2d:a2:a7:c5:fe:10: 3d:ef:31:06:19:95:aa:58:77:5f:58:92:69:31:f4:d1:7e:f4: b7:45:da:13:de:c3:1f:38:f4:65:b4:e6:6f:af:01:42:87:e0: 7c:5f:13:16 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuavNc224KVwtWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk YzU4NjdiODQtODQ3Ni00Nzc3LWFjN2ItZjY0Y2ZiZWRjODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5btLd8o0E9gwL2jAPXYisR6LOG1IykSjLym 2l5EYsQq9lsCiyK5o1cwN52oal6vCLJn0rdsNzWns5RURIRCg9OPgCRc2pjtiGYm Jcsn5ytlHsH5VEozNauwBqKCKDDUiFh8O9v+u2bO51fZz/bgJhVQwGNTf0MiXuvL IFvJp00VzQc3XmQYypivKQ9PjQ1FSTzeLBZTk/b9W0wzryFL2eFTcaez07FOl6xz uO7nTk7wi7PSICAeMlTeANlFADmTFXE8nBfPVuU4f8ZJj6kMijsp8BfIwQQk/ol0 Fcghu1X8te1G7ysuA77/nj7LRifGLq+B+hklPeIJxMy56HJ8CQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMtD6UCB7EeYuQIZROhockLDb71pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNThhZmUyMzQtMjJmZC0z MmUxLWFlNWQtYTQ0ZWU0ZDgwNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7o9a+h5gl1XyyXZAEGyvuJf/13Sj6dvFLcjCk vIQGS5u+qSU+fIZBOG5LJqbO4QJR9emDAvEmwcCWhDd1X4iqGbjIlfS/Wo4XYL3M 1RcsysSmjtTdB78826XoWqCy5juKPwVJw/dZPeUFsYXrwZdw6l1DCJ7DZdSLzfUy iJRfz2idgNYfXx6zJfDfqRXi6R+Z4afOaaf8MH+BFO1zjzUUkRGItp86cG4eNgxF FeyD1tlelyMm5U9fa6EwrDD16MH8H4kj2epI15wrC8rpQwHEt2wtoqfF/hA97zEG GZWqWHdfWJJpMfTRfvS3RdoT3sMfOPRltOZvrwFCh+B8XxMW -----END CERTIFICATE-----Generated at Sun Apr 27 17:49:04 2025 by rpki-client