$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c7dce59-ac8f-3699-bdfa-714aef34c6e0.roa File: 5c7dce59-ac8f-3699-bdfa-714aef34c6e0.roa (raw, json) Hash identifier: /yKqWQymNrspNVyr0povBRFn2oaezrWrFMxLOl3CS5c= Subject key identifier: 96:10:56:65:10:24:1C:3D:49:3D:60:B0:6B:5F:27:95:6F:60:7D:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C223F6FA7678A90B0DB200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c7dce59-ac8f-3699-bdfa-714aef34c6e0.roa Signing time: Tue 15 Apr 2025 12:34:56 +0000 ROA not before: Tue 15 Apr 2025 12:34:56 +0000 ROA not after: Mon 14 Jul 2025 12:34:56 +0000 asID: 396565 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:f6:fa:76:78:a9:0b:0d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:56 2025 GMT Not After : Jul 14 12:34:56 2025 GMT Subject: CN=c228ae9a-6aa4-4403-a53c-e0caf8006e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:37:5c:32:ce:6d:e9:40:97:8d:f4:cf:4e: f9:73:de:7f:52:71:6e:8c:1e:ac:78:48:62:c0:12: dc:65:24:83:88:7a:54:6d:e3:57:c0:a3:dc:d0:4f: 83:5b:6c:07:ea:af:99:16:65:77:73:a0:fe:0c:94: b3:3c:63:8e:d8:5e:0f:7b:01:c1:63:72:af:34:fe: 1c:ef:12:a5:c2:53:54:33:5f:e2:e4:13:68:3b:43: f1:b5:cf:88:fa:ca:cf:65:8c:ba:5f:9a:78:03:7f: b8:17:dc:0f:ef:1a:18:de:7f:97:ee:a3:fe:d3:91: be:12:b8:68:e8:9c:b7:7c:db:fd:ed:95:b9:cb:7b: df:99:9c:88:c7:58:e7:5d:c6:e1:58:5f:46:8e:a9: fe:84:33:97:21:b3:87:8c:bd:da:f5:d4:ab:f2:6b: cc:bb:19:6d:d2:3a:d4:87:24:da:36:52:53:62:26: b9:9a:33:ab:15:bb:d9:32:65:f8:71:d7:18:06:ad: 33:00:3b:05:5d:19:df:e6:d4:39:41:d5:2d:4a:ef: 59:32:25:ae:f4:40:57:0e:0b:84:f3:34:ec:a1:e6: 08:35:d2:4b:34:13:48:ef:19:bc:30:fa:a0:c4:05: 93:03:2a:a3:0c:f8:4f:3a:7a:83:57:6b:b4:61:06: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:10:56:65:10:24:1C:3D:49:3D:60:B0:6B:5F:27:95:6F:60:7D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c7dce59-ac8f-3699-bdfa-714aef34c6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:51:18:8b:b8:4c:db:a0:a9:3c:f9:32:3b:06:ff:d0:ac:f6: 0b:80:58:c6:22:35:5d:03:02:d0:24:ff:86:f9:fd:4f:0f:88: df:e4:0f:5c:fb:20:4f:94:66:c0:02:dd:be:f1:39:58:8e:b8: 78:56:b8:98:4e:61:70:1e:9e:0a:88:5b:9a:fd:31:ac:76:8d: 75:07:70:95:b9:e3:f2:7b:a3:8f:c3:1c:fb:1f:3c:7b:25:fe: fe:e8:67:95:da:08:38:f4:4d:68:93:48:5f:52:b9:c2:83:c1: 78:c7:8b:d4:0f:c5:3b:d2:f5:8e:62:98:4e:fb:14:b8:c0:72: 17:7d:4d:16:a0:bc:86:ae:ea:88:be:c6:bc:41:22:49:d5:4a: f8:28:72:43:01:36:ea:dc:67:60:8f:ef:86:85:ad:4f:2c:f1: bc:6b:f6:c1:97:bf:d4:1c:41:9d:bb:be:c4:fb:43:95:18:28: 73:48:f8:d8:0b:e6:8f:dc:b5:c0:0d:3e:20:f2:fa:6e:22:68: 27:2b:50:62:8c:96:54:c0:11:b9:fe:92:88:2a:1f:1f:0b:86: 45:06:39:bc:6b:33:1b:27:94:f0:bc:8b:df:75:59:bd:e7:99: 36:ee:be:45:f5:8f:63:72:8b:fa:46:ed:01:dd:c7:48:75:a8: b5:eb:c3:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiP2+nZ4qQsNsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NloXDTI1MDcxNDEyMzQ1NlowLzEtMCsGA1UEAxMk YzIyOGFlOWEtNmFhNC00NDAzLWE1M2MtZTBjYWY4MDA2ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydM3XDLObelAl430z075c95/UnFujB6seEhi wBLcZSSDiHpUbeNXwKPc0E+DW2wH6q+ZFmV3c6D+DJSzPGOO2F4PewHBY3KvNP4c 7xKlwlNUM1/i5BNoO0Pxtc+I+srPZYy6X5p4A3+4F9wP7xoY3n+X7qP+05G+Erho 6Jy3fNv97ZW5y3vfmZyIx1jnXcbhWF9Gjqn+hDOXIbOHjL3a9dSr8mvMuxlt0jrU hyTaNlJTYia5mjOrFbvZMmX4cdcYBq0zADsFXRnf5tQ5QdUtSu9ZMiWu9EBXDguE 8zTsoeYINdJLNBNI7xm8MPqgxAWTAyqjDPhPOnqDV2u0YQZoAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYQVmUQJBw9ST1gsGtfJ5VvYH2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWM3ZGNlNTktYWM4Zi0z Njk5LWJkZmEtNzE0YWVmMzRjNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9RGIu4TNugqTz5MjsG/9Cs9guAWMYiNV0DAtAk/4b5/U8PiN/k D1z7IE+UZsAC3b7xOViOuHhWuJhOYXAengqIW5r9Max2jXUHcJW54/J7o4/DHPsf PHsl/v7oZ5XaCDj0TWiTSF9SucKDwXjHi9QPxTvS9Y5imE77FLjAchd9TRagvIau 6oi+xrxBIknVSvgockMBNurcZ2CP74aFrU8s8bxr9sGXv9QcQZ27vsT7Q5UYKHNI +NgL5o/ctcANPiDy+m4iaCcrUGKMllTAEbn+kogqHx8LhkUGObxrMxsnlPC8i991 Wb3nmTbuvkX1j2Nyi/pG7QHdx0h1qLXrwyQ= -----END CERTIFICATE-----Generated at Sun Apr 27 19:10:13 2025 by rpki-client