$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa File: 5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa (raw, json) Hash identifier: OsSt0BZJEt6pHP8n0EGAqlbPPF1OwAPG5EnTcZWQ3y0= Subject key identifier: D7:DA:3A:55:B2:BB:EF:40:6B:0B:0F:EC:69:18:A7:83:B1:6E:AA:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849754470F65A62DBE0E21D4A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 397197 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:70:f6:5a:62:db:e0:e2:1d:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=353091f4-8849-4054-8c0f-7de02ab5aaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:89:e1:a8:d7:7b:d5:71:73:f3:92:bf:a0: 84:aa:d9:40:ca:ad:67:3f:4f:22:45:d5:79:86:5f: ad:ca:d9:a4:1e:4a:52:a6:10:04:7a:9a:14:8b:b4: 09:8d:f0:b9:f4:17:5d:74:69:d0:ec:54:ef:a0:69: 3a:0b:5a:c8:63:02:89:22:10:28:ed:15:8c:d9:bd: 5c:70:57:89:9a:41:74:44:fc:9f:49:f3:8a:67:4d: fb:24:5b:a8:4e:83:7c:1f:1c:61:28:3b:25:34:c1: 10:a1:87:46:2a:7b:59:3d:82:ea:8c:53:c0:e1:aa: f6:c1:d3:f8:e7:e1:25:8e:09:7e:ae:06:68:66:88: 20:0e:5e:ef:9d:a8:16:7e:a9:b7:c4:d2:2e:05:3d: 64:4a:85:29:fa:7a:12:a2:1a:76:53:de:8a:97:5f: 6d:a4:04:69:09:f9:dc:97:83:b4:69:c3:ff:0a:f1: e4:96:35:57:1a:4e:e7:9b:8d:e1:82:df:1d:82:8e: 31:75:13:b1:4c:1a:57:7d:9c:18:51:36:ec:3b:00: 63:2e:17:c6:5a:ac:e9:f3:30:e5:ed:c9:3a:5b:62: 4c:10:f5:ad:7b:26:3b:41:fe:06:7e:16:8e:34:5a: c8:f4:ea:fb:97:b9:81:b8:1d:0d:33:78:08:ef:b7: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DA:3A:55:B2:BB:EF:40:6B:0B:0F:EC:69:18:A7:83:B1:6E:AA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:87:77:6c:ce:f2:0a:46:3f:5a:ba:9b:03:a1:9c:aa:32:b6: f8:dc:60:a6:cf:47:91:0d:1e:db:bb:fd:6a:ad:29:17:06:ca: 7c:bf:95:0a:5a:b1:99:a6:55:5b:66:3a:ee:20:b8:02:50:15: 24:f2:e2:30:1f:04:c6:d7:0a:0f:86:3d:bb:69:db:65:07:34: 8d:fd:ac:3d:ec:6a:41:51:6a:92:29:a0:f5:3c:47:79:7f:fc: c8:e6:a5:28:5d:52:f2:f3:09:af:de:6e:80:a9:de:c3:d6:8a: 00:99:14:15:79:fe:92:08:a2:9a:88:64:af:b3:39:12:0a:42: 92:de:b0:a5:6f:79:d9:b9:0e:61:b8:ab:6f:60:84:0a:bf:36: 2a:71:70:22:80:0e:32:f7:df:dd:7d:d1:30:c9:74:3a:62:1d: 7c:d5:3f:7a:bb:f2:43:64:85:1e:cc:66:8a:39:98:9e:24:d0: f9:6a:20:53:70:48:3f:77:3a:88:7d:74:01:02:51:11:b1:09: 42:5f:6b:05:66:38:6c:51:57:1d:60:14:5c:95:5c:02:ad:75: a4:c3:51:77:0a:fb:97:43:e9:da:04:0a:74:cb:f3:8d:9e:b5: 12:62:82:93:db:25:f0:5f:75:8e:b4:dd:cf:47:ab:3f:1f:0f: e4:58:97:d1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RHD2WmLb4OIdSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MzUzMDkxZjQtODg0OS00MDU0LThjMGYtN2RlMDJhYjVhYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwuJ4ajXe9Vxc/OSv6CEqtlAyq1nP08iRdV5 hl+tytmkHkpSphAEepoUi7QJjfC59BdddGnQ7FTvoGk6C1rIYwKJIhAo7RWM2b1c cFeJmkF0RPyfSfOKZ037JFuoToN8HxxhKDslNMEQoYdGKntZPYLqjFPA4ar2wdP4 5+Eljgl+rgZoZoggDl7vnagWfqm3xNIuBT1kSoUp+noSohp2U96Kl19tpARpCfnc l4O0acP/CvHkljVXGk7nm43hgt8dgo4xdROxTBpXfZwYUTbsOwBjLhfGWqzp8zDl 7ck6W2JMEPWteyY7Qf4GfhaONFrI9Or7l7mBuB0NM3gI77fioQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNfaOlWyu+9AawsP7GkYp4OxbqoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWM1YjVmNjEtNjIyYS0z M2JjLWFmYmUtZWQzZTE3MGJkODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6h3dszvIKRj9aupsDoZyqMrb43GCmz0eRDR7b u/1qrSkXBsp8v5UKWrGZplVbZjruILgCUBUk8uIwHwTG1woPhj27adtlBzSN/aw9 7GpBUWqSKaD1PEd5f/zI5qUoXVLy8wmv3m6Aqd7D1ooAmRQVef6SCKKaiGSvszkS CkKS3rClb3nZuQ5huKtvYIQKvzYqcXAigA4y99/dfdEwyXQ6Yh181T96u/JDZIUe zGaKOZieJND5aiBTcEg/dzqIfXQBAlERsQlCX2sFZjhsUVcdYBRclVwCrXWkw1F3 CvuXQ+naBAp0y/ONnrUSYoKT2yXwX3WOtN3PR6s/Hw/kWJfR -----END CERTIFICATE-----Generated at Sun Apr 27 22:13:18 2025 by rpki-client